[FLINK-11207] Update Apache commons-compress from 1.4.1 to 1.18

• Type: Improvement
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.5.5, 1.6.2, 1.7.0, 1.8.0
• Fix Version/s: 1.6.4, 1.7.2, 1.8.0
• Component/s: Build System
• Labels: pull-request-available
• Assignee: Nico Kruber
• Reporter: Nico Kruber
• Created: 20/Dec/18 14:44
• Updated: 19/Mar/21 08:10
• Resolved: 31/Jan/19 14:01

Description

There is at least one security vulnerability in the current version that we should address by upgrading to 1.18+:
https://app.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-32473

Issue Links

• is duplicated by: FLINK-10467 Upgrade commons-compress to 1.18
• links to: GitHub Pull Request #7348