Apache OpenOffice 4.1.4 released
      Posted Oct 19, 2017 19:32 UTC (Thu)
                               by simosx (guest, #24338)
                              [Link] (7 responses)
       
     
    
      Posted Oct 19, 2017 20:31 UTC (Thu)
                               by glaubitz (subscriber, #96452)
                              [Link] (4 responses)
       
I don't have the impression that anyone inside Apache is interested in the project and I don't see any serious progress anymore. 
What exactly is the point? Am I missing something? 
     
    
      Posted Oct 20, 2017 0:46 UTC (Fri)
                               by ledow (guest, #11753)
                              [Link] (3 responses)
       
AOO is dead. 
Donate the name to them. 
LO are literally doing a better job in every possible respect - coding, marketing, dev changelogs, feature additions, compatibility fixes, source-code cleanup, sucking in updates from other upstream sources, etc. 
As far as I'm concerned, AOO is just someone not wanting / able to give the name to someone else, but to cling onto it for the cachet.  They don't do anything useful or practical, are generating a serious security risk, and that will tarnish their other well-known products (e.g. Apache web server) which can't afford to be associated with a security risk like that. 
There is no advantage to them keeping running with it or trying to boost it at this stage. 
     
    
      Posted Oct 20, 2017 13:47 UTC (Fri)
                               by jospoortvliet (guest, #33164)
                              [Link] 
       
     
      Posted Oct 26, 2017 23:17 UTC (Thu)
                               by cornelio (guest, #117499)
                              [Link] (1 responses)
       
And then opensource-never-dies and software-isn't-truly-alive so such declarations of a project being dead are always premature. 
 
 
     
    
      Posted Oct 27, 2017 14:31 UTC (Fri)
                               by micka (subscriber, #38720)
                              [Link] 
       
     
      Posted Oct 26, 2017 23:25 UTC (Thu)
                               by cornelio (guest, #117499)
                              [Link] 
       
- It is pretty public in its communications. 
They will not turn off the lights unless the AOO Project Management Committee fails to respond. 
     
      Posted Nov 28, 2017 10:22 UTC (Tue)
                               by tialaramex (subscriber, #21167)
                              [Link] 
       
Did you notice "a statement of direction so end users understand what is happening with the project" in the release? Me either. But the board has assured itself that they provided one. So that's nice. 
     
      Posted Oct 19, 2017 20:02 UTC (Thu)
                               by tialaramex (subscriber, #21167)
                              [Link] (2 responses)
       
The AOO PMC is twenty-seven people. Less than half of them take any visible day-to-day role at all, and one of those is Jim Jagielski. The rarely active project chair, Marcus Lange, seems concerned with exactly the sort of transparency-defeating busy work I complained of long previously. 
     
    
      Posted Oct 20, 2017 9:00 UTC (Fri)
                               by georgm (subscriber, #19574)
                              [Link] 
       
 
     
      Posted Oct 21, 2017 0:58 UTC (Sat)
                               by rahvin (guest, #16953)
                              [Link] 
       
     
      Posted Oct 26, 2017 23:22 UTC (Thu)
                               by cesarb (subscriber, #6266)
                              [Link] 
       
Fixed in Apache OpenOffice 4.1.4 
    CVE-2017-3157: Arbitrary file disclosure in Calc and Writer 
 
     
    
      Here is the relevant part about AOO:
Apache OpenOffice 4.1.4 released
      
    C. Article about Apache OpenOffice Waiting for AOO
      
          
    Bertrand: do we want AOO to make public statements about the level
    of activity on the project?
    Rich: it would be good for them to make a public statement
    Chris: no strong opinions about this, but this is not the normal way
    the board interacts with PMCs
    Ted: the issue is the difference between user activity level (downloads)
    and code activity level
    Shane: most of our projects have technical users but AOO users won't
    necessarily know e.g. that security questions may an issue in
    the future
    Bertrand: maybe we should ask them to publish a blog post about the
    status of the project
    Brett: what is our objective? discourage downloads?
    Ted: is either a blog or a disclaimer going to accomplish the
    objective?
    Bertrand: we should have a public statement to make people aware
    Jim: no matter what we do, some people will want more. we should go
    public; ask the PMC to make a statement of direction so end users
    understand what is happening with the project
    @Jim: follow up with the PMC to get a public statement out
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
LibreOffice took the title.
Close up the project.
Turn the lights out
Shut the doors.
There are massive disadvantages to their users and reputation to let it idle or to continue on the status quo.
There are nothing but advantages to shutting it down.
Someone, somewhere has a problem acknowledging that.  And there's just complete apathy for their users.
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
- It respects the independence of its Top Level Projects.
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
Apache OpenOffice 4.1.4 released
      
    CVE-2017-9806: Out-of-Bounds Write in Writer's WW8Fonts Constructor
    CVE-2017-12607: Out-of-Bounds Write in Impress' PPT Filter
    CVE-2017-12608: Out-of-Bounds Write in Writer's ImportOldFormatStyles
 
           