You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by or...@apache.org on 2016/08/12 03:36:18 UTC
svn commit: r14782 - /dev/openoffice/4.1.2-patch1/binaries/Windows/
Author: orcmid
Date: Fri Aug 12 03:36:18 2016
New Revision: 14782
Log:
BETA 0.1.0 of the Apache OpenOffice 4.1.2-patch1 procedure for Windows, including scripts for automatic introduction and reversal of the patch.
Modified:
dev/openoffice/4.1.2-patch1/binaries/Windows/README-4.1.2-patch1-apply-Windows.txt
dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip
dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.asc
dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.md5
dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.sha256
Modified: dev/openoffice/4.1.2-patch1/binaries/Windows/README-4.1.2-patch1-apply-Windows.txt
==============================================================================
--- dev/openoffice/4.1.2-patch1/binaries/Windows/README-4.1.2-patch1-apply-Windows.txt [UTF-8] (original)
+++ dev/openoffice/4.1.2-patch1/binaries/Windows/README-4.1.2-patch1-apply-Windows.txt [UTF-8] Fri Aug 12 03:36:18 2016
@@ -2,12 +2,13 @@
Hash: SHA256
-README-4.1.2-patch1-apply-Windows.txt 0.0.1 UTF-8 2016-08-07
+
+README-4.1.2-patch1-apply-Windows.txt 0.1.0 UTF-8 2016-08-11
APPLYING MANUAL HOTFIX FOR APACHE OPENOFFICE ON WINDOWS
=======================================================
- 0.0.1 ALPHA TEST INSTRUCTIONS. NOT FOR GENERAL DISTRIBUTION
+ 0.1.0 BETA TEST INSTRUCTIONS. NOT FOR GENERAL DISTRIBUTION
This material is for developer and quality-assurance review,
testing, and revision. When completed, general-distribution
@@ -16,7 +17,7 @@ README-4.1.2-patch1-apply-Windows.txt 0.
The archive file apache-openoffice-4.1.2-patch1-apply-Win_x86.zip
- contains files for manually adding a fix to Apache OpenOffice 4.1.2
+ contains files for applying a fix to Apache OpenOffice 4.1.2
on Microsoft Windows. The fix eliminates a security vulnerability
identified as CVE-2016-1513. The latest details about that
vulnerability and its mitigation can be found on the web at page
@@ -34,27 +35,16 @@ README-4.1.2-patch1-apply-Windows.txt 0.
D. Confirmation
E. Removing the Patch
Acknowledgment
+ Appendix: Manual Patch Application
A. PREREQUISITES
- * Confidence accessing technical features of the Windows operating
- system and modifying software files that are part of the system.
-
* Ability to access and navigate the file system of your computer.
-
- * Understanding how to locate the computer folder where the Apache
- OpenOffice software is installed for operation.
- * Ability to identify files by their full names and check sizes,
+ * Ability to identify files by their full names and to check sizes,
date stamps, and other properties.
- * Enabling administrative privileges for carrying out operations that
- require such permissions.
-
- * Renaming files; copying files from one location to another in
- operating-system locations.
-
* Extracting the contents of a Zip package into a folder from which
the Zipped contents can be reviewed and used.
@@ -108,7 +98,8 @@ C. PROCEDURE
1. If you have not already done so, download the Zip archive
apache-openoffice-4.1.2-patch1-apply-Win_x86.zip from the internet,
using the web browser of your choice. The Downloads folder of your
- user account on Windows is fine to use.
+ user account on Windows is fine to use. Whatever folder you download
+ to should be empty first.
2. If the download succeeds without problems, the .zip file is available
To use. For additional authentication, verify the digital signature
@@ -144,27 +135,160 @@ C. PROCEDURE
NOTICE.txt
A notice about the origin of the content.
-
+
+ APPLY-4.1.2-patch1-Windows.bat
+ The Windows batch-file script to run for installing
+ the patch.
+
+ REVERT-4.1.2-patch1-Windows.bat
+ The Windows batch-file script to run to back out
+ the patch if necessary.
+
tl.dll.new
The patched tl.dll library file to be installed in the
Apache OpenOffice 4.1.2 software. The properties on this
- file identify it as having 620,544 bytes and it was created
- on Tuesday, July 5, 2016, 18:08:28. View the properties of
- the file to confirm the creation date. The Date Modified
- shown in the file explorer will be different.
+ file identify it as having 620,544 bytes and having been
+ modified on Tuesday, July 5, 2016, 18:08:28. The creation
+ date can be different, even more recent.
tl.dll.new.asc
A digital signature provided by the developer of tl.dll.new
that can be used to verify the authenticity and origin
of tl.dll.new using suitable software for that purpose.
The properties on this file identify it as having 819 bytes
- created on Thursday, July 14, 2016.
+ modified on Thursday, July 14, 2016.
+
+ tl.dll.old
+ The original tl.dll library, without the patch, from the
+ official Apache OpenOffice 4.1.2 distribution. This file
+ is included as a backup and for use, if needed, as part
+ of reverting the patch. The properties of this file
+ identify it as having 620,032 bytes and having been
+ modified on Wednesday, October 21, 2015, 15:49:50. The
+ creation date can be different, even more recent.
+
+ tl.dll.old.asc
+ A digital signature provided by the developer who extracted
+ this file from the setup files of Apache OpenOffice 4.1.2
+ for Windows as affirmation of its authenticity. The
+ properties on this file identify it as having 484 bytes
+ modified on Thursday, August 11, 2016, 10:57
[Note: If you have other utilities that you use for Zip and unZip of
.zip files, the remainder of this procedure assumes you have
extracted the .zip content into a folder with the same name and
- content.]
+ content as described above.]
+
+ 9. APPLYING THE PATCH AUTOMATICALLY.
+ Double-click the file APPLY-4.1.2-patch1-Windows.bat. The automated
+ procedure will open a window in which progress is reported.
+
+ [Note: If using the automatic procedure is ineffective for some
+ reason, it is possible to accomplish the same result manually.
+ See the Appendix at the end of this document.]
+
+10. PROVIDING ADMINISTRATIVE PERMISSIONS
+ Step (9) may proceed to completion without interruption. If not,
+ there will be an explanation for any difficulty. If the procedure
+ reports ADMINISTRATIVE PRIVILEGE REQUIRED, you will need to provide
+ it.
+ a. Right click on the APPLY-4.1.2-patch1-Windows.bat in the File
+ Explorer. If there is a "Run as Administrator" action in the
+ context menu that appears, click that.
+
+ b. If, instead, there is an "Open As ..." option, click that and
+ choose the administrator account for which you know the
+ password.
+
+ c. On Windows XP, there are no such options by default. The
+ best solution is to perform this entire procedure within an
+ administrator account. Installation of Apache OpenOffice
+ required administrative permission. If you did not perform
+ the installation, consult whoever did.
+
+
+D. CONFIRMATION
+
+ On success in applying the patch, it is important to satisfy yourself
+ that Apache OpenOffice is functioning properly.
+
+ * Start Apache OpenOffice. There should be no visible difference and
+ the program should operate normally.
+
+ * Verify the documents that were successfully opened in the
+ PRELIMINARIES step at the top of this procedure. They should open
+ the same as before. There should be no discernible difference in
+ operation.
+
+ * If any document that succeeded before now opens incorrectly or fails
+ to open, please report that case to the project via the
+ dev@openoffice.apache.org public mailing list. DO NOT save any
+ incorrectly-opened/failed documents. Close them if necessary and
+ leave them alone. Please report the situation on the public
+ mailing list users@openoffice.apache.org and await further
+ instructions.
+
+ NOTE: If you reinstall Apache OpenOffice 4.1.2, the patch will not
+ be preserved and you will need to re-apply it. If you install a
+ later version of Apache OpenOffice, the patch will be unnecessary.
+
+
+E. REMOVING THE PATCH
+
+ If there are any problems with known-good documents, you can restore
+ the original "tl.dll". The patch can be removed any time that you
+ are concerned that some problem is related to having installed the
+ patch or to verify that the problem does not depend on the patch
+ being included or not.
+
+ To remove the patch automatically, close OpenOffice and, in the folder
+ where the APPLY file is found. Double-click on the file
+ REVERT-4.1.2-patch1-Windows.bat.
+
+ The automated REVERT procedure operates much the same as the APPLY
+ procedure in steps (9-10) in section C, above.
+
+
+ACKNOWLEDGMENT
+
+ The development, testing, and documentation of 4.1.2-patch1 was
+ accomplished with the contribution of the following individuals.
+
+ William L. Anderson
+ Ariel Constenla-Haile
+ Dennis E. Hamilton
+ Damjan Jovanovic
+ Marcus Lange
+ Don Lewis
+ Pedro Lino
+ Carl Marcum
+ Keith N. McKenna
+ Andrea Pescetti
+ Kay Schenk
+ Patricia Shanahan
+
+APPENDIX. MANUAL PATCH APPLICATION
+
+A1. ADDITIONAL PREREQUISITES
+
+ * Confidence accessing technical features of the Windows operating
+ system and modifying software files that are part of the system.
+
+ * Renaming files; copying files from one location to another in
+ operating-system locations.
+
+ * Understanding how to locate the computer folder where the Apache
+ OpenOffice software is installed for operation.
+ * Enabling administrative privileges for carrying out operations that
+ require such permissions.
+
+A2. MANUAL PROCEDURE
+
+ This procedure can be substituted starting in place of step (9) for the
+ automated procedure. These are equivalent steps to those accomplished
+ automatically.
+
9. IMPORTANT. At any time in the following steps (10-17), there may be
notification that you must be an administrator to perform an
action or to continue.
@@ -202,76 +326,35 @@ C. PROCEDURE
top.
16. With the mouse hovering over tl.dll.new in the patch1 folder
- and the keyboard Ctrl key held down, click and hold the the mouse
- button on the tll.dll.new file name and drag the mouse to the title
- bar of the "OpenOffice 4\program\" folder. Release the mouse button
- and then the Ctrl key. There will now be a copy of tl.dll.new in the
- "OpenOffice 4" program folder.
+ and the keyboard Ctrl key held down, click and hold the mouse
+ button down and drag the tll.dll.new file to the title bar
+ of the "OpenOffice 4\program\" folder. Release the mouse button
+ and then the Ctrl key. There will now be a copy of tl.dll.new
+ in the "OpenOffice 4" program folder.
17. In the program folder, rename "tl.dll.new" to "tl.dll".
18. The procedure is completed. You may close the programs folder and
the patch1 folder.
- NOTE: If you reinstall Apache OpenOffice 4.1.2, the patch will not
- be preserved and you will need to re-apply it. If you install a
- later version of Apache OpenOffice, the patch will be unnecessary.
+19. Manual removal of the patch is straightforward.
-D. CONFIRMATION
-
- * Start Apache OpenOffice. There should be no visible difference and
- the program should operate normally.
-
- * Verify the documents that were successfully opened in the
- PRELIMINARIES step at the top of this procedure. They should open
- the same as before. There should be no discernible difference in
- operation.
+ * In the OpenOffice program folder, find the tl.dll file that is
+ the 4.1.2-patch1 version and delete it.
- * If any document that succeeded before now opens incorrectly or fails
- to open, please report that case to the project via the
- dev@openoffice.apache.org public mailing list. Do save any
- incorrectly-opened/failed documents. Close them if necessary and
- leave them alone. Please report the situation.
-
-
-E. REMOVING THE PATCH
-
- If there are any problems with known-good documents, you can restore
- the original "tl.dll". The patch can be removed any time that you
- are concerned that some problem is related to having installed the
- patch.
+ * Rename the tl.dll.old file back to tl.dll.
- To remove the patch, close OpenOffice and simply rename the patched
- "tl.dll" back to "tl.dll.new" and then rename the "tl.dll.old" file to
- "tl.dll".
-
-
-ACKNOWLEDGMENT
-
- The development, testing, and documentation of 4.1.2-patch1 was
- accomplished with the contribution of the following individuals.
-
- Ariel Constenla-Haile
- Dennis E. Hamilton
- Damjan Jovanovic
- Marcus Lange
- Pedro Lino
- Carl Marcum
- Keith N. McKenna
- Andrea Pescetti
- Kay Schenk
- Patricia Shanahan
-
*** end of README-4.1.2-patch1-apply-Windows.txt ***
+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
-iQEcBAEBCAAGBQJXp+r7AAoJEPluif/UVmKKfcIH/RWLoL4G1oUzSyp3E77P1Ago
-thfDv/wIIZ2132rC/EdNW5dpvPArPFUUkNbfn0EWouK+OrRAcKCQL84x65ni4KPd
-JHWJyDcBKooxUoRFMqpS0lhbaQTWda6G4AZ+HFTcTLTu6zhmcsnNfogaFKZJ/+vJ
-uAH5B60M480GFQqSCUmxVvv8card+QG7jrKujEa4ZLPPOxpmsqUrrP4D9aCkeYdJ
-PyuhHzS72lIH9YcC0zxu5eym2gs+vwzPtoe7xMZb3r574/1ezElbYbYmv3ilnZzv
-n61GqHmMU38zhfNDu5OOwBj8MVu1YrmpYr/MQDPiIPZjD/50iK1PGe+VH7sEos0=
-=5L6B
+iQEcBAEBCAAGBQJXrUECAAoJEPluif/UVmKKtWwIAKybxUb1E4/jIMrawTj3oJ28
+6EFV4NfQdWF6NeQzCpInyDPPtxabXMr7Y2v/JjxWAmX5jGHJY7tk2XX0JU0rVebJ
+3gmWT32h26BKS1ems2HMggFN7tf4B8siM7lSgvcTfLqploQZRwDuxzLkQAveXsnj
+4z94YTzM+goCw8uYYH4lx34q375fPCVB6CV/yszKymJRcFxMU6DfUCp9Ck0EiQAd
+8BMqqNnGbcmIBaxmFO9OaIyLeQGKAMA3ePx12hly4bQFkgRLhsI2sgFtR9Z2+aaV
+/XQ+AiGHiLIvmw+ET01y72rnvQDBhVe/44Fe6u5EnQLAcibs9B/4H8QahkmOVEU=
+=xD1X
-----END PGP SIGNATURE-----
Modified: dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip
==============================================================================
Binary files - no diff available.
Modified: dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.asc
==============================================================================
--- dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.asc (original)
+++ dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.asc Fri Aug 12 03:36:18 2016
@@ -1,11 +1,11 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
-iQEcBAABCAAGBQJXp+w4AAoJEPluif/UVmKKvf4H/R/ttuBWsC4dof8Q5rP03+Vd
-7NvwKMMPLBjH2NI3XcHGCz5u+5HZ6JDv7JZj8ZNyQ0tkSwcV6XTXUG9FVf7wSc8q
-q8SMXtVPKE3lbALlkQeqYxUkuEYwzMTnCPkoI4ZJaJ7OMoHu4UHfcUH+YtgoiEMf
-mB5Ok9LhWg2jMGX97Arl3wiTLeNRXwQcKc9MsWnkjhiSDV19FEqQXegT3cpzgrqe
-oolto76Nc3XpGYQepnIx2njGQHmQ2npuVjAi6otU4Cdqo1pdT1un4kCgPPYnMFZI
-WngRXMdMnocQeQ40GqJm0q29TE+ppPo9Zer9+TITRC4RL5T2+kBUTZ2gUnyfZ6M=
-=3cRb
+iQEcBAABCAAGBQJXrUL4AAoJEPluif/UVmKKY3oH+wdaj/UvDaQSG4xntBC3uQaj
+hlsLdQCuuA2H5fZwj2N3tqa97iyjuflQ66wOlSsJeZ6xz3PI9ABB100YGimW0Ryi
+vEpBZTOXGJhnsuGr7Om83C7TXWVRgPioEztxzGffihjVSwOkXXoSfIzykTX3HjRG
+Bdfjzu6XR4yJFNhq3oj+erec7uiCDUD5c/CkT+WQQyZW0QiZSEQV3841qAjGGR3C
+JSBTTq5fM+u1rpjyYNGNCZYC/YIBuWIxpbDN1kQGYHYF1CbUVbbg4Fanf8bZh8RF
+EuagUFPZUJnPW7AyIZwhUUYmx2MgusxMdQtcHkIp4rp/0xRjOZRkLXSmw9MVDCo=
+=lVUp
-----END PGP SIGNATURE-----
Modified: dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.md5
==============================================================================
--- dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.md5 (original)
+++ dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.md5 Fri Aug 12 03:36:18 2016
@@ -1 +1 @@
-b871b9b829c9a0f238cd48093e6c736c apache-openoffice-4.1.2-patch1-apply-Win_x86.zip
+539013dfbc3157cfaa3b0caab157a490 apache-openoffice-4.1.2-patch1-apply-Win_x86.zip
Modified: dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.sha256
==============================================================================
--- dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.sha256 (original)
+++ dev/openoffice/4.1.2-patch1/binaries/Windows/apache-openoffice-4.1.2-patch1-apply-Win_x86.zip.sha256 Fri Aug 12 03:36:18 2016
@@ -1 +1 @@
-8a6b7947037bc4db16473d8f1f2df52b089948aba84a5290b142a9051b0c1067 apache-openoffice-4.1.2-patch1-apply-Win_x86.zip
+e62970ceb295f4bcc01a219137d695436a8fc73f95f248f5e4b044a39df08c03 apache-openoffice-4.1.2-patch1-apply-Win_x86.zip