| <!doctype html> |
| <!-- |
| Licensed to the Apache Software Foundation (ASF) under one or more |
| contributor license agreements. See the NOTICE file distributed with |
| this work for additional information regarding copyright ownership. |
| The ASF licenses this file to You under the Apache License, Version 2.0 |
| (the "License"); you may not use this file except in compliance with |
| the License. You may obtain a copy of the License at |
| |
| https://www.apache.org/licenses/LICENSE-2.0 |
| |
| Unless required by applicable law or agreed to in writing, software |
| distributed under the License is distributed on an "AS IS" BASIS, |
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| See the License for the specific language governing permissions and |
| limitations under the License. |
| --> |
| <html lang="en" prefix="og: https://ogp.me/ns#"> |
| <head> |
| <meta charset="UTF-8"> |
| <meta name="viewport" content="width=device-width, initial-scale=1"> |
| <title>Security Reports</title> |
| <!-- Below Meta Tags Generated via https://www.opengraph.xyz --> |
| <!-- If you don't care about social media then remove this section --> |
| <!-- Values are set in pelicanconf.py --> |
| <!-- HTML Meta Tags --> |
| <meta name="description" content="The official developer website of the Apache OpenOffice open source project, home of OpenOffice Writer, Calc, Impress, Draw and Base."> |
| <meta name="keywords" content="OpenOffice, Open Office, Apache OpenOffice, Apache Open Office, OpenOffice.org, Developer, Project, Website, Official, Writer, Calc, Impress, Draw, Base, ODF, Open Document Format"> |
| <!-- Facebook Meta Tags --> |
| <meta property="og:url" content="https://openoffice.apache.org"> |
| <meta property="og:type" content="website"> |
| <meta property="og:title" content="Apache OpenOffice"> |
| <meta property="og:description" content="The official developer website of the Apache OpenOffice open source project, home of OpenOffice Writer, Calc, Impress, Draw and Base."> |
| <meta property="og:image" content="https://openoffice.apache.org/images/AOO4_website_logo.png"> |
| <!-- Twitter Meta Tags --> |
| <meta name="twitter:card" content="summary_large_image"> |
| <meta property="twitter:domain" content="openoffice.apache.org"> |
| <meta property="twitter:url" content="https://openoffice.apache.org"> |
| <meta name="twitter:title" content="Apache OpenOffice"> |
| <meta name="twitter:description" content="The official developer website of the Apache OpenOffice open source project, home of OpenOffice Writer, Calc, Impress, Draw and Base."> |
| <meta name="twitter:image" content="https://openoffice.apache.org/images/AOO4_website_logo.png"> |
| <!-- Above Meta Tags Generated via https://www.opengraph.xyz --> |
| <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" /> |
| <link rel="icon" href="/favicon.ico" type="image/x-icon" /> |
| <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> |
| </head> |
| |
| <body id="index" class="home"> |
| <div id="banner"> |
| <div id="bannerleft"><a alt="Apache OpenOffice" href="/"> |
| <img id="logo" alt="Apache OpenOffice" src="/images/AOO4_website_logo.png" height="60" width="161"/></a></div> |
| <div id="bannercenter">The Free and Open Productivity Suite</div> |
| </div> |
| <div id="clear"></div> |
| <nav class="navbar navbar-expand-sm navbar-dark bg-primary"> |
| <button class="navbar-toggler" type="button" |
| data-toggle="collapse" data-target="#navbarSupportedContent" |
| aria-controls="navbarSupportedContent" aria-expanded="false" |
| aria-label="Toggle navigation"> |
| <span class="navbar-toggler-icon"></span> |
| </button> |
| <div class="collapse navbar-collapse" id="navbarSupportedContent"> |
| <ul class="navbar-nav mr-auto"> |
| <li class="nav-item active dropdown"> |
| <a class="nav-link dropdown-toggle" href="#" id="generalDropdown" |
| role="button" data-toggle="dropdown" aria-expanded="false">General</a> |
| <ul class="dropdown-menu" aria-labelledby="generalDropdown"> |
| <li><a class="dropdown-item" href="/index.html">About</a></li> |
| <li><a class="dropdown-item" href="/downloads.html">Downloads</a></li> |
| <li><a class="dropdown-item" href="/license.html">License</a></li> |
| <li><a class="dropdown-item" href="/trademarks.html">Trademarks</a></li> |
| <li><a class="dropdown-item" href="/press.html">Press</a></li> |
| <li><a class="dropdown-item" href="https://www.openoffice.org/">OpenOffice.org</a></li> |
| </ul> |
| </li> |
| <li class="nav-item active dropdown"> |
| <a class="nav-link dropdown-toggle" href="#" id="communityDropdown" |
| role="button" data-toggle="dropdown" aria-expanded="false">Community</a> |
| <ul class="dropdown-menu" aria-labelledby="communityDropdown"> |
| <li><a class="dropdown-item" href="/get-involved.html">Get Involved</a></li> |
| <li><a class="dropdown-item" href="/orientation/index.html">Orientation</a></li> |
| <li><a class="dropdown-item" href="/mailing-lists.html">Mailing Lists</a></li> |
| <li><a class="dropdown-item" href="/social.html">Social Networking</a></li> |
| <li><a class="dropdown-item" href="/events.html">Events</a></li> |
| <li><a class="dropdown-item" href="https://www.openoffice.org/support/">Support</a></li> |
| <li><a class="dropdown-item" href="/native-lang.html">Native Language</a></li> |
| <li><a class="dropdown-item" href="https://cwiki.apache.org/confluence/display/OOOUSERS/">Planning Wiki</a></li> |
| <li><a class="dropdown-item" href="/people.html">People</a></li> |
| <li><a class="dropdown-item" href="/community-faqs.html">Community FAQs</a></li> |
| </ul> |
| </li> |
| <li class="nav-item active dropdown"> |
| <a class="nav-link dropdown-toggle" href="#" id="developmentDropdown" |
| role="button" data-toggle="dropdown" aria-expanded="false">Development</a> |
| <ul class="dropdown-menu" aria-labelledby="developmentDropdown"> |
| <li><a class="dropdown-item" href="/source.html">Source Code</a></li> |
| <li><a class="dropdown-item" href="/bug-tracking.html">Bug Tracking</a></li> |
| <li><a class="dropdown-item" href="/qa.html">Quality Assurance</a></li> |
| <li><a class="dropdown-item" href="/translate.html">Translation</a></li> |
| <li><a class="dropdown-item" href="/website-local.html">Website</a></li> |
| <li><a class="dropdown-item" href="/security.html">Security Reports</a></li> |
| <li><a class="dropdown-item" href="/contributing-code.html">Contributing Code</a></li> |
| <li><a class="dropdown-item" href="/developer-faqs.html">Developer FAQs</a></li> |
| </ul> |
| </li> |
| <li class="nav-item active dropdown"> |
| <a class="nav-link dropdown-toggle" href="#" id="projectDropdown" |
| role="button" data-toggle="dropdown" aria-expanded="false">Project</a> |
| <ul class="dropdown-menu" aria-labelledby="projectDropdown"> |
| <li><a class="dropdown-item" href="https://blogs.apache.org/OOo/">Project Blog</a></li> |
| <li><a class="dropdown-item" href="/pmc-faqs.html">PMC FAQs</a></li> |
| </ul> |
| </li> |
| </ul> |
| <div class="navbar-nav" style="padding-top: 0.5rem;"> |
| <div class="nav-item dropdown dropdown-menu-right active"> |
| <a class="nav-link dropdown-toggle" href="#" |
| role="button" data-toggle="dropdown" aria-haspopup="true" |
| aria-expanded="false"><img src="https://www.apache.org/foundation/press/kit/feather.svg" |
| width="32" height="32" class="d-inline-block align-top" |
| alt="Apache Feather">The ASF</a> |
| <div class="dropdown-menu dropdown-menu-right"> |
| <a class="dropdown-item" href="https://www.apache.org/">Website</a> |
| <a class="dropdown-item" href="https://www.apache.org/licenses/">License</a> |
| <a class="dropdown-item" href="https://www.apache.org/security/">Security</a> |
| <a class="dropdown-item" href="https://www.apache.org/events/current-event">Events</a> |
| <a class="dropdown-item" href="https://www.openoffice.org/donations.html">Donations</a> |
| <a class="dropdown-item" href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a> |
| <a class="dropdown-item" href="https://www.apache.org/foundation/thanks.html">Thanks</a> |
| </div> |
| </div> |
| </div> |
| </div> </nav> |
| <div id="contenta"> |
| <br/> |
| <h2 id="reporting-new-security-problems-with-apache-openoffice">Reporting New Security Problems with Apache OpenOffice<a class="headerlink" href="#reporting-new-security-problems-with-apache-openoffice" title="Permalink">¶</a></h2> |
| <p>The Apache Software Foundation takes a very active stance in eliminating security problems with Apache OpenOffice.</p> |
| <p>We strongly encourage folks to report such problems to our private security mailing list first, before disclosing them in a public forum.</p> |
| <p><strong>Please note that the security mailing list should only be used for reporting undisclosed security vulnerabilities in Apache OpenOffice and managing |
| the process of fixing such vulnerabilities. We cannot accept regular bug reports or other queries at this address. All mail sent to this address that |
| does not relate to an undisclosed security problem in Apache OpenOffice will be ignored.</strong></p> |
| <p>If you need to report a bug that isn't an undisclosed security vulnerability, please use the bug reporting page.</p> |
| <p>Questions about:</p> |
| <ul> |
| <li>how to configure OpenOffice securely</li> |
| <li>if a vulnerability applies to your particular application</li> |
| <li>obtaining further information on a published vulnerability</li> |
| <li>availability of patches and/or new releases</li> |
| </ul> |
| <p>should be addressed to the project's main mailing list. Please see the mailing lists page for details of how to subscribe.</p> |
| <p>The primary <em>private</em> security mailing address is: <a href="mailto:security@openoffice.apache.org">security@openoffice.apache.org</a></p> |
| <p>Please note that we do not use a team OpenPGP key. If you wish to encrypt |
| your e-mail to the security list then please use the OpenPGP keys of the following |
| subset of members of the Apache OpenOffice Security Team and be aware that |
| it may take us a little longer to respond to the issue.</p> |
| <ul> |
| <li>Patricia Shanahan 2F26 A8EE 0B87 BAB0 0DF2 9622 3932 070F A579 35C5 - <a href="https://people.apache.org/keys/committer/pats.asc">pats</a></li> |
| <li>Damjan Jovanovic B034 1587 D6D2 E744 B6B8 8259 5C77 E6B1 9D41 C6CA - <a href="https://people.apache.org/keys/committer/damjan.asc">damjan</a></li> |
| <li>Andrea Pescetti 6D09 7A5C A3A8 C1E5 314D 9E67 013D A51F 8F0E 4C63 - <a href="https://people.apache.org/keys/committer/pescetti.asc">pescetti</a></li> |
| </ul> |
| <p>Bulletins about vulnerabilities and their mitigations are found at the <a href="https://www.openoffice.org/security/bulletin.html">Apache OpenOffice Security Bulletins archive</a>. Bulletins for legacy OpenOffice.org releases preceding Apache OpenOffice 3.4.0 are included for historical purposes.</p> |
| |
| </div> |
| |
| <footer class="navbar-expand-lg navbar-light bg-light"> |
| <div class="footer" id="footer"> |
| <div class="container-fluid"> |
| Copyright © 2011-2021 The Apache Software Foundation, |
| Licensed under the |
| <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0.</a> | <a href="/contact.html">Contact Us</a> | <a href="/terms.html">Terms of Use</a> | <a href="/privacy.html">Privacy</a> |
| <br/> |
| Apache, OpenOffice, OpenOffice.org and the seagull logo are registered trademarks of The Apache Software Foundation. |
| The Apache feather logo is a trademark of The Apache Software Foundation. |
| Other names appearing on the site may be trademarks of their respective owners. |
| </div><!-- #container-fluid --> |
| <div class="row container-fluid"> |
| <div class="col-sm"> |
| <a href="https://www.apache.org/"> |
| <img src="https://www.apache.org/img/asf_logo.png" alt="The Apache Software Foundation" style="border: 0; margin-top: 2px" width="200" height="82"> |
| </a> |
| </div> |
| <div class="col-sm center-align"> |
| <a href="https://www.apache.org/foundation/contributing.html"> |
| <img src="https://www.apache.org/images/SupportApache-small.png" alt="Support The ASF" height="80" width="80"> |
| </a> |
| </div> |
| <div class="col-sm right-align"> |
| <a class="acevent" data-format="wide" data-mode="light" data-event="random"></a> |
| </div> |
| </div> |
| </div> |
| </footer> |
| <!-- Start load of stylesheets (will need to upgrade periodically) --> |
| <link rel="stylesheet" |
| href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" |
| integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" |
| crossorigin="anonymous"> |
| <link rel="stylesheet" |
| href="https://cdnjs.cloudflare.com/ajax/libs/github-markdown-css/3.0.1/github-markdown.min.css" |
| crossorigin="anonymous"> |
| <link href="/theme/css/openoffice.css" rel="stylesheet" type="text/css"> |
| <!-- End stylesheets --> |
| <!-- Start the loading of javascript frameworks (will need to upgrade periodically) --> |
| <script src="https://www.apachecon.com/event-images/snippet.js"></script> |
| <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.slim.min.js" |
| integrity="sha512-6ORWJX/LrnSjBzwefdNUyLCMTIsGoNP6NftMy2UAm1JBm6PRZCO1d7OHBStWpVFZLO+RerTvqX/Z9mBFfCJZ4A==" |
| crossorigin="anonymous"></script> |
| <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js" |
| integrity="sha384-UO2eT0CpHqdSJQ6hJty5KVphtPhzWj9WO1clHTMGa3JDZwrnQq4sF86dIHNDz0W1" |
| crossorigin="anonymous"></script> |
| <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js" |
| integrity="sha384-JjSmVgyd0p3pXB1rRibZUAYoIIy6OrQ6VrjIEaFf/nJGzIxFDsf4x0xIM+B07jRM" |
| crossorigin="anonymous"></script> |
| <!-- End the loading of javascript frameworks --> |
| |
| <!-- Source: security.md; Template: page; Url: security.html --> |
| </body> |
| </html> |
