Lucene search

K
mageiaGentoo FoundationMGASA-2020-0001
HistoryJan 05, 2020 - 6:37 p.m.

Updated apache-commons-compress- packages fix security vulnerability

2020-01-0518:37:51
Gentoo Foundation
advisories.mageia.org
29

0.005 Low

EPSS

Percentile

76.1%

pdated apache-commons-compress packages fix security vulnerability: A resource consumption vulnerability was discovered in apache-commons- compress in the way NioZipEncoding encodes filenames. Applications that use Compress to create archives, with one of the filenames within the archive being controlled by the user, may be vulnerable to this flaw. A remote attacker could exploit this flaw to cause an infinite loop during the archive creation, thus leading to a denial of service (CVE-2019-12402).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchapache-commons-compress< 1.19-1apache-commons-compress-1.19-1.mga7