[From nobody Mon Sep 21 12:43:11 2026 Received: (at 1012016-close) by bugs.debian.org; 21 Sep 2026 11:40:48 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 150; neutral, 272; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59254) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x8cO8-00Dgpn-2A for 1012016-close@bugs.debian.org; Mon, 21 Sep 2026 11:40:48 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x8cO6-002uw3-37 for 1012016-close@bugs.debian.org; Mon, 21 Sep 2026 11:40:46 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Z/IDfFgmTZQc0sNZEg+afSDb0MT85tyEbxmk5QK09YE=; b=GjtT5ne7KxTXw6Fjt+UL8HOw2Q 0AziJyqenqn4sMGXWK/CTbVcZ4HI9Am1OffW2RxWOVsRSAq+wamgTVZyMS/HX5/DFf1FfJI4JJnT5 qV2F2ns2KHRdM+mZSJ+wApJClVDHDXIcMuyu70HkkTamfltj1sEtW7gtH6+Rf9S1EUTEbTxuzn4nJ T+IIG4m8GO085/FwdMcUhARXjwJadL3RsyNDdG4yAuqIpu4DQ4cCB2/rrgsHeZG/ZcpFobzr1wdDV bztcQmJkk1Xif9cg7PBdDefsACDGKeKbtSwtnHLiOxmGsZ5AIK6kTBctPjvpn0gmpprxcvof8hsjs sqgVukUQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x8cO5-00000007iVz-38KT; Mon, 21 Sep 2026 11:40:45 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Emmanuel Bourg <ebourg@apache.org> To: 1012016-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libapache-poi-java Debian: DAK Debian-Changes: libapache-poi-java_4.1.1-1_source.changes Debian-Source: libapache-poi-java Debian-Version: 4.1.1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1012016: fixed in libapache-poi-java 4.1.1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4872369607761608079==" Message-Id: <E1x8cO5-00000007iVz-38KT@fasolo.debian.org> Date: Mon, 21 Sep 2026 11:40:45 +0000 X-CrossAssassin-Score: 2 --===============4872369607761608079== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libapache-poi-java Source-Version: 4.1.1-1 Done: Emmanuel Bourg <ebourg@apache.org> We believe that the bug you reported is fixed in the latest version of libapache-poi-java, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1012016@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emmanuel Bourg <ebourg@apache.org> (supplier of updated libapache-poi-java pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 21 Sep 2026 11:56:32 +0200 Source: libapache-poi-java Architecture: source Version: 4.1.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 943565 1012016 Changes: libapache-poi-java (4.1.1-1) unstable; urgency=3Dmedium . * New upstream release - Fixes CVE-2019-12415 (Closes: #943565) - Refreshed the patches - New build dependency on libmockito-java - New dependency on libbatik-java for the SVG image renderer - New build dependency on libguava-java * Adapted the build to the XMLBeans 4 metadata layout, the compiled schemas were dropped from poi-ooxml-schemas.jar and no OOXML document could be opened (Closes: #1012016) * Added commons-io to the test classpath, commons-compress requires it * Removed the libapache-poi-java-doc package * Repaired debian/orig-tar.sh (ECMA and ETSI URLs, SVN tag naming) * Standards-Version updated to 4.7.4 Checksums-Sha1: 1f5312b51f497ae9ce6bd9cbc8ba5c0fb83b8762 2542 libapache-poi-java_4.1.1-1.dsc c060feab6a55b193b0f1fedf54192b603a8cda3d 79453564 libapache-poi-java_4.1.1.o= rig.tar.xz 8e74d306a284931bd5a058f1676b1d80c3e081dd 17648 libapache-poi-java_4.1.1-1.de= bian.tar.xz ef46587114c713998b34cea4389c3bcc5e04203a 17887 libapache-poi-java_4.1.1-1_so= urce.buildinfo Checksums-Sha256: 2867578083525b9a046519f537a869f77a331b19de275ce4251f8597428704d2 2542 libapa= che-poi-java_4.1.1-1.dsc d9799ada064a68fc8ab46e55534ff9a6b09279a4b6212bc75da57c5875b14262 79453564 li= bapache-poi-java_4.1.1.orig.tar.xz a82d518cc150772f430eeb3e030d6ed76072916fde516e0c901a6f4c235f75ec 17648 libap= ache-poi-java_4.1.1-1.debian.tar.xz 0a9bb400d8753ae0554aa25ed005b5fdcd4ed5d5ce32cc2c37266a95d83e9962 17887 libap= ache-poi-java_4.1.1-1_source.buildinfo Files: f5234e851337a4bd1687c4ee26d58923 2542 java optional libapache-poi-java_4.1.1= -1.dsc 993a31f89f806d7be4b50bf38fc60424 79453564 java optional libapache-poi-java_4= .1.1.orig.tar.xz 1791eca4b0ec505e96bc22342e2cd0c0 17648 java optional libapache-poi-java_4.1.= 1-1.debian.tar.xz 118a820f4c47c4d9df3bd440ca3a5958 17887 java optional libapache-poi-java_4.1.= 1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmqxB4ASHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCslkQQAMaOetlIDGL2ukiKFmTUej2Z3BRasGYp sQhrFxqg3IfBOr6WeshpXLdIjL2Ua5yj2RSRvX/9DKDWRkvjiWs4kE3rj4FyMXfw zVDcHCppkDtBLVNOkZ1ADia8NekR7VA+yBQof3i7Wq70C/QO+3kJvpJ/md/qYBuO 3NfmGqcR/KfkwaygKokZFxe1uYAU9V6o+4rdCKoO6+tPu5qRX8jVzxQTX1q5hkFO Bk2wSYCSc8aFhzbH2Gzq3vT1OdiHRNaMiD3/DaWyZhxRfFj/KxwD2ZOox4GNEhu/ 01BcFHAna4Dp+K0TUDcMVM3BSn9RDkw8RL8q9Hp/3lz+pNsZK7gsE4BN2NQm05S0 Hmzj5LViYtjghz1QznbuH+zGqV1yQC2f9uClKPrz2QqFaMp4fQn35+uQ1JgABLT4 Y67CZF+ENFwSMBwOCbXh5RYeVCeR2l5WsoSVljgSe1lUX0JYe1sLU3SbquB1XR3m 16zY34HVqF0S7ctLwFogJTUD21DqpOH5eyWr2nuwU3fW4Fp9R3T37J6v3L5pTt4E Nq/rD7k2mv7LcitzzYoAV3fzI2rP/pvUDiEP2Y3Oeq9YZ+/P6aKI+K5Ute39/WNw i9XCySCUwf7gfdCt3sjtGK58ewrcnC/L/0oQH+y8/MeoOlk9LKwTGQZzRrg4WYpe uP6Xn0ZxaKJV =3DuAu9 -----END PGP SIGNATURE----- --===============4872369607761608079== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCarEXvQAKCRCb9qggYcy5 IcHNAQD3iOzxWM7Ay2KlxL8HafFrZwp6vR0n4RxnWzszW2ZUrwD6AhTuR1+Uc4m0 FLNIpmqcMoZ3ukrwEkzQdRX9ilH45Qg= =P6RV -----END PGP SIGNATURE----- --===============4872369607761608079==-- ]