BZ1138166 CVE-2014-3574 CVE-2014-3529 apache-poi: various flaws

pom.xml

@@ -66,6 +66,9 @@
     <version.cdi.portlet.integration>1.0.3.Final</version.cdi.portlet.integration>
     <version.org.gatein.naming>1.1.1.Final</version.org.gatein.naming>
 
+    <!-- BZ1138166 CVE-2014-3574 CVE-2014-3529 apache-poi: various flaws -->
+    <version.org.apache.poi>3.10.1</version.org.apache.poi>
+
     <!-- to move to gatein-dep -->
     <version.scribe>1.3.5</version.scribe>
 
@@ -1101,6 +1104,23 @@
         <artifactId>gatein-naming</artifactId>
         <version>${version.org.gatein.naming}</version>
       </dependency>
+
+
+      <dependency>
+        <groupId>org.apache.poi</groupId>
+        <artifactId>poi</artifactId>
+        <version>${version.org.apache.poi}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.poi</groupId>
+        <artifactId>poi-ooxml</artifactId>
+        <version>${version.org.apache.poi}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.poi</groupId>
+        <artifactId>poi-scratchpad</artifactId>
+        <version>${version.org.apache.poi}</version>
+      </dependency>
     </dependencies>
 
   </dependencyManagement>