Author: hfnukal Date: 2012-07-25 07:05:58 -0400 (Wed, 25 Jul 2012) New Revision: 8801 Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/jakarta-poi-3.6.jar epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/jakarta-scratchpad-poi-3.6.jar Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml Log: Bug 820789 - CVE-2012-0213 apache-poi, jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml 2012-07-25 07:26:27 UTC (rev 8800) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml 2012-07-25 11:05:58 UTC (rev 8801) @@ -78,7 +78,7 @@ </zip> </target> - <target name="finalTasks" depends="modifyStartupMessage,jbossws-native-PATCH,patch-RESTEasy-CVE-2012-081,patch-JBossWeb-CVE-2011-4610,patch-JBossWeb-CVE-2012-1154,patch-CVE-2012-2377,patch-CVE-2011-4605,patch-CVE-2009-2625"> + <target name="finalTasks" depends="modifyStartupMessage,jbossws-native-PATCH,patch-RESTEasy-CVE-2012-081,patch-JBossWeb-CVE-2011-4610,patch-JBossWeb-CVE-2012-1154,patch-CVE-2012-2377,patch-CVE-2011-4605,patch-CVE-2009-2625,patch-CVE-2012-0213"> </target> <!-- Patching startup message in log when starting portal --> @@ -191,4 +191,14 @@ </copy> </target> + <target name="patch-CVE-2012-0213"> + <echo>Patch for CVE-2012-0213 apache-poi</echo> + <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-0213/jakarta-poi-3.6.jar" tofile="${epp.path}/jboss-as/server/default/deploy/gatein.ear/lib/poi-3.6.jar"/> + <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-0213/jakarta-scratchpad-poi-3.6.jar" tofile="${epp.path}/jboss-as/server/default/deploy/gatein.ear/lib/poi-scratchpad-3.6.jar"/> + <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-0213/jakarta-poi-3.6.jar" tofile="${epp.path}/jboss-as/server/production/deploy/gatein.ear/lib/poi-3.6.jar"/> + <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-0213/jakarta-scratchpad-poi-3.6.jar" tofile="${epp.path}/jboss-as/server/production/deploy/gatein.ear/lib/poi-scratchpad-3.6.jar"/> + <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-0213/jakarta-poi-3.6.jar" tofile="${epp.path}/jboss-as/server/all/deploy/gatein.ear/lib/poi-3.6.jar"/> + <copy overwrite="true" file="${basedir}/src/main/resources/eap/CVE-2012-0213/jakarta-scratchpad-poi-3.6.jar" tofile="${epp.path}/jboss-as/server/all/deploy/gatein.ear/lib/poi-scratchpad-3.6.jar"/> + </target> + </project> \ No newline at end of file Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/jakarta-poi-3.6.jar =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/jakarta-poi-3.6.jar ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/jakarta-scratchpad-poi-3.6.jar =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2012-0213/jakarta-scratchpad-poi-3.6.jar ___________________________________________________________________ Added: svn:mime-type + application/octet-stream