You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Steve Rowe (JIRA)" <ji...@apache.org> on 2018/08/16 16:15:00 UTC

[jira] [Resolved] (LUCENE-8456) Upgrade Apache Commons Compress to v1.18

     [ https://issues.apache.org/jira/browse/LUCENE-8456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Steve Rowe resolved LUCENE-8456.
--------------------------------
    Resolution: Fixed

> Upgrade Apache Commons Compress to v1.18
> ----------------------------------------
>
>                 Key: LUCENE-8456
>                 URL: https://issues.apache.org/jira/browse/LUCENE-8456
>             Project: Lucene - Core
>          Issue Type: Task
>            Reporter: Steve Rowe
>            Assignee: Steve Rowe
>            Priority: Major
>             Fix For: master (8.0), 7.5
>
>         Attachments: LUCENE-8456.patch
>
>
> CVE-2018-11771: Apache Commons Compress 1.7 to 1.17 denial of service vulnerability
> Announcement:
> [https://lists.apache.org/thread.html/3f01b7315c83156875741faa56263adaf104233c6b7028092896a62c@%3Cdev.commons.apache.org%3E]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org