You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@karaf.apache.org by jb...@apache.org on 2021/07/26 05:37:20 UTC

[karaf] branch karaf-4.2.x updated: [KARAF-7220] Upgrade commons compress to 1.21

This is an automated email from the ASF dual-hosted git repository.

jbonofre pushed a commit to branch karaf-4.2.x
in repository https://gitbox.apache.org/repos/asf/karaf.git


The following commit(s) were added to refs/heads/karaf-4.2.x by this push:
     new dda1710  [KARAF-7220] Upgrade commons compress to 1.21
dda1710 is described below

commit dda17102c07e0a55467c8565bd8c2f8b91ddf202
Author: Stephen Kitt <sk...@redhat.com>
AuthorDate: Tue Jul 13 18:15:30 2021 +0200

    [KARAF-7220] Upgrade commons compress to 1.21
    
    Version 1.21 fixes a number of CVEs, see
    https://commons.apache.org/proper/commons-compress/security-reports.html
    for details.
    
    The full release notes are at
    https://commons.apache.org/proper/commons-compress/changes-report.html#a1.21
    
    Signed-off-by: Stephen Kitt <sk...@redhat.com>
    
    (cherry picked from commit 0a93becccce50f6c0d9fb9a0ac590a5d6224b27f)
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 332ac44..74f6e2b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -178,7 +178,7 @@
         <jaxb.version>2.3.3</jaxb.version> 
         <commons-beanutils.version>1.9.4</commons-beanutils.version>
         <commons-codec.version>1.15</commons-codec.version>
-        <commons-compress.version>1.20</commons-compress.version>
+        <commons-compress.version>1.21</commons-compress.version>
         <commons-collections.version>3.2.2</commons-collections.version>
         <commons-dbcp.version>1.4_3</commons-dbcp.version>
         <commons-fileupload.version>1.4</commons-fileupload.version>