You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@commons.apache.org by "Gary D. Gregory" <gg...@apache.org> on 2024/02/19 01:26:00 UTC

CVE-2024-26308: Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Severity: moderate

Affected versions:

- Apache Commons Compress 1.21 before 1.26.0

Description:

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.

Users are recommended to upgrade to version 1.26, which fixes the issue.

Credit:

Yakov Shafranovich, Amazon Web Services (reporter)

References:

https://commons.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-26308


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
For additional commands, e-mail: user-help@commons.apache.org