[CVE-2018-11771] Apache Commons Compress 1.7 to 1.17 denial of service vulnerability

2018-08-16 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2018-11771: Apache Commons Compress 1.7 to 1.17 denial of service vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Commons Compress 1.7 to 1.17 Description: When reading a specially crafted ZIP

[ANN] Apache Commons Compress 1.18 Released

2018-08-16 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The Apache Commons Team is pleased to announce the release of Apache Commons Compress 1.18. Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy,