ALT-PU-2017-3665: package apache-poi update to version 3.14-alt1_4jpp8
Описание
This update upgrades apache-poi to version 3.14-alt1_4jpp8.
Устраненные уязвимости1
Связанные уязвимости
The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
The XLSX2CSV example in Apache POI before 3.14 allows remote attackers ...
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability