minutes of ESC call ...
mikekaganski at hotmail.com
Thu Nov 2 18:40:55 UTC 2017
On 11/2/2017 8:10 PM, Michael Meeks wrote:
> * Completed Action Items:
> + ship the horror win / VC runtime DLLs with the installer (Cloph)
> [ patch appears to work, but we already have them in the installer
> if you do an admin-install they are already installed.
> we ship them twice – once as LibreOffice, but once as a run-time module
> not entirely elegant.
> for 5.4 – merge it as-is, for 6.0 do something clever.
1. For 6.0, we would not need to ship the merge module - because that
module is only working for WinXP. So that leaves us with just one copy.
2. Still, having app-local DLLs is worse than system-updateable (at
least security-wise: if we bundle app-local DLLs, then we would have to
put their advisories to our site? so that users using not-up-to-date LO
versions could know that they might be vulnerable, despite having
updated their systems). So, we could try to include MSUs from KB2999226
. There are 3 different packages for each bitness that cover all
supported platforms requiring the update (Win7, Win8, Win8.1):
- for x86:
- for x64:
The size of all three x86 packages is 1.77 MB total; three x64 packages
are 3.24 MB total.
The MSUs are installable using Windows Update Standalone Installer 
(system component in all those Windows versions). Custom actions would
need to be created, with relevant conditions (VersionNT; ).
The drawbacks (besides extra size):
1. We need to also check for pre-conditions: if the KB2999226 is already
installed; if required pre-requisite KBs are present (see ;
prerequisites exist for Win7 and Win8.1 - curiously no preconditions for
Win8). For Win7, the prerequisite is SP1, so may just state this version
as system requirement? For Win8.1, the prerequisite is , which is
several hundred MB...
2. We somehow need to get the packages to dev environment when building
the installer - should we put the blobs to our server to fetch as
external package on build? (I don't know if there's a static URL for
those files on MS site.)
More information about the LibreOffice