Reminder: Apache OpenOffice is vulnerable to a Code Execution bug. There's no fix. The project is effectively unable to provide security support, yet they refuse to tell their users. This is irresponsible. Use LibreOffice instead and tell everyone who uses OO.
Conversation
There were multiple discussions before to shut the project down, including a hillarious one where OO recommended that AV apps could add detection for exploits for a vuln they were unable to fix for months.
1
3
the problem is: openoffice was extremely popular and there are still plenty of people left who learned long ago "With OpenOffice you can get a free office application" and who never heard of LO.
1
3
Oracle decided to spite the developers and community behind the project by granting the code to the Apache project to be released as a separate permissively licensed fork. LibreOffice existed before Apache OpenOffice. was only created to cause harm in the first place.
It's accomplishing the original goal of causing confusion and harm quite well, and Apache is a willing enabler fully behind that mission at this point. It reflects incredibly poorly on them and gives a revealing perspective on their other projects too. Many are similar zombies.
1
1
Apache is a graveyard where corporations drop sources to wither and die while tricking people into using it for years after the best before date. That's the Apache brand. There's no warning telling people to avoid problematic legacy projects like xerces.apache.org/xerces-c/ either.
2
1
3
Show replies


