Re: VFS Questions

2023-09-13 Thread Gary Gregory
Hello, On Wed, Sep 13, 2023 at 5:57 PM Mark Fortner wrote: > > I was looking at the VFS code recently and had a few questions: > >- There's a *plugins.xml* file that each of the plugins needs to >register themselves with. I was wondering if there was a reason that the >

VFS Questions

2023-09-13 Thread Mark Fortner
I was looking at the VFS code recently and had a few questions: - There's a *plugins.xml* file that each of the plugins needs to register themselves with. I was wondering if there was a reason that the *ServiceLoader* wasn't used for this? It would seem like a natural fit. - Are there

CVE-2023-42503: Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

2023-09-13 Thread Gary D. Gregory
Severity: moderate Affected versions: - Apache Commons Compress 1.22 before 1.24.0 Description: Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are

Re: [DRAFT][REPORT] September 2023

2023-09-13 Thread Gary Gregory
I most certainly will! Thank you! Gary PS: The Commons "Project" is made of "Components". I'm pretty sure Apache does not have the formal concept of "Sub-projects" :-) On Wed, Sep 13, 2023 at 3:18 AM Alex Herbert wrote: > > You could add that we had a successful participant in Google Summer of >

Re: [DRAFT][REPORT] September 2023

2023-09-13 Thread Alex Herbert
You could add that we had a successful participant in Google Summer of Code 2023 working on the statistics sub-project. This may apply to the community section. Alex On Wed, 13 Sept 2023 at 02:59, Gary Gregory wrote: > > Here is the report I plan on filing, probably in the AM (EST): > > ##