Batik 1.15 fixes some security issues
PJ Fanning <[email protected]> Thu, 22 Sep 2022 15:49:54 +0000 (UTC)
| Newsgroups | gmane.comp.jakarta.poi.user |
|---|---|
| Message-ID | <[email protected]> |
Hi everyone, Apache Batik [1] is used by Apache POI to work with SVG pictures that can be embedded in Microsoft documents. It is an optional dependency of poi-ooxml and it appears that we only support it in the XSLF packages for pptx files. Batik 1.15 has just been released and contains a number of security fixes. [2] [3] [4] We recommend that all users who use the Batik support in poi-ooxml upgrade to Batik 1.15. We do not expect that anyone upgrading from batik 1.14 to 1.15 will see any issues. There is no plan to do a special POI release because this an optional dependency. [1] https://xmlgraphics.apache.org/batik/ [2] https://lists.apache.org/thread/s1jobjxpljx4oygfqjqqfrohnfyyhlbq [3] https://lists.apache.org/thread/lnh1tnc8gh9r4vh69x3nljcx55v43tcj [4] https://lists.apache.org/thread/zx2jjvdow82p058sovr5qnxprsq87rg7