Author: fanningpj
Date: Mon Nov 11 20:08:11 2024
New Revision: 1921848
URL: http://svn.apache.org/viewvc?rev=1921848&view=rev
Log:
update details about log4j
Modified:
poi/site/src/documentation/content/xdocs/changes.xml
poi/site/src/documentation/content/xdocs/index.xml
Modified: poi/site/src/documentation/content/xdocs/changes.xml
URL:
http://svn.apache.org/viewvc/poi/site/src/documentation/content/xdocs/changes.xml?rev=1921848&r1=1921847&r2=1921848&view=diff
==============================================================================
--- poi/site/src/documentation/content/xdocs/changes.xml (original)
+++ poi/site/src/documentation/content/xdocs/changes.xml Mon Nov 11 20:08:11
2024
@@ -70,7 +70,7 @@
</p>
</section>
- <release version="5.4.0" date="2024-11-??">
+ <release version="5.4.0" date="2024-12-??">
<summary>
<summary-item>Add support for SOURCE_DATE_EPOCH to allow to create
reproducible binary files without creation/modification-timestamp being
set</summary-item>
<summary-item>Breaking change: Some invalid content in the
compressed file-formats for xlsx/docx/pptx/... now fail parsing to prevent
handling malicious input incorrectly</summary-item>
@@ -79,7 +79,6 @@
<summary-item>Upgrade commons-codec dependency to
1.17.1</summary-item>
<summary-item>Upgrade commons-compress dependency to
1.27.1</summary-item>
<summary-item>Upgrade commons-io dependency to
2.17.0</summary-item>
- <summary-item>Upgrade log4j-api dependency to 2.24.1</summary-item>
<summary-item>Upgrade pdfbox dependency to 3.0.3</summary-item>
<summary-item>Upgrade xmlsec dependency to 3.0.5</summary-item>
<summary-item>Upgrade xmlbeans dependency to 5.2.2</summary-item>
Modified: poi/site/src/documentation/content/xdocs/index.xml
URL:
http://svn.apache.org/viewvc/poi/site/src/documentation/content/xdocs/index.xml?rev=1921848&r1=1921847&r2=1921848&view=diff
==============================================================================
--- poi/site/src/documentation/content/xdocs/index.xml (original)
+++ poi/site/src/documentation/content/xdocs/index.xml Mon Nov 11 20:08:11 2024
@@ -27,6 +27,18 @@
<body>
<section><title>Project News</title>
+ <section><title>11 November 2024 - Avoid log4j-api 2.24.1</title>
+ <p>When testing a potential Apache POI 5.4.0 release, we discovered a
serious bug in
+ log4j-api 2.24.1. This leads to NullPointerExceptions when you use
log4j-core that is not of
+ the exact same version (2.24.1). We recommend that users avoid log4j
2.24.x.</p>
+ <p>Please direct any queries to the Log4j Team. The main issue is
+ <a href="https://github.com/apache/logging-log4j2/issues/3143";>Issue
3143</a>.</p>
+ <p>An XMLBeans 5.2.2 release was recently made and that has the
problematic log4j-api 2.24.1
+ dependency. <a href="https://xmlbeans.apache.org/";>XMLBeans
5.2.2</a> doesn't have many changes
+ so users should avoid it unless they need the changes in it. If you
must use that XMLBeans release,
+ you will need to carefully test the upgrade.</p>
+ </section>
+
<!-- latest final release -->
<section><title>2 July 2024 - POI 5.3.0 available</title>
<p>The Apache POI team is pleased to announce the release of 5.3.0.
@@ -196,7 +208,7 @@
</section>
</section>
- <section><title>Contributing </title>
+ <section><title>Contributing</title>
<p>
So you'd like to contribute to the project? Great! We need
enthusiastic,
hard-working, talented folks to help us on the project, no matter your
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
