Uploaded image for project: 'Alfresco One Platform'
  1. Alfresco One Platform
  2. ACE-4473

CLONE - Potential data corruption in Apache POI library

    Details

      Description

      This has been fixed in 5.0.N with revision r114611. This fix needs to be merged to either 5.1 or 5.1.N

      A bug has been found in Apache POI (all versions) that causes a data corruption if the input file hass less than 4 (OOXML 8) bytes.

      This bug has been fixed by Alfresco and reported to Apache:
      https://bz.apache.org/bugzilla/show_bug.cgi?id=58156

      We maintain our own fork of the apache POI library that contains patches for bugs that did not yet made it into an official Apache POI release. The current version of this patch is: 3.10.1-20140922-alfresco-patched and can be found together with its sources in Nexus.

      We need to create an updated version of this file and change the maven dependancies. The patch is attached to the Apache bug repoprt and this JIRA ticket.

        Attachments

          Issue Links

            Structure

              Activity

                People

                • Assignee:
                  closedbugs Closed Bugs
                  Reporter:
                  skopf Stefan Kopf
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Time Tracking

                    Estimated:
                    Original Estimate - Not Specified
                    Not Specified
                    Remaining:
                    Remaining Estimate - 1 hour
                    1h
                    Logged:
                    Time Spent - 0 minutes
                    0m

                      Structure Helper Panel