commit 25de96ea4f896769afac4075f87f44d991eab396
author Benoit TELLIER <btellier@linagora.com> Mon Feb 19 16:19:14 2024 +0100
committer Benoit TELLIER <btellier@linagora.com> Mon Feb 26 08:43:50 2024 +0100
tree 159e32867382cb246a0b8a7d8a8bb6b96ab6bf52
parent 8b9cbf138555b9c3c5027f9a0872323da511486a

[UPDATE] commons-compress 1.24.0 -> 1.26.0

Fixes:
 - CVE-2024-25710: Denial of service caused by an infinite loop for a corrupted DUMP file
 - CVE-2024-26308: OutOfMemoryError unpacking broken Pack200 file

pom.xml

diff --git a/pom.xml b/pom.xml
index 0df0fd6..56c5925 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2565,7 +2565,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>
-                <version>1.24.0</version>
+                <version>1.26.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>