This is an automated email from the ASF dual-hosted git repository.
rskraba pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/avro.git
The following commit(s) were added to refs/heads/master by this push:
new a2cfd35 Update apache/commons-compress to 1.21 (#1290)
a2cfd35 is described below
commit a2cfd3519c20a3022c11ff01c1f42acfad6b0108
Author: Anderson de Borba <[email protected]>
AuthorDate: Fri Jul 16 11:29:20 2021 +0100
Update apache/commons-compress to 1.21 (#1290)
A bunch of vulnerabilities have been disclosed recently for the version
1.20:
https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316638
https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316640
https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316641
https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316639
---
lang/java/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lang/java/pom.xml b/lang/java/pom.xml
index 12ef814..97c43b2 100644
--- a/lang/java/pom.xml
+++ b/lang/java/pom.xml
@@ -52,7 +52,7 @@
<maven.version>3.8.1</maven.version>
<ant.version>1.10.10</ant.version>
<commons-cli.version>1.4</commons-cli.version>
- <commons-compress.version>1.20</commons-compress.version>
+ <commons-compress.version>1.21</commons-compress.version>
<commons-lang.version>3.12.0</commons-lang.version>
<tukaani.version>1.9</tukaani.version>
<easymock.version>4.3</easymock.version>
