You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@directory.apache.org by "Damian (Jira)" <ji...@apache.org> on 2023/02/24 09:55:00 UTC

[jira] [Created] (DIRSERVER-2380) poi-3.9.jar is being created in user profile

Damian created DIRSERVER-2380:
---------------------------------

             Summary: poi-3.9.jar is being created in user profile
                 Key: DIRSERVER-2380
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2380
             Project: Directory ApacheDS
          Issue Type: Bug
    Affects Versions: 2.0.0-M17
         Environment: Windows Server 2016
            Reporter: Damian
         Attachments: poi.png

When DS is started in user profile C:\Users\userName\.eclipse\1407070357_win32_win32_x86_64\configuration\org.eclipse.osgi\65\0\.cp\lib\

poi-3.9.jar is created. Updating or removing it does not fix the issue as file is regenerated every start of application. This version is know to have multiple DoS vulnerabilities and it is reported by our security. How can we fix this problem? We have installed latest version of DS.

 

How can we fix it and upgrade it to at least 3.17? Is DS patch required?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org