RHSA-2014:1400Medium

Red Hat Security Advisory: Apache POI security update

Published
October 13, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (2)

CVE-2014-3529 →CVE-2014-3574 →

📋 Description

CVE-2014-3529 — apache-poi: XML eXternal Entity (XXE) flaw CVE-2014-3574 — apache-poi: entity expansion (billion laughs) flaw

🎯 Affected products1

  • Red Hat JBoss BRMS 6.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.

🔗 References (6)