Author: uschindler
Date: Thu Aug 21 21:01:54 2014
New Revision: 1619586
URL: http://svn.apache.org/r1619586
Log:
On request from Mike Boufford add Mohamed Ramadan for helping to make POI safer
Modified:
poi/site/publish/download.html
poi/site/publish/index.html
poi/site/src/documentation/content/xdocs/download.xml
poi/site/src/documentation/content/xdocs/index.xml
Modified: poi/site/publish/download.html
URL:
http://svn.apache.org/viewvc/poi/site/publish/download.html?rev=1619586&r1=1619585&r2=1619586&view=diff
==============================================================================
--- poi/site/publish/download.html (original)
+++ poi/site/publish/download.html Thu Aug 21 21:01:54 2014
@@ -299,7 +299,7 @@ if (VERSION > 3) {
(<a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</a>
and <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</a>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>Other notable change in this release is: dom4j is no longer a
dependency of Apache POI, it solely uses xmlbeans-2.6.jar and the DOM
implementation
@@ -399,7 +399,7 @@ if (VERSION > 3) {
(<a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</a>
and <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</a>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>A summary of changes is available in the
<a
href="http://www.apache.org/dyn/closer.cgi/poi/release/RELEASE-NOTES.txt";>Release
Notes</a>.
Modified: poi/site/publish/index.html
URL:
http://svn.apache.org/viewvc/poi/site/publish/index.html?rev=1619586&r1=1619585&r2=1619586&view=diff
==============================================================================
--- poi/site/publish/index.html (original)
+++ poi/site/publish/index.html Thu Aug 21 21:01:54 2014
@@ -228,7 +228,7 @@ if (VERSION > 3) {
(<a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</a>
and <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</a>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>Other notable change in this release is: dom4j is no longer a
dependency of Apache POI, it solely uses xmlbeans-2.6.jar and the DOM
implementation
@@ -252,7 +252,7 @@ if (VERSION > 3) {
(<a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</a>
and <a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</a>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>A summary of changes is available in the
<a
href="http://www.apache.org/dyn/closer.cgi/poi/release/RELEASE-NOTES.txt";>Release
Notes</a>.
Modified: poi/site/src/documentation/content/xdocs/download.xml
URL:
http://svn.apache.org/viewvc/poi/site/src/documentation/content/xdocs/download.xml?rev=1619586&r1=1619585&r2=1619586&view=diff
==============================================================================
--- poi/site/src/documentation/content/xdocs/download.xml (original)
+++ poi/site/src/documentation/content/xdocs/download.xml Thu Aug 21 21:01:54
2014
@@ -54,7 +54,7 @@
(<link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</link>
and <link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</link>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>Other notable change in this release is: dom4j is no longer a
dependency of Apache POI, it solely uses xmlbeans-2.6.jar and the DOM
implementation
as shipped by the JDK.</p>
@@ -118,7 +118,7 @@
(<link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</link>
and <link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</link>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>A summary of changes is available in the
<link
href="http://www.apache.org/dyn/closer.cgi/poi/release/RELEASE-NOTES.txt";>Release
Notes</link>.
A full list of changes is available in the <link
href="changes.html">change log</link>.
Modified: poi/site/src/documentation/content/xdocs/index.xml
URL:
http://svn.apache.org/viewvc/poi/site/src/documentation/content/xdocs/index.xml?rev=1619586&r1=1619585&r2=1619586&view=diff
==============================================================================
--- poi/site/src/documentation/content/xdocs/index.xml (original)
+++ poi/site/src/documentation/content/xdocs/index.xml Thu Aug 21 21:01:54 2014
@@ -40,7 +40,7 @@
(<link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</link>
and <link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</link>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>Other notable change in this release is: dom4j is no longer a
dependency of Apache POI, it solely uses xmlbeans-2.6.jar and the DOM
implementation
as shipped by the JDK.</p>
@@ -56,7 +56,7 @@
(<link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3529";>CVE-2014-3529</link>
and <link
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3574";>CVE-2014-3574</link>),
relating to external entity expansion and so-called XML bombs in OOXML
documents.
- Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for
reporting these issues!</p>
+ Thanks to Stefan Kopf, Mike Boufford, Mohamed Ramadan, and Christian
Schneider for reporting these issues!</p>
<p>A summary of changes is available in the
<link
href="http://www.apache.org/dyn/closer.cgi/poi/release/RELEASE-NOTES.txt";>Release
Notes</link>.
A full list of changes is available in the <link
href="changes.html">change log</link>.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
