Return-Path:
@@ -105,10 +105,12 @@
- The Apache POI team is pleased to announce the release of 3.10-FINAL.
- This includes a large number of bug fixes and enhancements.
- This release is a bugfix release to fix two security issues with OOXML
+ (CVE-2014-3529
+ and CVE-2014-3574),
+ relating to external entity expansion and so-called XML bombs in OOXML documents.
+ Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for reporting these issues! A summary of changes is available in the
Release Notes.
A full list of changes is available in the change log.
@@ -116,49 +118,49 @@
The POI source release as well as the pre-built binary deployment packages are listed below.
Pre-built versions of all POI components are available in the central Maven repository
- under Group ID "org.apache.poi" and Version "3.10-FINAL".
+ under Group ID "org.apache.poi" and Version "3.10.1".
The Apache POI team is pleased to announce the release of 3.10.1.
+ This release is a bugfix release to fix two security issues with OOXML
+ (CVE-2014-3529
+ and CVE-2014-3574),
+ relating to external entity expansion and so-called XML bombs in OOXML documents.
+ Thanks to Stefan Kopf, Mike Boufford, and Christian Schneider for reporting these issues! A summary of changes is available in the
+ Release Notes.
+ A full list of changes is available in the change log.
+ People interested should also follow the dev mailing list to track further progress. See the downloads page for more details. The Apache POI team is pleased to announce the release of 3.11-beta 1.
This includes a large number of bug fixes and enhancements.
-
- MD5 checksum:
- 818d1e99a2efe539ba49f622b554950c
+ MD5 checksum:
+ cf9c969a812cb626e0e65bbe08de72f7
- SHA1 checksum:
- 38b61905d780e09604fb8053fd46ab1b8b18392f
+ SHA1 checksum:
+ 92103bd88d4e1faf269c6c39ee08e3e83dd66a2f
- MD5 checksum:
- e304be0a3169697d31e029f63458a963
+ MD5 checksum:
+ 87ed1ebdeedc7cf4887e1803e58ec0a0
- SHA1 checksum:
- 704f103bca893e3d4df5c2cc95d275b0cd5d0b33
+ SHA1 checksum:
+ 4cfd01b28d1cbe9995270278bb35e1af3dc45bb0
-
- MD5 checksum:
- 438157bfee9fe74869abd898820c7dae
+ MD5 checksum:
+ 4f93305b4d8b9b78fca93fd732c57dfe
- SHA1 checksum:
- d0d5f596a649d1a852916fbadec4bdd9bdf70b9e
+ SHA1 checksum:
+ 0303a95fc7f73b330cde25b14115cb0de7ceda53
- MD5 checksum:
- 95536ea16e0e97a3f02f0294a1835b74
+ MD5 checksum:
+ dd908c8ef737b141b8207d2df68b047a
- SHA1 checksum:
- 8cc6ad470852295a8af7f08848a8ad9c84f177d1
+ SHA1 checksum:
+ e539959b48d04f8730156b6add34d2f1e8623927
See the downloads page for more details.
-The Apache POI team is pleased to announce the release of 3.10-FINAL. - Featured are significant performance improvements and numerous bug fixes. See the - release notes for more details. -
-A summary of changes is available in the - Release Notes. - A full list of changes is available in the change log. - People interested should also follow the dev mailing list to track further progress.
-See the downloads page for more details.
-The Apache POI project is celebrating its 10th anniversary. On the 28th of August 2001, the first 0.1 alpha version of POI was released. --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscribe@poi.apache.org For additional commands, e-mail: commits-help@poi.apache.org