https://bz.apache.org/bugzilla/show_bug.cgi?id=68691
--- Comment #3 from PJ Fanning <[email protected]> --- POI doesn't even use the pack200 code. POI tests run fine with the latest commons-compress jar. We are not going to expedite a POI release. Feel free to update your build to use a newer commons-compress jar. If you have a POC that demos that POI 5.2.5 is actually affected, please provide it privately using the security guidelines. https://poi.apache.org/security.html -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
