ALT-PU-2016-3318: package apache-poi update to version 3.12-alt1_2jpp8
Описание
This update upgrades apache-poi to version 3.12-alt1_2jpp8.
Устраненные уязвимости4
Ссылки5
GHSA-5wfp-8643-c58x
https://github.com/advisories/GHSA-5wfp-8643-c58xGHSA-jqx5-h2hw-5q4f
https://github.com/advisories/GHSA-jqx5-h2hw-5q4fGHSA-q56h-jjj6-52mf
https://github.com/advisories/GHSA-q56h-jjj6-52mfGHSA-x9mm-6gpf-f749
https://github.com/advisories/GHSA-x9mm-6gpf-f749Связанные уязвимости
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel Definition Format (CDF) or Compound File Binary Format (CFBF) document.
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructu ...
