Upgrade OpenSSL to version 3.0.13.

LICENSE and NOTICE files now reflect its new license.
The obsolete "DISABLE_OPENSSL" setting has been removed.
Patch Python 2 to support OpenSSL 3.

Upgrade OpenSSL to version 3.0.13.

LICENSE and NOTICE files now reflect its new license.
The obsolete "DISABLE_OPENSSL" setting has been removed.
Patch Python 2 to support OpenSSL 3.0.x.
Support old versions of Windows.
Uses Strawberry Perl on Windows to build, fetched as a dependency.
Workarounds for missing integer limit constants in the old version of MSVC we use.
NASM now works when it's in the PATH, instead of needing --with-nasm-path to ./configure.

Patch by: me

(cherry picked from commit 4c5b548fb6ece87dd30bbf720aca0d994a749167)

show more ...

Update copyright year to 2024

(cherry picked from commit e07a38805855d5c69e350023eddc2f24b53cea08)

Updated LICENSE for Expat 2.5.0

(cherry picked from commit e4e50d77cf1a077407bf4c838e49b8c0e6c656e2)

Small adjustment

(cherry picked from commit a0f0f82a8382b8aee2a818def55d0c58f703e68f)

Updating LICENSE for zlib 1.2.13

(cherry picked from commit 2e9e6ff0ed701224730bbdce5942430ee8c0dc4b)

Update copyright year to 2023

(cherry picked from commit b7bcc0c3cb1626d7ae5daf50fb8ff537fb2a28d2)

Update copyright year to 2022

(cherry picked from commit a4b3dcbe18094aea44306f91c89f3bc628d64891)

Updated copyright year to 2021

(cherry picked from commit b3fc2ec329d5bf9ddb749664e01ca9e4d6c6069b)

Uprade bundled expat to version 2.2.10

This is a bug fix release.

Updated LICENSE for Python 2.7.18

(cherry picked from commit 1dedf1ecff4aeffe2f7c7612cbf893530465764e)

Updated LICENSE for curl 7.72.0

(cherry picked from commit be522427db50159d522c42daa89cce4f0a309fab)

Updated download link for zlib, updated LICENSE

(cherry picked from commit 995e4ac6f0abe66c6c7c4e709fd33ffad8550489)

Updated copyright year

(cherry picked from commit 46e28a4a0ea91fc96c2da58185836fc6af64a9d0)

Small updates to copyright

(cherry picked from commit 58fb31b192f5e6f271e69be6a976a99d6a6ba589)

Updated license for OpenSSL

(cherry picked from commit df3484d97264a3d268c9e7df10f4410d1a4ae7dd)

Shortened ASCII art to avoid line break on Windows

git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1846059 13f79535-47bb-0310-9956-ffa450edef68

Let's leave the $HeadURL$ in the end.

Looks better and serves the same purpose.


git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1781334 13f79535-47bb-0310-9956-ff

Let's leave the $HeadURL$ in the end.

Looks better and serves the same purpose.


git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1781334 13f79535-47bb-0310-9956-ffa450edef68

show more ...

Make use of the HeadURL svn keyword.

Using these in notable files, especially the LICENSE, NOTICE and
README files improves the visibility of the repository and provides a
good refer

Make use of the HeadURL svn keyword.

Using these in notable files, especially the LICENSE, NOTICE and
README files improves the visibility of the repository and provides a
good reference for developers that may be looking for updates.


git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1775981 13f79535-47bb-0310-9956-ffa450edef68

show more ...

Update the bundled version of OpenSSL from 0.9.8zh to 1.0.2h which
fixes many vulnerabiliies and adds support for newer, more secure
ciphers and versions of the protocol.

Note: OpenS

Update the bundled version of OpenSSL from 0.9.8zh to 1.0.2h which
fixes many vulnerabiliies and adds support for newer, more secure
ciphers and versions of the protocol.

Note: OpenSSL version 1.0.2h contains two known minor vulnerabilites,
CVE-2016-2177 and CVE-2016-2178, which will be fixed in the next
OpenSSL release. Their potential impact is low enough that that
various Linux distros have chosen not to apply the upstream patches
to the versions that they distribute.

On Windows, there is an optional new dependency on NASM,
<http://www.nasm.us/>. If NASM is not available, then the C
implementations of the low-level crypto code will be used instead
of the optimized assembly language versions. Since OpenOffice is
not a heavy user of this code, the impact should be minor. If NASM
is installed, but its location is not in $PATH, the directory
containing nasm.exe should be passed to configure using --with-nasm-home.

The fallback to the C crypto implementation also happens on Linux
if the version of gcc is sufficently old to indicate that the
toolchain is likely to not support the some of the instructions in
the assembly language versions of the code.



git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1756954 13f79535-47bb-0310-9956-ffa450edef68

show more ...

#i127069#: bundled expat version 2.1.0 has two vulnerabilities

Upgrade bundled expat to version 2.2.0, which fixes:
CVE-2016-5300
CVE-2012-6702

It is not kno

#i127069#: bundled expat version 2.1.0 has two vulnerabilities

Upgrade bundled expat to version 2.2.0, which fixes:
CVE-2016-5300
CVE-2012-6702

It is not known whether these can be exploited when expat is used
as part of OpenOffice. All of input files to expat seem to come
from the OpenOffice source.

One patch is needed to the expat source, without which saxparser
crashes during the build. It has been submitted upstream, see
<https://sourceforge.net/p/expat/bugs/539/>. It is only triggered
when building expat with -DXML_UNICODE which is not the default,
but this flag is used when building the bundled expat.



git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1755873 13f79535-47bb-0310-9956-ffa450edef68

show more ...

#i126896#: bundled curl version 7.19.7 has many vulnerabilities

Upgrade bundled curl to version 7.49.1.

Delete most of the curl patches since they are no longer necessary.
The

#i126896#: bundled curl version 7.19.7 has many vulnerabilities

Upgrade bundled curl to version 7.49.1.

Delete most of the curl patches since they are no longer necessary.
The only needed patch is to produce a library with the expected name
when building on Windows.

Update the curl copyright info in LICENSE.

These curl CVEs have been fixed since 7.19.7:
CVE-2010-0734
CVE-2011-2192
CVE-2013-2174
CVE-2014-3143
CVE-2014-3144
CVE-2014-3145
CVE-2014-3148
CVE-2014-8150
CVE-2015-3153
CVE-2016-0755
Whether any of these affect the OpenOffice usage of curl is not known.
OpenOffice only uses curl to access ftp:// URLs, which is likely to be
only rarely done.



git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1754469 13f79535-47bb-0310-9956-ffa450edef68

show more ...

i126369 - Finish off hwpfilter

The Hangul Word Processor filter was disabled from OpenOffice in
r1677190 due to security concerns. While some extra buffer controls
could have been m

i126369 - Finish off hwpfilter

The Hangul Word Processor filter was disabled from OpenOffice in
r1677190 due to security concerns. While some extra buffer controls
could have been made and the filter restored, the truth is a much
bigger effort is required to catch up with this format. Files created
with later editions of Hangul, including Hangul Wordian, Hangul 2002,
Hangul 2005 and Hangul 2007 cannot be opened with the existing filter.
Existing users can apparently download a free viewer and convert their
document to RTF or doc.

Drop completely the code. while here also drop remnants of wpd support
that we dropped since 3.4.1. Having less code is sometimes better.


git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1730107 13f79535-47bb-0310-9956-ffa450edef68

show more ...

Many spelling fixes: some more files.

Attempt to clean up most but certainly not all the spelling
mistakes that found home in OpenOffice through decades.

Did I mention this is m

Many spelling fixes: some more files.

Attempt to clean up most but certainly not all the spelling
mistakes that found home in OpenOffice through decades.

Did I mention this is more important than translating
German comments? ;)


git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1591066 13f79535-47bb-0310-9956-ffa450edef68

show more ...

#i122362# remove stlport4-build support

but keep the --without-stlport configure option for now
it is the new default anyway


git-svn-id: https://svn.apache.org/repos/asf/op

#i122362# remove stlport4-build support

but keep the --without-stlport configure option for now
it is the new default anyway


git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1543067 13f79535-47bb-0310-9956-ffa450edef68

show more ...

Bump copyright year.

git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1492839 13f79535-47bb-0310-9956-ffa450edef68