[
https://issues.apache.org/jira/browse/SOLR-17888?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18043831#comment-18043831
]
Jan Høydahl commented on SOLR-17888:
------------------------------------
I made a PR to configure our Tika instance with the vulnerable setting disabled
as default, see [https://github.com/apache/solr/pull/3932]
Also, a proposed security news item on our web page with instructions for a
workaround: [https://github.com/apache/solr-site/pull/162]
> Mitigate CVE-2025-54988, affecting Tika 1.x PDFParser
> -----------------------------------------------------
>
> Key: SOLR-17888
> URL: https://issues.apache.org/jira/browse/SOLR-17888
> Project: Solr
> Issue Type: Improvement
> Affects Versions: 9.8, 9.9
> Reporter: Dhoka Pramod
> Assignee: Jan Høydahl
> Priority: Major
> Labels: pull-request-available
> Time Spent: 2h 20m
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
