Merge pull request #600 from bradh/CVE-2019-12402

Upgrade commons-compress to 1.19