[
https://issues.apache.org/jira/browse/TIKA-4199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17818823#comment-17818823
]
Tilman Hausherr commented on TIKA-4199:
---------------------------------------
After merging I discovered that the SevenZWrapper class is incomplete
(markSupported / mark / reset was missing, and many more). I tested reverting
my one-line change, and some of the previously failing tests (e.g. the 7z
tests) were now succeeding. So this kindof suggests that the cause is related
to markSupported / mark / reset. If we ever find that cause, then the one-line
change in {{PackageParser}} can be removed because it makes things slower.
> commons-compress 1.26.0 breaks Apache Tika 2.9.1
> ------------------------------------------------
>
> Key: TIKA-4199
> URL: https://issues.apache.org/jira/browse/TIKA-4199
> Project: Tika
> Issue Type: Bug
> Components: parser
> Affects Versions: 2.9.1
> Reporter: Alexander Veit
> Priority: Major
>
> An update to commons-compress 1.26.0 to fix CVE-2024-25710 and CVE-2024-26308
> breaks Tika.
>
> For more information see https://issues.apache.org/jira/browse/COMPRESS-661.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
