navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Update to 3.5.1 not acknowledged

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
The Document Foundation
And, this specific program:
LibreOffice 3.x

This thread has been marked as resolved.
mannyack Update to 3.5.1 not acknowledged
Member 23rd Mar, 2012 18:08
Ranking: 0
Posts: 1
User Since: 23rd Mar, 2012
System Score: N/A
Location: N/A
I am running PSI 2.0.
I was notified today that the version of LibreOffice that I was running was insecure. It was 3.3.5.500. That was true. After uninstalling, removing left over registry entries and files, rebooting, and rescanning, I finally got PSI to admit that the old version was gone. (I tried just updating first, but no luck.) I downloaded the update from Secunia and from The Document Foundation. (By the way, selecting "The Document Foundation" as the vendor in the Thread definition for this forum does not allow selecting LibreOffice. That should be fixed.) Both of the downloads had identical names. (One of them got (1) inserted in the download process.) I installed the one from The Document Foundation. PSI claimed it was insecure. I updated with the download from Secunia. The update said there was nothing to do. (The actual wording was 0 bytes of changes.) Reboot and rescan did not change the PSI results. Here is the troubleshooting information:

Program Name:
LibreOffice 3.x

Security State:
Insecure

Download Link:
http://ftp.klid.dk/ftp/tdf/libreoffice/stable/3.5....

Instances Found:
C:\Program Files (x86)\LibreOffice 3.5\program\soffice.exe, version: 3.5.0.102

Last System Scan (localtime):
23. Mar 2012, 12:45

Operating System:
Microsoft Windows 7, Microsoft Windows 7

The program soffice.exe version 3.5.0.102 must be part of the 3.5.1 update. BTW - PSI lists everything else on my computer as up-to-date. Any suggestions about LibreOffice?

Post "RE: Update to 3.5.1 not acknowledged" has been selected as an answer.
MikePerry RE: Update to 3.5.1 not acknowledged
Member 23rd Mar, 2012 18:48
Score: -1
Posts: 7
User Since: 24th Feb 2011
System Score: N/A
Location: UK
I am also having the same problem with PSI. I had LibreOffice version 3.5.0.102 and updated three days ago when the newest version was made available by The Document Foundation.

PSI still says I have the older version but I actually have LibreOffice 3.5.1.2
Build ID: dc9775d-05ecbee-0851ad3-1586698-727bf66!

So PSI is not picking up that the update has been installed. How do we all correct this or does Secunia have to fix it?
Was this reply relevant?
+1
-0
Maurice Joyce RE: Update to 3.5.1 not acknowledged
Handling Contributor 23rd Mar, 2012 19:10
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
U could try this. If nothing else it will open up a direct line to Secunia who may need to adjust their rule for this programme.


SUGGESTING A NEW PROGRAMME TO SECUNIA

Secunia do not accept programmes versions in ALPHA(Includes Google Canary/Dev & Mozilla Aurora) or BETA.

VERSION 2


1. From the DASHBOARD page click on RESULTS.
2. On the RESULTS page look above the tab INSTALL SOLUTION & U will see a green icon & ARE YOU MISSING A PROGRAM?
3. Click it. Fill out the details requested.
4. Click SUGGEST SOFTWARE.

ALL OLDER PSI VERSIONS

1. Open the PATCHED or SECURE BROWSING tab.
2. Scroll to the bottom where U will see a link in blue ink "Program Missing? Suggest It Here!"
3. Click the link & then fill out the details in the boxes that appear(the important bit is the FILE SELECTION).
4.Click Suggest Program.

Normally,Secunia respond by email that the programme has been added to their database. A full PSI scan should reveal it.


Update 8 23:31 22/01/2012


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Anthony Wells RE: Update to 3.5.1 not acknowledged
Expert Contributor 24th Mar, 2012 00:54
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

Several programmes have had detection and installer problems in the last few days . Open Office appears to have a similar problem tp yours , as in :-

http://secunia.com/community/forum/thread/show/123...

The best/most accurate indication of the version is usually in the programme's in ternal "About ...." .

Not much ypou can do before support get back to work on ther PSI on Monday(CET) ; they are busy elsewhere most days , so you may wish to push them with an email to support@secunia.com .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+4
-1
pnickerson RE: Update to 3.5.1 not acknowledged
Member 24th Mar, 2012 06:17
Score: 7
Posts: 6
User Since: 11th May 2010
System Score: N/A
Location: US
I have uninstalled LibreOffice, and reinstalled it from a fresh download of LibO_3.5.1_Win_x86_install_multi.msi. If I right click the file C:\Program Files (x86)\LibreOffice 3.5\program\soffice.exe in Windows 7 and click Properties and go to the Details tab, the File version and Product version are reported as 3.5.0.102 and a Date modified of 3/6/2012. But, if I double click that same file, which opens the LibreOffice start screen, and go to Help > About LibreOffice, the reported version there is 3.5.1.2. It looks like the The Document Foundation didn't update the reported file version correctly when they built this new version of LibreOffice.
Was this reply relevant?
+7
-0
Jesant13 RE: Update to 3.5.1 not acknowledged
Member 25th Mar, 2012 03:41
Score: -3
Posts: 40
User Since: 10th Sep 2009
System Score: 100%
Location: US
I installed LibreOffice for the first time on my computer yesterday. Since then, the Secunia PSI has said it is insecure and is detecting version 3.5.0.102.

After seeing pgn674's post in this thread, I checked the version of soffice and confirmed that it is 3.5.0.102. The file was created and last modified on March 6, 2012 at 6:20 AM.

I don't think that The Software Foundation updated soffice before releasing version 3.5.1.102 of LibreOffice. I think that since the Secunia PSI is using soffice to determine what version of LibreOffice is installed, it thinks that version 3.5.0.102 of LibreOffice is installed, instead of 3.5.1.102.
Was this reply relevant?
+1
-0
macox RE: Update to 3.5.1 not acknowledged
Member 25th Mar, 2012 10:35
Score: 1
Posts: 6
User Since: 25th Mar 2012
System Score: N/A
Location: LU
You are correctl. The "visible" version of Libreoffice as shown in the about box does not match the file version and it seems that Secunia did not actual check the file version of soffice.exe before putting the version in their database. The file soffice.exe with the internal version 3.5.0.102 is actually the visible version 3.5.1.2. I hope Secunia fixes this problem in the next days.
Was this reply relevant?
+1
-0
woobanker RE: Update to 3.5.1 not acknowledged
Member 25th Mar, 2012 21:53
Score: 1
Posts: 1
User Since: 20th Jan 2010
System Score: N/A
Location: N/A
I'm having the same problem
Was this reply relevant?
+1
-0
davidbassplayer RE: Update to 3.5.1 not acknowledged
Member 26th Mar, 2012 20:29
Score: 2
Posts: 20
User Since: 13th Feb 2008
System Score: N/A
Location: N/A
I too am having the problem of updating to LO 3.5.1 and Secunia says that 3.5.0102 is older than 3.5.1 and doesn't fix the problem. One thing to do is to exclude LO from PSI's purview. I hate to do that as I have to do PSI's job of remembering updates.
Was this reply relevant?
+0
-0
Anthony Wells RE: Update to 3.5.1 not acknowledged
Expert Contributor 26th Mar, 2012 21:44
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

Support are very busy elsewhere atm ; they have respoded on a few threads today ; I have emailed them on this thread just now .

As I said earlier , if your programme's "About" is showing you up to date , then you likely have that version .

If you are very concerned , you can also contact support by email at support@secunia.com .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
dirkjohann RE: Update to 3.5.1 not acknowledged
Member 26th Mar, 2012 22:29
Score: 0
Posts: 1
User Since: 6th Jan 2008
System Score: N/A
Location: N/A
Same problem here. Waiting for being solved.
Was this reply relevant?
+0
-0
J.Vemmer RE: Update to 3.5.1 not acknowledged
Secunia Official 27th Mar, 2012 10:19
Score: 5
Posts: 20
User Since: 5th Oct 2011
System Score: N/A
Location: Copenhagen, DK
Hi,

Apologies on the long wait.

The issue should now be resolved; if you run a full rescan, your LibreOffice 3.5.1 installation should now be detected correctly.

--
Kind regards,

Jais Vemmer
xSI Signatures Specialist
Mike_Perry RE: Update to 3.5.1 not acknowledged
Member 27th Mar, 2012 13:43
Score: -10
Posts: 11
User Since: 14th Dec 2011
System Score: N/A
Location: UK
Hi

Thanks to your team, it's all fine now. A rescan shows 100% now.

Thanks and regards to all
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+