You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@solr.apache.org by "Uwe Schindler (Jira)" <ji...@apache.org> on 2022/09/12 14:20:00 UTC

[jira] [Comment Edited] (SOLR-16141) Update Apache poi to the version 5.2.1

    [ https://issues.apache.org/jira/browse/SOLR-16141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17603109#comment-17603109 ] 

Uwe Schindler edited comment on SOLR-16141 at 9/12/22 2:19 PM:
---------------------------------------------------------------

Hi,
Solr does not directly depend on Apache POI. Normal use of Solr does not use Apache TIKA, only the Extraction Handler (Solr-DIH/Solr-Extraction). If you don't use that component (as most users), disable it, otherwise you can try to update it.
Uwe


was (Author: thetaphi):
Hi,
Solr does not directly depend on Apache POI. Normal use of Solr does not use Apache TIK, only the Extraction Handler (Solr-DIH/Solr-Extraction). If you don't use that component (as most users), disable it, otherwise you can try to update it.
Uwe

> Update Apache poi to the version 5.2.1
> --------------------------------------
>
>                 Key: SOLR-16141
>                 URL: https://issues.apache.org/jira/browse/SOLR-16141
>             Project: Solr
>          Issue Type: Wish
>            Reporter: Ivan Viaznikov
>            Priority: Major
>
> org.apache.solr:solr-cell module uses Apache POI. Apache POI version 5.2.1 includes several bug fixes, including a resolution for CVE-2022-26336, which impacts poi-scratchpad.
> Therefore requesting you to update the version of Apache POI to 5.2.1



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org