https://bugzilla.redhat.com/show_bug.cgi?id=1981895
--- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> ---
A flaw was found in apache-commons-compress. When reading a specially crafted 7Z archive,
the construction of the list of codecs that decompress an entry can result in an infinite
loop. This flaw allows the mounting of a denial of service attack against services that
use Compress' SevenZ package. The highest threat from this vulnerability is to system
availability.
--
You are receiving this mail because:
You are on the CC list for the bug.