Author: uschindler
Date: Mon Aug 18 06:01:50 2014
New Revision: 6184
Log:
Release Apache POI 3.10.1
Added:
release/poi/release/RELEASE-NOTES.txt
- copied, changed from r6161, dev/poi/3.10.1-RC2/RELEASE-NOTES.txt
release/poi/release/bin/poi-bin-3.10.1-20140818.tar.gz
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.tar.gz
release/poi/release/bin/poi-bin-3.10.1-20140818.tar.gz.asc
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.tar.gz.asc
release/poi/release/bin/poi-bin-3.10.1-20140818.tar.gz.md5
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.tar.gz.md5
release/poi/release/bin/poi-bin-3.10.1-20140818.tar.gz.sha1
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.tar.gz.sha1
release/poi/release/bin/poi-bin-3.10.1-20140818.zip
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.zip
release/poi/release/bin/poi-bin-3.10.1-20140818.zip.asc
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.zip.asc
release/poi/release/bin/poi-bin-3.10.1-20140818.zip.md5
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.zip.md5
release/poi/release/bin/poi-bin-3.10.1-20140818.zip.sha1
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/bin/poi-bin-3.10.1-20140818.zip.sha1
release/poi/release/src/poi-src-3.10.1-20140818.tar.gz
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.tar.gz
release/poi/release/src/poi-src-3.10.1-20140818.tar.gz.asc
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.tar.gz.asc
release/poi/release/src/poi-src-3.10.1-20140818.tar.gz.md5
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.tar.gz.md5
release/poi/release/src/poi-src-3.10.1-20140818.tar.gz.sha1
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.tar.gz.sha1
release/poi/release/src/poi-src-3.10.1-20140818.zip
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.zip
release/poi/release/src/poi-src-3.10.1-20140818.zip.asc
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.zip.asc
release/poi/release/src/poi-src-3.10.1-20140818.zip.md5
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.zip.md5
release/poi/release/src/poi-src-3.10.1-20140818.zip.sha1
- copied unchanged from r6161,
dev/poi/3.10.1-RC2/src/poi-src-3.10.1-20140818.zip.sha1
Copied: release/poi/release/RELEASE-NOTES.txt (from r6161,
dev/poi/3.10.1-RC2/RELEASE-NOTES.txt)
==============================================================================
--- dev/poi/3.10.1-RC2/RELEASE-NOTES.txt (original)
+++ release/poi/release/RELEASE-NOTES.txt Mon Aug 18 06:01:50 2014
@@ -10,7 +10,11 @@ Changes
The most notable changes in this release are:
This release is a bugfix release to fix two security issues with OOXML:
- - TODO: to be included by RM on the day of release
+ - On supported XML parser versions (Xerces or JVM built-in, XMLBeans 2.6),
+ enforce sensible limits on entity expansion in OOXML files, and ensure
+ that subsequent normal files still pass fine (CVE-2014-3574).
+ - Tidy up the OPC SAX setup code with a new common Helper, preventing
+ external entity expansion (CVE-2014-3529).
- Shipped version of xmlbeans.jar dependency updated to v2.6
Please note: You should use xmlbeans-2.6.jar (as shipped with this release)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
