You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@poi.apache.org by fa...@apache.org on 2022/01/14 23:31:24 UTC
svn commit: r1897063 - in /poi/site/publish: download.html index.html
Author: fanningpj
Date: Fri Jan 14 23:31:24 2022
New Revision: 1897063
URL: http://svn.apache.org/viewvc?rev=1897063&view=rev
Log:
POI 5.2.0 release
Modified:
poi/site/publish/download.html
poi/site/publish/index.html
Modified: poi/site/publish/download.html
URL: http://svn.apache.org/viewvc/poi/site/publish/download.html?rev=1897063&r1=1897062&r2=1897063&view=diff
==============================================================================
--- poi/site/publish/download.html (original)
+++ poi/site/publish/download.html Fri Jan 14 23:31:24 2022
@@ -254,7 +254,7 @@ document.write("Last Published: " + docu
<li>
<a href="https://www.apache.org/dyn/closer.lua/poi/release/src/poi-src-5.2.0-20220106.tgz">poi-src-5.2.0-20220106.tgz</a>
- (110 MB, <a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.tgz.asc">signature (.asc)</a>,
+ (112 MB, <a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.tgz.asc">signature (.asc)</a>,
checksum: <a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.tgz.sha256">SHA-256</a>,
<a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.tgz.sha512">SHA-512</a>)
</li>
@@ -262,7 +262,7 @@ document.write("Last Published: " + docu
<li>
<a href="https://www.apache.org/dyn/closer.lua/poi/release/src/poi-src-5.2.0-20220106.zip">poi-src-5.2.0-20220106.zip</a>
- (114 MB, <a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.zip.asc">signature (.asc)</a>,
+ (115 MB, <a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.zip.asc">signature (.asc)</a>,
checksum: <a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.zip.sha256">SHA-256</a>,
<a href="https://downloads.apache.org/poi/release/src/poi-src-5.2.0-20220106.zip.sha512">SHA-512</a>)
</li>
Modified: poi/site/publish/index.html
URL: http://svn.apache.org/viewvc/poi/site/publish/index.html?rev=1897063&r1=1897062&r2=1897063&view=diff
==============================================================================
--- poi/site/publish/index.html (original)
+++ poi/site/publish/index.html Fri Jan 14 23:31:24 2022
@@ -179,25 +179,25 @@ document.write("Last Published: " + docu
<a name="Project+News"></a>
<h2 class="boxed">Project News</h2>
<div class="section">
+<a name="14+January+2021+-+POI+5.2.0+available"></a>
+<h3 class="boxed">14 January 2021 - POI 5.2.0 available</h3>
+<p>The Apache POI team is pleased to announce the release of 5.2.0.
+ Several dependencies were updated to their latest versions to pick up security fixes and other improvements.</p>
+<p>A summary of changes is available in the
+ <a href="https://www.apache.org/dyn/closer.lua/poi/release/RELEASE-NOTES.txt">Release Notes</a>.
+ A full list of changes is available in the <a href="changes.html#5.2.0">change log</a>.
+ People interested should also follow the <a href="help/index.html">dev list</a> to track progress.</p>
+<p>See the <a href="download.html#POI-5.2.0">downloads</a> page for more details.</p>
+<p>POI requires Java 8 or newer since version 4.0.1.</p>
<a name="10%2B16%2B18+December+2021-+Log4j+vulnerabilities+CVE-2021-44228%2C+CVE-2021-45046+and+CVE-2021-45105"></a>
<h3 class="boxed">10+16+18 December 2021- Log4j vulnerabilities CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105</h3>
<p>The Apache POI PMC has evaluated the security vulnerabilities reported
for Apache Log4j.</p>
-<p>POI 5.1.0 and XMLBeans 5.0.2 (the latest releases of both) have only dependencies on log4j-api 2.14.1.
+<p>POI 5.1.0 and XMLBeans 5.0.2 only have dependencies on log4j-api 2.14.1.
The security vulnerabilities are not in log4j-api - they are in log4j-core.</p>
<p>If any POI or XMLBeans user uses log4j-core to control their logging of their application,
we strongly recommend that they upgrade all their log4j dependencies to the latest
version (currently v2.17.1) - including log4j-api.</p>
-<a name="1+November+2021+-+POI+5.1.0+available"></a>
-<h3 class="boxed">1 November 2021 - POI 5.1.0 available</h3>
-<p>The Apache POI team is pleased to announce the release of 5.1.0.
- Several dependencies were updated to their latest versions to pick up security fixes and other improvements.</p>
-<p>A summary of changes is available in the
- <a href="https://www.apache.org/dyn/closer.lua/poi/release/RELEASE-NOTES.txt">Release Notes</a>.
- A full list of changes is available in the <a href="changes.html#5.1.0">change log</a>.
- People interested should also follow the <a href="help/index.html">dev list</a> to track progress.</p>
-<p>See the <a href="download.html#POI-5.2.0">downloads</a> page for more details.</p>
-<p>POI requires Java 8 or newer since version 4.0.1.</p>
<a name="13+January+2021+-+CVE-2021-23926+-+XML+External+Entity+%28XXE%29+Processing+in+Apache+XMLBeans+versions+prior+to+3.0.0"></a>
<h3 class="boxed">13 January 2021 - CVE-2021-23926 - XML External Entity (XXE) Processing in Apache XMLBeans versions prior to 3.0.0</h3>
<p>Description:<br>
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@poi.apache.org
For additional commands, e-mail: commits-help@poi.apache.org