[ 
https://issues.apache.org/jira/browse/SOLR-16141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17603109#comment-17603109
 ] 

Uwe Schindler edited comment on SOLR-16141 at 9/12/22 2:19 PM:
---------------------------------------------------------------

Hi,
Solr does not directly depend on Apache POI. Normal use of Solr does not use 
Apache TIKA, only the Extraction Handler (Solr-DIH/Solr-Extraction). If you 
don't use that component (as most users), disable it, otherwise you can try to 
update it.
Uwe


was (Author: thetaphi):
Hi,
Solr does not directly depend on Apache POI. Normal use of Solr does not use 
Apache TIK, only the Extraction Handler (Solr-DIH/Solr-Extraction). If you 
don't use that component (as most users), disable it, otherwise you can try to 
update it.
Uwe

> Update Apache poi to the version 5.2.1
> --------------------------------------
>
>                 Key: SOLR-16141
>                 URL: https://issues.apache.org/jira/browse/SOLR-16141
>             Project: Solr
>          Issue Type: Wish
>            Reporter: Ivan Viaznikov
>            Priority: Major
>
> org.apache.solr:solr-cell module uses Apache POI. Apache POI version 5.2.1 
> includes several bug fixes, including a resolution for CVE-2022-26336, which 
> impacts poi-scratchpad.
> Therefore requesting you to update the version of Apache POI to 5.2.1



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to