Upgraded Apache Commons Compress from 1.18 to 1.22 - CVE-2021-35515 C…

…VE-2021-35516 CVE-2021-35517 CVE-2021-36090 Signed-off-by: Alberto Codutti <[email protected]>
eclipse · Nov 8, 2022 · b0932f6 · b0932f6
1 parent 7e56f77
commit b0932f6
Showing 1 changed file with 12 additions and 6 deletions.
diff --git a/pom.xml b/pom.xml
@@ -37,8 +37,9 @@
         <commons-beanutils.version>1.9.4</commons-beanutils.version>
         <commons-cli.version>1.4</commons-cli.version>
         <commons-codec.version>1.15</commons-codec.version>
-        <commons-configuration.version>1.9</commons-configuration.version>
         <commons-collections.version>3.2.2</commons-collections.version>
+        <commons-configuration.version>1.9</commons-configuration.version>
+        <commons-compress.version>1.22</commons-compress.version>
         <commons-fileupload.versison>1.4</commons-fileupload.versison>
         <commons-imaging.version>1.0-alpha3</commons-imaging.version>
         <commons-io.version>2.11.0</commons-io.version>
@@ -1175,6 +1176,16 @@
                 <artifactId>commons-codec</artifactId>
                 <version>${commons-codec.version}</version>
             </dependency>
+            <dependency>
+                <groupId>commons-collections</groupId>
+                <artifactId>commons-collections</artifactId>
+                <version>${commons-collections.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-compress</artifactId>
+                <version>${commons-compress.version}</version>
+            </dependency>
             <dependency>
                 <groupId>commons-configuration</groupId>
                 <artifactId>commons-configuration</artifactId>
@@ -1186,11 +1197,6 @@
                     </exclusion>
                 </exclusions>
             </dependency>
-            <dependency>
-                <groupId>commons-collections</groupId>
-                <artifactId>commons-collections</artifactId>
-                <version>${commons-collections.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-imaging</artifactId>