[HADOOP-18895] upgrade to commons-compress 1.24.0 due to CVE

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.4.0, 3.3.9
• Component/s: build
• Labels: pull-request-available
• Target Version/s: 3.4.0
• Hadoop Flags: Reviewed
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 13/Sep/23 15:02
• Updated: 21/Jan/24 02:26
• Resolved: 16/Jan/24 09:28

Description

Includes some important bug fixes including https://lists.apache.org/thread/g9lrsz8j9nrgltcoc7v6cpkopg07czc9 - CVE-2023-42503

Issue Links

• causes: HADOOP-18929 Build failure while trying to create apache 3.3.7 release locally.
• links to: GitHub Pull Request #6062
• links to: GitHub Pull Request #6073