[BEAM-3873] Current version of commons-compress is DOS vulnerable CVE-2018-1324

• Type: Bug
• Status: Resolved
• Priority: P2
• Resolution: Fixed
• Affects Version/s: 2.3.0, 2.4.0
• Fix Version/s: 2.5.0
• Component/s: build-system, sdk-java-core
• Labels: Done
• Assignee: Ismaël Mejía
• Reporter: Ismaël Mejía
• Created: 18/Mar/18 11:09
• Updated: 06/Oct/20 21:57
• Resolved: 21/Mar/18 21:45

Description

The commons-compress version of the library used by Beam has a security vulnerability. For more details see CVE-2018-1324

Issue Links

• links to: GitHub Pull Request #4889