[tdf-discuss] Re: Stepping back from The Document Foundation

2013-01-15 Thread Florian Monfort
Hi Michael, I think I might have made it a little too dramatic... I'm not saying you don't meet my expectations, I'm saying you're doing well, but I just don't feel comfortable with the way we actually work. Also that doesn't mean I'm totally leaving everything that is LibreOffice: I'll keep on

Re: [tdf-discuss] Re: Stepping back from The Document Foundation

2013-01-15 Thread Italo Vignoli
Hi Florian, independent free software projects work like The Document Foundation. Of course, there is always a chance to develop a business around LibreOffice, but the core of the foundation will always be based on volunteer work and this, in my opinion, is not a problem but an advantage, becau

RE: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability

2013-01-15 Thread Dennis E. Hamilton
Again, thanks to Simon Phipps for retweeting the information. It appears that one should *not* assume that OpenJDK does not share vulnerabilities with the Oracle Java SE and JDK: The log of changes to OpenJDK for the recent vulnerability (just as indication of the Oracle updating of OpenJDK): <

[tdf-discuss] Question to Milan organizers

2013-01-15 Thread Norbert Thiebaud
Italo, and fellow Milan Candidacy organizer I'd like to confirm that I read correctly the proposal... Did I read correctly that under Milan proposal the conference will be split in 2 different venues -- like in Paris -- separated by an around 30 minutes walk ? or are the 2 venues will be in use

Re: [tdf-discuss] LibreOffice and Java Security: OpenJDK Vulnerability

2013-01-15 Thread Simon Phipps
I'm investigating, but the issue is a sandbox security manager bypass using unauthorised reflection and that's exploited using Rhino Javascript. So the context has to be a browser for there to be an issue even if OpenJDK is affected. See https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0422 for