Bug 61988

Summary:	POI depends on Apache xmlbeans which has been EOL since 2014
Product:	POI	Reporter:	David B McDaniel <david>
Component:	POI Overall	Assignee:	POI Developers List <dev>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	P2
Version:	3.17-FINAL
Target Milestone:	---
Hardware:	PC
OS:	All

Description David B McDaniel 2018-01-10 16:37:13 UTC

POI is dependent upon xmlbeans-2.6.0 which has been retired since 2014. 

Also, the xmlbeans-2.6.0.jar contains two copies of class org.apache.xmlbeans.xml.stream.Location, which causes jarsigner to fail.

Somebody should either fix xmlbeans or move POI to use Apache Attic, as advertised.

Thanks,
David

Comment 1 Nick Burch 2018-01-10 16:51:42 UTC

Please see threads on the POI dev list such as https://lists.apache.org/thread.html/8ad08d39e616e5a48cfbf1b12385711474dd3153e5ad650174f682d3@%3Cdev.poi.apache.org%3E and http://apache-poi.1045710.n5.nabble.com/DISCUSS-Getting-a-fixed-version-of-XMLBeans-td5729378.html for discussions on the fix for this in Apache POI 4.0

Comment 2 Dominik Stadler 2018-01-10 18:13:50 UTC

Also bug 59268 handles this in bugzilla.

*** This bug has been marked as a duplicate of bug 59268 ***