[Pencil]

Demons?

But severe problems for several years.

Between October 2014 and July 2015 the project had no release manager. During this period, in April 2015, a known remote code execution security vulnerability in Apache OpenOffice 4.1.1 was announced, but the project did not have the developers available to release the software fix. Instead, the Apache project published a workaround for users, leaving the vulnerability in the download.
<snip>

It was revealed in October 2016 that 4.1.2 had been distributed with a known security hole for nearly a year as the project had not had the development resources to fix it.

4.1.3 was known to have security issues since at least January 2017, but fixes to them were delayed by an absent release manager for 4.1.4. The Apache Software Foundation January 2017 Board minutes were edited after publication to remove mention of the security issue, which Jim Jagielski of the ASF board claimed would be fixed by May 2017. Fixes were finally released in October 2017. Further unfixed problems showed up in February 2019, with The Register unable to get a response from the developers, although the existing proof-of-concept exploit doesn't work with OpenOffice out-of-the-box.

Version 4.1.11 was released in October 2021 with a fix for a remote code execution security vulnerability that was publicly revealed the previous month. The project had been notified in early May 2021.[that] the security hole had been fixed in LibreOffice since 2014

Originally Posted by SmartAleq

We told you to stop trying to write your name in the snow after a six pack but do you listen?

🎵 Watch out where the huskies go
And don't you eat that yellow snow 🎶