[
https://issues.apache.org/jira/browse/SOLR-16141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17603683#comment-17603683
]
Jan Høydahl commented on SOLR-16141:
------------------------------------
[~krisden] Wrt upgrading to 2.x, the Tika site says "{_}The Apache Tika PMC has
set September 30, 2022 as the End Of Life for the Tika 1.x branch. The PMC will
make security fixes for the 1.x branch until that date.{_}". So we'd probably
need to make that leap sooner rather than later... So if anyone feels inspired
to start that JIRA, please go ahead!
> Upgrade Apache Tika to 1.28.4
> -----------------------------
>
> Key: SOLR-16141
> URL: https://issues.apache.org/jira/browse/SOLR-16141
> Project: Solr
> Issue Type: Wish
> Reporter: Ivan Viaznikov
> Assignee: Jan Høydahl
> Priority: Major
>
> org.apache.solr:solr-cell module uses Apache POI. Apache POI version 5.2.1
> includes several bug fixes, including a resolution for CVE-2022-26336, which
> impacts poi-scratchpad.
> By upgrading Tika from 1.28.1 to 1.28.4, we'll get POI 5.2.2
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
