CVE-2022-37400: Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password

2022-08-12 Thread Carl B. Marcum
Severity: important Description: Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where the required initialization vector

CVE-2022-37401: Apache OpenOffice Weak Master Keys

2022-08-12 Thread Carl B. Marcum
Severity: important Description: Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where master key was poorly encoded resu

Re: Can't find boostrap when building

2022-08-12 Thread Hao Wang
Looks like I need to provide location for dmake source code. How can I fix this problem ? checking for gcc... /usr/bin/gcc checking the GNU gcc compiler version... checked (gcc 11) checking for -Bsymbolic-functions linker support ... found checking whether to enable pch feature... no checking for

Re: Can't find boostrap when building

2022-08-12 Thread Peter Kovacs
you find dmake at: https://github.com/jimjag/dmake/archive/v4.13.1/dmake-4.13.1.tar.gz then you need to build it with make, and point the configfuration towards the folder where you build dmake. Do the same for epm https://github.com/jimjag/epm/archive/v5.0.0/epm-5.0.0.tar.gz all the best