[
https://issues.apache.org/jira/browse/SOLR-16141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17603109#comment-17603109
]
Uwe Schindler commented on SOLR-16141:
--------------------------------------
Hi,
Solr does not directly depend on Apache POI. Normal use of Solr does not use
Apache TIK, only the Extraction Handler (Solr-DIH/Solr-Extraction). If you
don't use that component (as most users), disable it, otherwise you can try to
update it.
Uwe
> Update Apache poi to the version 5.2.1
> --------------------------------------
>
> Key: SOLR-16141
> URL: https://issues.apache.org/jira/browse/SOLR-16141
> Project: Solr
> Issue Type: Wish
> Reporter: Ivan Viaznikov
> Priority: Major
>
> org.apache.solr:solr-cell module uses Apache POI. Apache POI version 5.2.1
> includes several bug fixes, including a resolution for CVE-2022-26336, which
> impacts poi-scratchpad.
> Therefore requesting you to update the version of Apache POI to 5.2.1
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
