You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@openoffice.apache.org by bu...@apache.org on 2015/11/11 12:05:24 UTC

[Issue 126641] New: Update links when opening preference ignored

https://bz.apache.org/ooo/show_bug.cgi?id=126641

          Issue ID: 126641
        Issue Type: DEFECT
           Summary: Update links when opening preference ignored
           Product: Calc
           Version: 4.1.2
          Hardware: Mac
                OS: Mac OS X 10.11
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P5 (lowest)
         Component: configuration
          Assignee: issues@openoffice.apache.org
          Reporter: mattf10@yahoo.com

Created attachment 85125
  --> https://bz.apache.org/ooo/attachment.cgi?id=85125&action=edit
Screenshot of settings/prompt

When opening a document with links to other docs, prompt appears: "This file
contains links to other files.  Should they be updated?".

Under preferences, openoffice, calc, general, updating: "Update links when
opening" is set to "Always".

Therefore, I should not be prompted to open the links.  This started happening
after upgrading from 4.1.1 to 4.1.2

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

orcmid <or...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|Mac OS X 10.11              |All
                 CC|                            |orcmid@apache.org
           Hardware|Mac                         |All
             Latest|---                         |4.1.2
    Confirmation in|                            |
         Issue Type|DEFECT                      |ENHANCEMENT

--- Comment #2 from orcmid <or...@apache.org> ---
(In reply to Matt from comment #0)
> Created attachment 85125 [details]
> Screenshot of settings/prompt
> 
> When opening a document with links to other docs, prompt appears: "This file
> contains links to other files.  Should they be updated?".
> 
> Under preferences, openoffice, calc, general, updating: "Update links when
> opening" is set to "Always".
> 
> Therefore, I should not be prompted to open the links.  This started
> happening after upgrading from 4.1.1 to 4.1.2

This change is by design.  The change is part of the remedy for security issue
CVE-2015-4551, with advisory at
https://www.openoffice.org/security/cves/CVE-2015-4551.html.  To expedite that
solution, the "Always" configuration option has been disabled.

It *may* be that a less heavy-handed approach (rather than requiring that users
always confirm link-updating in Writer and Calc) is possible.  That will
require more analysis.

The possible outcomes are (1) the "Always" options are simply removed, (2) some
kinds of links to outside-the-document resources will always prompt, (3) some
kinds of links to outside-the-document will not be allowed (similar to Excel
and Word behavior), or (4) some combination/alternative not yet considered. 

For now, this is by-design, and this clearly does raise an issue for some
practices involving linked resources. 

I am confirming this for all platforms and changing it to an Enhancement matter
with regard to improved usability while guarding against the CVE-2015-4551
exploit.

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

Matthias Seidel <ms...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mseidel@apache.org

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

orcmid <or...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|orcmid@apache.org           |

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

--- Comment #3 from Andrea Pescetti <pe...@apache.org> ---
I confirm what Dennis wrote. Note that the implementation in 4.1.2 is meant to
allow (of course, this is for trusted environments only!) the automatic update
of links if you lower your security macro to the minimum level in Tools -
Options - OpenOffice - Security. In that case you won't be prompted.

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

oooforum (fr) <oo...@free.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |oooforum@free.fr

--- Comment #5 from oooforum (fr) <oo...@free.fr> ---
*** Issue 127582 has been marked as a duplicate of this issue. ***

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

j.nitschke@ok.de changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |CONFIRMED
     Ever confirmed|0                           |1
                 CC|                            |j.nitschke@ok.de,
                   |                            |pescetti@apache.org

--- Comment #1 from j.nitschke@ok.de ---
possible fallout of revision 1707169

http://svn.apache.org/viewvc?rev=1707169&view=rev
http://svn.apache.org/viewvc?rev=1707172&view=rev (AOO410)

can't find related issue due wrong commit comment / hidden issue?
adding Andrea Pescetti to solve mystery

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

Marcus <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jimoconnor100@hotmail.com

--- Comment #4 from Marcus <ma...@apache.org> ---
*** Issue 127213 has been marked as a duplicate of this issue. ***

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

oooforum (fr) <oo...@free.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |steffen.grund@oracle.com

--- Comment #6 from oooforum (fr) <oo...@free.fr> ---
*** Issue 33811 has been marked as a duplicate of this issue. ***

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126641] Update links when opening preference ignored

Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=126641

Chuck Spalding <cs...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |cspalding3@gmail.com

--- Comment #7 from Chuck Spalding <cs...@gmail.com> ---
Reply to #Andrea_Pescetti in #comment_3:
When the macro security is set to the minimum level, the prompt "This file
contains links to other files. Should they be updated?" is not displayed (i.e.,
as stated in #comment_3).
However, the prompt "Update all links?" is still displayed when "Update links
when opening" is set to "Always".
(Using OpenOffice 4.1.15 on macOS 10.13 [High Sierra].)

-- 
You are receiving this mail because:
You are the assignee for the issue.