[
https://issues.apache.org/jira/browse/COCOON-2363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16774179#comment-16774179
]
Alfred Nathaniel commented on COCOON-2363:
------------------------------------------
Commited fix to 2.1.13-dev, including updates to
* commons-logging-1.2
* log4j-1.2.17
* commons-codec-1.10.jar
* curvesapi-1.06.jar
* poi-3.14.jar
* poi-ooxml-3.14.jar
* poi-ooxml-schemas-3.14.jar
* xmlbeans-3.0.2.jar
* slf4j-log4j12-1.6.4.jar
http://svn.apache.org/viewvc?view=revision&revision=1853823
http://svn.apache.org/viewvc?view=revision&revision=1853975
> Update to poi-3.14
> ------------------
>
> Key: COCOON-2363
> URL: https://issues.apache.org/jira/browse/COCOON-2363
> Project: Cocoon
> Issue Type: Improvement
> Components: Blocks: POI
> Affects Versions: 2.1.12
> Reporter: Alfred Nathaniel
> Priority: Major
> Fix For: 2.1.13
>
>
> The Cocoon 2.1.12 POI block uses poi-3.10-final which contains a few security
> issues.
> Updating to 3.14 is low-hanging fruit, except that minimum Java is 1.6.
> (3.15 drops deprecated methods. 4.0 raises Java to 1.8).
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
