[AVRO-2531] Update commons-compress to version 1.19

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.9.0
• Fix Version/s: 1.9.1
• Component/s: java
• Assignee: Ismaël Mejía
• Reporter: Ismaël Mejía
• Created: 28/Aug/19 07:36
• Updated: 06/Feb/20 21:32
• Resolved: 01/Sep/19 23:41

Description

Avro's current version of commons-compress (1.18) is subject to a DoS vulnerability so we need to upgrade it [CVE-2019-12402]

Issue Links

• is related to: AVRO-2532 Update Commons Compress
• links to: GitHub Pull Request #625