Bug 207934 - Update textproc/apache-poi to version 3.14
Summary: Update textproc/apache-poi to version 3.14
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Kurt Jaeger
URL:
Keywords: patch-ready, security
Depends on:
Blocks:
 
Reported: 2016-03-12 21:31 UTC by Pedro F. Giffuni
Modified: 2016-04-24 19:37 UTC (History)
2 users (show)

See Also:
pi: merge-quarterly+


Attachments
Update to 3.14 (2.11 KB, patch)
2016-03-12 21:31 UTC, Pedro F. Giffuni
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Pedro F. Giffuni freebsd_committer freebsd_triage 2016-03-12 21:31:32 UTC
Created attachment 168061 [details]
Update to 3.14

From the release notes:

Common: New version of ooxml-schema and ooxml-security jars which are linked to custom safe type loader
Common: OPC relation fix for multiple same named ids (#54916)
Common: Update third-party dependencies: commons-logging, commons-codec, xmlsec, bouncycastle
Excel: Allow to set multiple cell style properties at once (#58633)
Excel: Add API for inserting ignored warnings into XSSF sheets.
       This can be used e.g. to suppress 'number stored as text' warnings. (#56892)
Powerpoint: unify hyperlink handling
HSLF: various fixes for parsing and rendering
WMF:  new API for WMF parsing and rendering (for Powerpoint)
XWPF: various fixes for handling paragraphs and tables
____

wrt 3.10.1 there is also a fix for CVE-2014-3574.

There is some possibility that Apache OpenOffice may depend on this package in the future.

% make check-plist
====> Checking for pkg-plist issues (check-plist)
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
===> Checking for items in pkg-plist which are not in STAGEDIR
===> No pkg-plist issues found (check-plist)
Comment 1 Pedro F. Giffuni freebsd_committer freebsd_triage 2016-03-25 03:51:11 UTC
Add security tag per CVE-2014-3574
Comment 2 Kurt Jaeger freebsd_committer freebsd_triage 2016-04-17 19:13:43 UTC
testbuilds are fine
Comment 3 commit-hook freebsd_committer freebsd_triage 2016-04-17 19:21:54 UTC
A commit references this bug:

Author: pi
Date: Sun Apr 17 19:20:57 UTC 2016
New revision: 413539
URL: https://svnweb.freebsd.org/changeset/ports/413539

Log:
  textproc/apache-poi: 3.10.1 -> 3.14

  Changes: http://poi.apache.org/changes.html
  - Fix for CVE-2014-3574
  - Common: New version of ooxml-schema and ooxml-security jars which
    are linked to custom safe type loader
  - Common: OPC relation fix for multiple same named ids (#54916)
  - Common: Update third-party dependencies: commons-logging,
    commons-codec, xmlsec, bouncycastle
  - Excel: Allow to set multiple cell style properties at once (#58633)
  - Excel: Add API for inserting ignored warnings into XSSF sheets.
    This can be used e.g. to suppress 'number stored as text' warnings.
    (#56892)
  - Powerpoint: unify hyperlink handling
  - HSLF: various fixes for parsing and rendering
  - WMF: new API for WMF parsing and rendering (for Powerpoint)
  - XWPF: various fixes for handling paragraphs and tables

  PR:		207934
  MFH:		2016Q2
  Submitted by:	pfg

Changes:
  head/textproc/apache-poi/Makefile
  head/textproc/apache-poi/distinfo
Comment 4 Mark Felder freebsd_committer freebsd_triage 2016-04-24 13:11:58 UTC
MFH approved
Comment 5 commit-hook freebsd_committer freebsd_triage 2016-04-24 19:35:55 UTC
A commit references this bug:

Author: pi
Date: Sun Apr 24 19:35:24 UTC 2016
New revision: 413956
URL: https://svnweb.freebsd.org/changeset/ports/413956

Log:
  textproc/apache-poi: 3.10.1 -> 3.14

  Changes: http://poi.apache.org/changes.html
  - Fix for CVE-2014-3574
  - Common: New version of ooxml-schema and ooxml-security jars which
    are linked to custom safe type loader
  - Common: OPC relation fix for multiple same named ids (#54916)
  - Common: Update third-party dependencies: commons-logging,
    commons-codec, xmlsec, bouncycastle
  - Excel: Allow to set multiple cell style properties at once (#58633)
  - Excel: Add API for inserting ignored warnings into XSSF sheets.
    This can be used e.g. to suppress 'number stored as text' warnings.
    (#56892)
  - Powerpoint: unify hyperlink handling
  - HSLF: various fixes for parsing and rendering
  - WMF: new API for WMF parsing and rendering (for Powerpoint)
  - XWPF: various fixes for handling paragraphs and tables

  PR:		207934
  MFH:		r413539
  Submitted by:	pfg
  Approved by:	ports-secteam (feld)
  Security:	CVE-2014-3574

Changes:
_U  branches/2016Q2/
  branches/2016Q2/textproc/apache-poi/Makefile
  branches/2016Q2/textproc/apache-poi/distinfo
Comment 6 Kurt Jaeger freebsd_committer freebsd_triage 2016-04-24 19:37:00 UTC
Committed, thanks!