--- Comment #9 from Mauro Matteo Cascella <mcascell(a)redhat.com> ---
Class ZipArchiveOutputStream creates an output stream for writing files in the
ZIP file format. The flaw is triggered when calling the putArchiveEntry()
method with a carefully crafted ArchiveEntry, whose name is then encoded by the
aforementioned encoding algorithm used internally in Apache Commons Compress.
You are receiving this mail because:
You are on the CC list for the bug.