{"id":"CVE-2024-25710","aliases":["AZL-34812","AZL-43564","AZL-44916","CLSA-2025-1764806869","CLSA-2026-1770941373","CLSA-2026-1779756518","CLSA-2026-1787323198","CLSA-2026-1787326456","CLSA-2026-1787580035","CLSA-2026-1788331098","CLSA-2026-1789370189","CLSA-2026-1791959990","CLSA-2026-1792010634","CLSA-2026-1792741304","CLSA-2026-1792741671","CLSA-2026-1792741828","CLSA-2026-1792742148","DEBIAN-CVE-2024-25710","EUVD-2024-0507","GHSA-4g9r-vxhx-9pgx","GHSA-7hfm-57qf-j43q","GHSA-hrmr-f5m6-m9pq","GHSA-mc84-pj99-q6hh","GHSA-xqfj-vm6h-2x34","RHLW-2026-685154d7989c42e9","ROOT-APP-MAVEN-CVE-2024-25710","SUSE-SU-2024:0726-1","UBUNTU-CVE-2024-25710","openSUSE-SU-2024:13702-1"],"status":"published","title":"Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00441,"percentile":0.38811,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2024-02-19T08:33:40Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Maven","package":"org.apache.commons:commons-compress","fixed_in":["1.26.0"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"javapackages-bootstrap","fixed_in":["1.14.0-2"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","fixed_in":["1.24.0-tuxcare.1","1.25.0-tuxcare.1","1.15-tuxcare.2","1.14-tuxcare.2","1.18-tuxcare.3","1.23.0-tuxcare.1","1.22-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libcommons-compress-java","fixed_in":["1.27.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libcommons-compress-java","fixed_in":["1.27.1-1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.apache.commons:commons-compress","fixed_in":["1.21-root.io.1","1.24.0-root.io.1","1.24.0-root.io.2","1.21-root.io.2","1.22-root.io.1","1.22-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.apache.commons:commons-compress","fixed_in":["1.24.0-aikido.2","1.21-aikido.2","1.22-aikido.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3"},{"fixed":"1.26.0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"javapackages-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.19-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.19-3"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20"},{"fixed":"1.20-tuxcare.1"}]}],"versions":["1.20"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19"},{"fixed":"1.19-tuxcare.2"}]}],"versions":["1.19","1.19-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21"},{"fixed":"1.21-tuxcare.1"}]}],"versions":["1.21"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.24.0"},{"fixed":"1.24.0-tuxcare.1"}]}],"versions":["1.24.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.25.0"},{"fixed":"1.25.0-tuxcare.1"}]}],"versions":["1.25.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15-tuxcare.2"}]}],"versions":["1.15","1.15-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.14-tuxcare.2"}]}],"versions":["1.14","1.14-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18"},{"fixed":"1.18-tuxcare.3"}]}],"versions":["1.18","1.18-tuxcare.1","1.18-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.1"},{"fixed":"1.4.1-tuxcare.1"}]}],"versions":["1.4.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.1"},{"fixed":"1.8.1-tuxcare.2"}]}],"versions":["1.8.1","1.8.1-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9"},{"fixed":"1.9-tuxcare.1"}]}],"versions":["1.9"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12"},{"fixed":"1.12-tuxcare.2"}]}],"versions":["1.12","1.12-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.23.0"},{"fixed":"1.23.0-tuxcare.1"}]}],"versions":["1.23.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22"},{"fixed":"1.22-tuxcare.1"}]}],"versions":["1.22"]},{"source":"osv","ecosystem":"Debian:12","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22-1","1.23.0-1","1.24.0-1","1.25.0-1","1.27.1-1","1.27.1-2","1.28.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3"},{"fixed":"1.26.0"}]}],"versions":["1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.16.1","1.17","1.18","1.19","1.20","1.21","1.22","1.23.0","1.24.0","1.25.0","1.3","1.4","1.4.1","1.5","1.6","1.7","1.8","1.8.1","1.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0.rhlw-00005"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.4.1","1.5","1.6","1.7","1.8","1.8.1","1.9","1.9.0"],"bundled":5},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-root.io.1"},{"fixed":"1.24.0-root.io.1"},{"fixed":"1.24.0-root.io.2"},{"fixed":"1.21-root.io.2"},{"fixed":"1.22-root.io.1"},{"fixed":"1.22-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"org.apache.commons:commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-aikido.2"},{"fixed":"1.21-aikido.2"},{"fixed":"1.22-aikido.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"sbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.18-150200.4.19.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"sbt-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.18-150200.4.19.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-150200.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-150200.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.5.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"javapackages-meta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.6-150200.4.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-assembly-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-doxia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150200.4.7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-doxia-sitetools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-jar-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-jar-plugin-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-150200.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-javadoc-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-javadoc-plugin-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150200.4.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-reporting-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-reporting-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-150200.4.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-150200.3.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-resources-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"maven-resources-plugin-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-150200.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"sbt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.18-150200.4.19.7"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"sbt-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.18-150200.4.19.7"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xmvn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xmvn-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xmvn-mojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xmvn-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xmvn-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-150200.3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9-1","1.10-1","1.10-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13-1","1.13-2","1.18-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.18-3","1.19-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20-1","1.21-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.23.0-1","1.24.0-1","1.25.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.27.1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.27.1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libcommons-compress-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.27.1-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-1.1"}]}],"bundled":2}],"products":[{"vendor":"apache","product":"commons_compress"},{"vendor":"apache software foundation","product":"apache commons compress"}],"references":[{"url":"https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/19/1","tags":["x_transferred","Mailing List","Third Party Advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240307-0010/","tags":["x_transferred","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Aug/37","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25710","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240307-0010","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4g9r-vxhx-9pgx","tags":["advisory"]},{"url":"https://repo.maven.apache.org/maven2/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25710.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-25710","tags":["advisory"]},{"url":"https://github.com/apache/commons-compress","tags":["package"]},{"url":"https://lists.apache.org/thread.html/3565494c263dfeb4dcb2a71cb24d09a1ca285cd6ac74edc025a3af8a%40%3Ccommits.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330%40%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f28052d04cb8dbaae39bfd3dc8438e58c2a8be306a3f381f4728d7c1%40%3Ccommits.commons.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/714c6ac1b1b50f8557e7342903ef45f1538a7bc60a0b47d6e48c273d%40%3Ccommits.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/c7954dc1e8fafd7ca1449f078953b419ebf8936e087f235f3bd024be%40%3Ccommits.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/35f60d6d0407c13c39411038ba1aca71d92595ed7041beff4d07f2ee%40%3Ccommits.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b907e70bc422905d7962fd18f863f746bf7b4e7ed9da25c148580c61%40%3Cnotifications.commons.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/e3eae9e6fc021c4c22dda59a335d21c12eecab480b48115a2f098ef6%40%3Ccommits.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f9cdd32af7d73e943452167d15801db39e8130409ebb9efb243b3f41%40%3Ccommits.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/0adb631517766e793e18a59723e2df08ced41eb9a57478f14781c9f7%40%3Cdev.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/6c79965066c30d4e330e04d911d3761db41b82c89ae38d9a6b37a6f1%40%3Cdev.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/eeecc1669242b28a3777ae13c68b376b0148d589d3d8170340d61120%40%3Cdev.tinkerpop.apache.org%3E","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11771","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hrmr-f5m6-m9pq","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b%40%3Cdev.poi.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945%40%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71%40%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbaea15ddc5a7c0c6b66660f1d6403b28595e2561bb283eade7d7cd69%40%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbe91c512c5385181149ab087b6c909825d34299f5c491c6482a2ed57%40%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf2f4d7940371a7c7c5b679f50e28fc7fcc82cd00670ced87e013ac88%40%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E","tags":["web"]},{"url":"https://commons.apache.org/proper/commons-compress/security-reports.html","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab%40%3Cuser.commons.apache.org%3E","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35515","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7hfm-57qf-j43q","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r31f75743ac173b0a606f8ea6ea53f351f386c44e7bcf78ae04007c29%40%3Cissues.flink.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r457b2ed564860996b20d938566fe8bd4bfb7c37be8e205448ccb5975%40%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46%40%3Cuser.ant.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra393ffdc7c90a4a37ea023946f390285693795013a642d80fba20203%40%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r605d906b710b95f1bbe0036a53ac6968f667f2c249b6fbabada9a940%40%3Cuser.commons.apache.org%3E","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35517","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xqfj-vm6h-2x34","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r0e87177f8e78b4ee453cd4d3d8f4ddec6f10d2c27707dd71e12cafc9%40%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r25f4c44616045085bc3cf901bb7e68e445eee53d1966fc08998fc456%40%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3227b1287e5bd8db6523b862c22676b046ad8f4fc96433225f46a2bd%40%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4f03c5de923e3f2a8c316248681258125140514ef3307bfe1538e1ab%40%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r54049b66afbca766b6763c7531e9fe7a20293a112bcb65462a134949%40%3Ccommits.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r75ffc7a461e7e7ae77690fa75bd47bb71365c732e0fbcc44da4f8ff5%40%3Cdev.tomcat.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9a23d4dbf4e34d498664080bff59f2893b855eb16dae33e4aa92fa53%40%3Cannounce.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb5fa2ee61828fa2e42361b58468717e84902dd71c4aea8dc0b865df7%40%3Cnotifications.james.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbbf42642c3e4167788a7c13763d192ee049604d099681f765385d99d%40%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc7df4c2f0bbe2028a1498a46d322c91184f7a369e3e4c57d9518cacf%40%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rdd5412a5b9a25aed2a02c3317052d38a97128314d50bc1ed36e81d38%40%3Cuser.ant.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf3f0a09fee197168a813966c5816157f6c600a47313a0d6813148ea6%40%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf93b6bb267580e01deb7f3696f7eaca00a290c66189a658cf7230a1a%40%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc4134026d7d7b053d4f9f2205531122732405012c8804fd850a9b26f%40%3Cuser.commons.apache.org%3E","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36090","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mc84-pj99-q6hh","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240726-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220068","tags":["report"]},{"url":"https://bugzilla.suse.com/1220070","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26308","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-25710","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/02/19/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25710","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-25710","title":"Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T08:33:40.627Z","modified":"2025-11-04T16:11:24.559Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:34:04.341725Z"}],"euvd":[{"id":"EUVD-2024-0507","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T08:33:40Z","modified":"2025-11-04T16:11:24Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:28.888576Z"}],"ghsa":[{"id":"GHSA-4g9r-vxhx-9pgx","title":"Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:30:50Z","modified":"2026-03-20T05:07:09Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:39:38.524712Z"}],"nvd":[{"id":"CVE-2024-25710","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:15:37.943Z","modified":"2026-06-17T07:16:27.047Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:09:37.655131Z"}],"osv":[{"id":"AZL-34812","title":"CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:15:37Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"AZL-43564","title":"CVE-2024-25710 affecting package apache-commons-compress 1.19-3","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:15:37Z","modified":"2026-04-21T04:31:03.913908Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44916","title":"CVE-2024-25710 affecting package apache-commons-compress 1.19-3","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:15:37Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"CVE-2024-25710","title":"Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T08:33:40.627Z","modified":"2026-10-28T02:30:22.919145165Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:44:39.244433Z"},{"id":"DEBIAN-CVE-2024-25710","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.  Users are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:15:37.943Z","modified":"2026-11-02T12:01:38.135541711Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"GHSA-4g9r-vxhx-9pgx","title":"Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.3 through 1.25.0.\n\nUsers are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:30:50Z","modified":"2026-09-10T03:50:05.286961308Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:46:37.148947Z"},{"id":"RHLW-2026-685154d7989c42e9","title":"Lightwell Security Advisory: commons-compress 1.9.0.rhlw-00005","description":"Red Hat Lightwell has released org.apache.commons:commons-compress 1.9.0.rhlw-00005 with backported fixes for CVE-2018-11771, CVE-2021-35515, CVE-2021-35517, CVE-2021-36090, and CVE-2024-25710.\n\nCVE-2018-11771: When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress' zip package.\n\nCVE-2021-35515: When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.\n\nCVE-2021-35517: When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.\n\nCVE-2021-36090: When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.\n\nCVE-2024-25710: Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file\n\nThis patched artifact is a drop-in replacement for org.apache.commons:commons-compress 1.9.0 from Maven Central.","status":"published","published":"2026-10-13T21:10:15Z","modified":"2026-10-27T04:13:04.62183055Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"ROOT-APP-MAVEN-CVE-2024-25710","title":"CVE-2024-25710 in io.root.org.apache.commons:commons-compress - Patched by Root","description":"Root has patched CVE-2024-25710 in the io.root.org.apache.commons:commons-compress package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-07-21T10:54:09Z","modified":"2026-07-21T12:15:11.52728523Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2024-25710","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue.","status":"published","published":"2024-02-19T09:15:00Z","modified":"2026-10-17T12:56:33.324124942Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:44.862765Z"},{"id":"CLSA-2025-1764806869","title":"TuxCare security update for org.apache.commons:commons-compress (5 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 5 CVEs. Fixed in 1.20-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-10-15T09:46:14.781063064Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1770941373","title":"TuxCare security update for org.apache.commons:commons-compress (4 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 4 CVEs. Fixed in 1.19-tuxcare.2.","status":"published","published":"2026-08-04T14:52:07Z","modified":"2026-10-15T09:46:17.913481577Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1779756518","title":"TuxCare security update for org.apache.commons:commons-compress (2 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.21-tuxcare.1.","status":"published","published":"2026-08-04T14:52:33Z","modified":"2026-10-15T09:45:17.484522843Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1787323198","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.24.0-tuxcare.1.","status":"published","published":"2026-08-21T14:39:58Z","modified":"2026-10-15T09:47:25.271854818Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787326456","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.25.0-tuxcare.1.","status":"published","published":"2026-08-21T15:34:16Z","modified":"2026-10-15T09:47:25.319077045Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787580035","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.15-tuxcare.2.","status":"published","published":"2026-08-24T14:00:35Z","modified":"2026-10-15T09:47:25.516303249Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1788331098","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.14-tuxcare.2.","status":"published","published":"2026-09-02T06:38:18Z","modified":"2026-10-15T09:47:33.424766604Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1789370189","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.18-tuxcare.3.","status":"published","published":"2026-09-14T07:16:29Z","modified":"2026-10-15T09:47:42.91577095Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1791959990","title":"TuxCare security update for org.apache.commons:commons-compress (2 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.4.1-tuxcare.1.","status":"published","published":"2026-10-14T06:39:50Z","modified":"2026-10-15T09:45:55.092780699Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792010634","title":"TuxCare security update for org.apache.commons:commons-compress (2 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.8.1-tuxcare.2.","status":"published","published":"2026-10-14T20:43:54Z","modified":"2026-10-15T09:47:34.758772358Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792741304","title":"TuxCare security update for org.apache.commons:commons-compress (3 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 3 CVEs. Fixed in 1.9-tuxcare.1.","status":"published","published":"2026-10-23T07:41:44Z","modified":"2026-10-23T13:45:04.61171961Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792741671","title":"TuxCare security update for org.apache.commons:commons-compress (2 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.12-tuxcare.2.","status":"published","published":"2026-10-23T07:47:51Z","modified":"2026-10-23T13:45:04.614385615Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792741828","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.23.0-tuxcare.1.","status":"published","published":"2026-10-23T07:50:28Z","modified":"2026-10-23T13:45:02.975479466Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792742148","title":"TuxCare security update for org.apache.commons:commons-compress (1 CVE)","description":"TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.22-tuxcare.1.","status":"published","published":"2026-10-23T07:55:48Z","modified":"2026-10-23T13:45:02.971955587Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"openSUSE-SU-2024:13702-1","title":"apache-commons-compress-1.26.0-1.1 on GA media","description":"These are all security issues fixed in the apache-commons-compress-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:17.145349Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2024:0726-1","title":"Security update for Java","description":"This update for Java fixes the following issues:\n\napache-commons-codec was updated to version 1.16.1:\n\n- Changes in version 1.16.1:\n\n  * New features:\n\n    + Added Maven property project.build.outputTimestamp for build reproducibility\n\n  * Bugs fixed:\n\n    + Correct error in Base64 Javadoc\n    + Added minimum Java version in changes.xml\n    + Documentation update for the org.apache.commons.codec.digest.* package\n    + Precompile regular expression in UnixCrypt.crypt(byte[], String)\n    + Fixed possible IndexOutOfBoundException in PhoneticEngine.encode method\n    + Fixed possible ArrayIndexOutOfBoundsException in QuotedPrintableCodec.encodeQuotedPrintable() method\n    + Fixed possible StringIndexOutOfBoundException in MatchRatingApproachEncoder.encode() method\n    + Fixed possible ArrayIndexOutOfBoundException in RefinedSoundex.getMappingCode()\n    + Fixed possible IndexOutOfBoundsException in PercentCodec.insertAlwaysEncodeChars() method\n    + Deprecated UnixCrypt 0-argument constructor\n    + Deprecated Md5Crypt 0-argument constructor\n    + Deprecated Crypt 0-argument constructor\n    + Deprecated StringUtils 0-argument constructor\n    + Deprecated Resources 0-argument constructor\n    + Deprecated Charsets 0-argument constructor\n    + Deprecated CharEncoding 0-argument constructor\n\n- Changes in version 1.16.0:\n\n  * Remove duplicated words from Javadocs\n  * Use Standard Charset object\n  * Use String.contains() functions\n  * Avoid use toString() or substring() in favor of a simplified expression\n  * Fixed byte-skipping in Base16 decoding\n  * Fixed several typos, improve writing in some javadocs\n  * BaseNCodecOutputStream.eof() should not throw IOException.\n  * Javadoc improvements and cleanups.\n  * Deprecated BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).\n  * Added support for Blake3 family of hashes\n  * Added github/codeql-action\n  * Bump actions/cache from v2 to v3.0.10\n  * Bump actions/setup-java from v1.4.1 to 3.5.1\n  * Bump actions/checkout from 2.3.2 to 3.1.0\n  * Bump commons-parent from 52 to 58\n  * Bump junit from 4.13.1 to 5.9.1\n  * Bump Java 7 to 8.\n  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.\n  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).\n  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7\n  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.\n  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.\n  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0\n  * Bump pmd from 6.47.0 to 6.52.0.\n  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0\n  * Bump checkstyle from 8.45.1 to 9.3\n  * Bump taglist-maven-plugin from 2.4 to 3.0.0\n  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.\n\napache-commons-compress was updated to version 1.26:\n\n- Changes in version 1.26:\n\n  * Security issues fixed:\n\n    + CVE-2024-26308: Fixed allocation of Resources Without Limits or Throttling vulnerability in \n      Apache Commons Compress (bsc#1220068)\n    + CVE-2024-25710: Fixed loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in \n      Apache Commons Compress (bsc#1220070)\n\n  * New Features:\n\n    + Added and use ZipFile.builder(), ZipFile.Builder, and deprecate constructors\n    + Added and use SevenZFile.builder(), SevenZFile.Builder, and deprecate constructors\n    + Added and use ArchiveInputStream.getCharset()\n    + Added and use ArchiveEntry.resolveIn(Path)\n    + Added Maven property project.build.outputTimestamp for build reproducibility\n\n  * Bugs fixed:\n  \n    + Check for invalid PAX values in TarArchiveEntry\n    + Fixed zero size headers in ArjInputStream\n    + Fixes and tests for ArInputStream\n    + Fixes for dump file parsing\n    + Improved CPIO exception detection and handling\n    + Deprecated SkipShieldingInputStream without replacement (nolonger used)\n    + Reuse commons-codec, don't duplicate class PureJavaCrc32C (removed package-private class)\n    + Reuse commons-codec, don't duplicate class XXHash32 (deprecated class)\n    + Reuse commons-io, don't duplicate class Charsets (deprecated class)\n    + Reuse commons-io, don't duplicate class IOUtils (deprecated methods)\n    + Reuse commons-io, don't duplicate class BoundedInputStream (deprecated class)\n    + Reuse commons-io, don't duplicate class FileTimes (deprecated TimeUtils methods)\n    + Reuse Arrays.equals(byte[], byte[]) and deprecate ArchiveUtils.isEqual(byte[], byte[])\n    + Added a null-check for the class loader of OsgiUtils\n    + Added a null-check in Pack200.newInstance(String, String)\n    + Deprecated ChecksumCalculatingInputStream in favor of java.util.zip.CheckedInputStream\n    + Deprecated CRC32VerifyingInputStream.CRC32VerifyingInputStream(InputStream, long, int)\n    + FramedSnappyCompressorOutputStream produces incorrect output when writing a large buffer\n    + Fixed TAR directory entries being misinterpreted as files\n    + Deprecated unused method FileNameUtils.getBaseName(String)\n    + Deprecated unused method FileNameUtils.getExtension(String)\n    + ArchiveInputStream.BoundedInputStream.read() incorrectly adds 1 for EOF to the bytes read count\n    + Deprecated IOUtils.read(File, byte[])\n    + Deprecated IOUtils.copyRange(InputStream, long, OutputStream, int)\n    + ZipArchiveOutputStream multi archive updates metadata in incorrect file\n    + Deprecated ByteUtils.InputStreamByteSupplier\n    + Deprecated ByteUtils.fromLittleEndian(InputStream, int)\n    + Deprecated ByteUtils.toLittleEndian(DataOutput, long, int)\n    + Reduce duplication by having ArchiveInputStream extend FilterInputStream\n    + Support preamble garbage in ZipArchiveInputStream\n    + Fixed formatting the lowest expressable DOS time\n    + Dropped  reflection from ExtraFieldUtils static initialization\n    + Preserve exception causation in ExtraFieldUtils.register(Class)\n\n- Changes in version 1.25:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-compress/changes-report.html#a1.25.0\n\n- Changes in version 1.24:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-compress/changes-report.html#a1.24.0\n\n- Changes in version 1.23:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-compress/changes-report.html#a1.23.0\n\n- Changes in version 1.22:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-compress/changes-report.html#a1.22\n\napache-commons-io was updated to version 2.15.1:\n\n- Changes in version 2.15.1:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-io/changes-report.html#a2.15.1\n\n- Changes in version 2.15.0:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-io/changes-report.html#a2.15.0\n\n- Changes in version 2.14.0:\n\n  * For the full list of changes please consult:\n    https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0\n\njavapackages-meta:\n\n- Syncing the version with javapackages-tools 6.2.0\n- Remove unnecessary dependencies\n\nmaven was updated to version 3.9.6:\n\n- Changes in version 3.9.6:\n\n  * Bugs fixed:\n\n    + Error message when modelVersion is 4.0 is confusing\n\n  * Improvements:\n\n    + Colorize transfer messages\n    + Support ${project.basedir} in file profile activation\n    + Allow to exclude plugins from validation\n\n  * Tasks:\n\n    + Maven Resolver Provider classes ctor change\n    + Undeprecate wrongly deprecated repository metadata\n    + Deprecated `org.apache.maven.repository.internal.MavenResolverModule`\n    + maven-resolver-provider: introduce NAME constants.\n\n  * Dependency upgrade:\n\n    + Updated  to Resolver 1.9.16\n    + Upgraded Sisu version to 0.9.0.M2\n    + Upgraded Resolver version to 1.9.18\n    + Upgraded to parent POM 41\n    + Upgraded default plugin bindings\n\nmaven-assembly-plugin:\n\n- Explicitely require commons-io:commons-io and commons-codec:common-codes artifacts that are optional in\n  apache-commons-compress\n\nmaven-doxia was updated to version 1.12.0:\n\n  * Changes in version 1.12.0:\n\n    + Upgraded to FOP 2.2\n    + Fixed rendering links and paragraphs inside tables\n    + Rewrite .md and .markdown links to .html\n    + Upgraded HttpComponents: httpclient to 4.5.8 and httpcore to 4.4.11\n    + Escape links to xml based figureGraphics image elements\n    + SECURITY: Use HTTPS to resolve dependencies in Maven Build\n    + Removed old Maven 1 and 2 info\n    + Updated commons-lang to 3.8.1\n    + Dropped  dependency to outdated Log4j\n    + Fixed Java 7 compatibility that was broken\n    + Import tests from maven-site-plugin\n    + Fixed crosslinks starting with a dot in markdown files\n    + Replace deprecated class from commons-lang\n    + Fill in some generic types\n\nmaven-doxia-sitetools was updated to version 1.11.1:\n\n- Changes in version 1.11.1:\n\n  * Bugs fixed:\n\n    + CLIRR can't find previous version\n\n  * Improvements:\n\n    + Removed all \u0026#xA0; in default-site-macros.vm and replace by a space\n    + Improved documentation on site.xml inheritance vs interpolation\n\n  * Tasks:\n\n    + Deprecated Doxia Sitetools Doc Renderer\n\n  * Dependency upgrade:\n\n    + Fixed javadoc issues with JDK 8 when generating documentation\n    + Wrong coordinates for jai_core: hyphen should be underscore\n    + Use latest JUnit version 4.13.2\n    + Upgraded Plexus Utils to 3.3.0\n    + Upgraded Plexus Interpolation to 1.26\n    + Upgraded Maven Doxia to 1.10\n    + Upgraded Maven Doxia to 1.11.1\n\nmaven-jar-plugin was updated to version 3.3.0:\n\n- Changes in version 3.3.0:\n\n  * Bugs fixed:\n\n    + outputTimestamp not applied to module-info; breaks reproducible builds\n\n  * Task:\n\n    + Updated plugin (requires Maven 3.2.5+)\n    + Java 8 as minimum\n\n  * Dependency upgrade:\n\n    + Upgraded Plexus Utils to 3.3.1\n    + Removed override for Plexus Archiver to fix order of META-INF/ and META-INF/MANIFEST.MF entries\n    + Upgraded Parent to 36\n    + Updated Plexus Utils to 3.4.2\n    + Upgraded Parent to 37\n\nmaven-jar-plugin was updated to version 3.6.0:\n\n- Changes from version 3.6.0:\n\n  * Bugs fixed:\n\n    + Setting maven.javadoc.isoffline seems to have no effect\n    + javadoc site is broken for projects that contain modules\n    + Alternative doclet page points to an SEO spammy page\n    + [REGRESSION] Transitive dependencies of docletArtifact missing\n    + Unresolvable link in javadoc tag with value ResourcesBundleMojo#getAttachmentClassifier() found in\n      ResourcesBundleMojo\n    + IOException --\u003e NullPointerException in JavadocUtil.copyResource\n    + JavadocReportTest.testExceptions is broken\n    + javadoc creates invalid --patch-module statements\n    + javadoc plugin can not deal with transitive filename based modules\n\n  * Improvements:\n\n    + Clean up deprecated and unpreferred methods in JavadocUtil\n    + Cleanup dependency declarations as best possible\n    + Allow building javadoc 'the old fashioned way' after Java 8\n\n  * Tasks:\n\n    + Dropped  use of deprecated localRepository mojo\n      parameter\n    + Make build pass with Java 20\n    + Refresh download page\n\n  * Dependency upgrade:\n\n    + Updated  to commons-io 2.13.0\n    + Updated  plexus-archiver from 4.7.1 to 4.8.0\n    + Upgraded Parent to 40\n\n- Changes from version 3.5.0:\n\n  * Bugs fixed:\n\n    + Invalid anchors in Javadoc and plugin mojo\n    + Plugin duplicates classes in Java 8 all-classes lists\n    + javadoc site creation ignores configuration parameters\n\n  * Improvements:\n\n    + Deprecated parameter 'stylesheet'\n    + Parse stderr output and suppress informational lines\n    + Link to Javadoc references from JDK 17\n    + Migrate components to JSR 330, get rid of maven-artifact-transfer, update to parent 37\n\n  * Tasks:\n\n    + Removed remains of org.codehaus.doxia.sink.Sink\n\n  * Dependency upgrades:\n\n    + Upgraded plugins in ITs\n    + Upgraded to Maven 3.2.5\n    + Updated  Maven Archiver to 3.6.0\n    + Upgraded Maven Reporting API to 3.1.1/Complete\n      with Maven Reporting Impl 3.2.0\n    + Upgraded commons-text to 1.10.0\n    + Upgraded Parent to 39\n    + Upgraded plugins and components\n\nmaven-reporting-api was updated to version 3.1.1:\n\n- Restore binary compat for MavenReport\n\nmaven-reporting-impl was updated to version 3.2.0:\n\n- Changes in version 3.2.0:\n\n  * Improvement:\n\n    + Render with a skin when report is run in standalone mode\n\n  * Dependency upgrades:\n\n    + Upgraded Maven Reporting API to 3.1.1\n    + Upgraded plugins and components in project and ITs\n\nmaven-resolver was updated to version 1.9.18:\n\n- Changes in version 1.9.18:\n\n  * Bugs fixed:\n\n    + Sporadic AccessDeniedEx on Windows\n    + Undo FileUtils changes that altered non-Windows execution path\n\n  * Improvements:\n\n    + Native transport should retry on HTTP 429 (Retry-After)\n\n  * Task:\n\n    + Deprecated Guice modules\n    + Get rid of component name string literals, make them constants and reusable\n    + Expose configuration for inhibiting Expect-Continue handshake in 1.x\n    + Refresh download page\n    + Resolver should not override given HTTP transport default use of expect-continue handshake\n\nmaven-resources-plugin was updated to version 3.3.1:\n\n- Changes in version 3.3.1:\n\n  * Bugs fixed:\n\n    + Resource plugin's handling of symbolic links changed in 3.0.x, broke existing behavior\n    + Resource copying not using specified encoding\n    + java.nio.charset.MalformedInputException: Input length = 1\n    + Filtering of Maven properties with long names is not working after transition from 2.6 to 3.2.0\n    + Valid location for directory parameter is always required\n    + Symlinks cause copying resources to fail\n    + FileUtils.copyFile() fails with source file having `lastModified = 0`\n\n  * New Features:\n\n    + Added ability to flatten folder structure into target directory when copying resources\n\n  * Improvements:\n\n    + Make tests jar reproducible\n    + Describe from and to in 'Copying xresources' info message\n\n  * Task:\n\n    + Dropped  plexus legacy\n    + Updated  to parent POM 39, reformat sources\n    + Updated  plugin (requires Maven 3.2.5+)\n    + Require Java 8\n\n  * Dependency upgrade:\n\n    + Upgraded maven-plugin parent to 36\n    + Upgraded Maven Filtering to 3.3.0\n    + Upgraded plexus-utils to 3.5.1\n    + Upgraded to maven-filtering 3.3.1\n\nsbt:\n\n- Fixed RPM package build with maven 3.9.6 and maven-resolver 1.9.18\n\nxmvn:\n\n- Modify the xmvn-install script to work with new apache-commons-compress\n- Recompiling RPM package to resolve package building issues with maven-lib\n","status":"published","published":"2024-02-29T11:12:46Z","modified":"2026-02-04T02:43:18.246296Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}