@bignose @libreoffice something needs to be done about this. It's unethical to distribute insecure software. If there's corporate association here they could find themselves in a law suit, too, though most likely victims wouldn't have the wherewithal to initiate one. Where is sense of responsibility to one's community?

@bignose @libreoffice tbh I didn't know that OO is not well-maintained until your post...
I was thinking that way because of Manjaro calamares installer (which I used like 5 years ago) that had two options of office suite.

@somereatardedwood @bignose @libreoffice it’s unfortunate but this is the case. Elsewhere in this thread I’ve posted at least three situations where a security researcher did proper bug filing against OOo, and then no release was done until after the security researcher had done the correct thing (waited, waited, and only then with reluctance published the vulnerability). And given that Libreoffice is doing regular security releases from a similar codebase, there’s almost certainly more.

Please contact them (apache@apache.org) and ask why they're still distributing OpenOffice despite multiple unfixed security issues over a year old, and no updates. Let us know what they say. Thanks!