[SOLR-16141] Upgrade Apache Tika to 1.28.4

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 9.1, main (10.0), 8.11.3
• Component/s: contrib - Solr Cell (Tika extraction)
• Assignee: Jan Høydahl
• Reporter: Ivan Viaznikov
• Created: 05/Apr/22 14:28
• Updated: 10/Jan/23 20:45
• Resolved: 13/Sep/22 22:47

Description

org.apache.solr:solr-cell module uses Apache POI. Apache POI version 5.2.1 includes several bug fixes, including a resolution for CVE-2022-26336, which impacts poi-scratchpad.

By upgrading Tika from 1.28.1 to 1.28.4, we'll get POI 5.2.2

Issue Links

• is duplicated by: SOLR-16147 Upgrade to Apache POI to 5.2.1 to fix CVE-2022-26336
• links to: GitHub Pull Request #1008