[
https://issues.apache.org/jira/browse/COMPRESS-680?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gary D. Gregory resolved COMPRESS-680.
--------------------------------------
Resolution: Information Provided
> CVE-2024-25710 and CVE-2024-26308 Indicates whether 7z decompression is
> involved.
> ---------------------------------------------------------------------------------
>
> Key: COMPRESS-680
> URL: https://issues.apache.org/jira/browse/COMPRESS-680
> Project: Commons Compress
> Issue Type: Bug
> Components: Archivers
> Affects Versions: 1.21
> Reporter: Radar wen
> Priority: Major
>
> I cannot upgrade to the latest version due to historical issues,
> Excuse me ，CVE-2024-25710 and CVE-2024-26308 Whether the SevenZArchiveEntry
> and SevenZFile classes for 7z decompression are involved.
> org.apache.commons.compress.archivers.sevenz.SevenZArchiveEntry;
> org.apache.commons.compress.archivers.sevenz.SevenZFile;
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
