openoffice-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dennis E. Hamilton" <dennis.hamil...@acm.org>
Subject RE: [PATCH DOWNLOAD] Draft for the hotfix webpage
Date Mon, 15 Aug 2016 19:10:32 GMT


> -----Original Message-----
> From: Kay Schenk@apache.org [mailto:kschenk@apache.org]
> Sent: Monday, August 15, 2016 08:59
> To: dev@openoffice.apache.org
> Subject: Re: [PATCH DOWNLOAD] Draft for the hotfix webpage
> 
> 
> 
> On 08/13/2016 02:16 PM, Marcus wrote:
> > As we have now the patched library file and Readme for all platforms,
> > IMHO not much more is needed to go public with the hotfix. Therefore
> > I've created a draft version of the hotfix download webpage:
> >
> > http://dist.apache.org/repos/dist/dev/openoffice/4.1.2-
> patch1/hotfix.html
> >
> > Please review and tell me your feedback.
[orcmid] 

I have a number of items.  I can fix the URLs in (2) below after I have updated the Windows
set.

  1. This is worded as if it is the advisory.  I assume this is, rather, something that should
be linked to from an update of the advisory.  I request that it be a description of the HotFix.
 It could link to the advisory, of course.  RECOMMENDATION: Have the emphasis be on this describing
release of the hotfix for CVE-2016-1513.

  2. Download and Installation.  Currently, this page is at 
<https://dist.apache.org/repos/dist/dev/openoffice/4.1.2-patch1/hotfix.html>.  It has
*ABSOLUTE* URLs to the binaries and source and the various hashes.  WHEN GENERAL DISTRIBUTION
OCCURS, this page and all of the binaries and source pages will be at 
<https://archive.apache.org/dist/openoffice/4.1.2-patch1>.  RECOMMENDATION: In the Download
& Installation table, make all URLS *RELATIVE* to the HotFix page, since when it is staged
to release and then to archive, the links will always work.  
     NOTE. When we make general distribution, we stage the HotFix HTML page and the binaries
subfolder to 
<https://dist.apache.org/repos/dist/release/openoffice/4.1.2-patch1> using SVN copies.
 In 24-48 hours or so that material will show up automatically on archive.apache.org and we
can make the general distribution announcement.  The dist.apache.org materials can be removed
when that happens.  WARNING. The Windows material is not ready, and some renaming will happen.
 That should all be done by the end of Tuesday (GMT).  

  3. Next Step under Download and Installation.  The README for Windows addresses the way
to Unzip and provides important information about how the extract is into a folder of a default-determined
name.  I don't know if the others provide comparable information and/or operating from a terminal
is assumed.

  4. How to verify the download & installation.  Verifying the Zip is sufficient.  The
table does not identify the files those check cases are from so it is not at all clear what
value this is.  RECOMMENDATION: If it is valuable, we should include the additional hashes
inside the Zips, and provide the size and time stamp information in the individual README
files.  That way there is no redundancy and the information is maintained in exactly one place.
 

 - Dennis
  

> >
> > Thanks
> >
> > Marcus
> 
> Looks good to me.
> 
> 
> --
> Kay Schenk
> Apache OpenOffice
> 
> ----------------------------------------
> "Things work out best for those who make
>  the best of the way things work out."
>                          -- John Wooden
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org


Mime
View raw message