CLSA-2026-1792010634 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.8.1-tuxcare.2...

PT-2026-97750

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.18-tuxcare.3...

PT-2026-90623

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.14-tuxcare.2...

PT-2026-85133

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.15-tuxcare.2...

PT-2026-83926

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.25.0-tuxcare.1...

PT-2026-83922

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.24.0-tuxcare.1...

PT-2026-75879

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.14-tuxcare.1...

CLSA-2025-1764806869 TuxCare security update for org.apache.commons:commons-compress (5 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 5 CVEs. Fixed in 1.20-tuxcare.1...

PT-2026-73635

TuxCare rebuilt org.apache.commons:commons-compress to address 5 CVEs. Fixed in 1.20-tuxcare.1...

PT-2026-74863

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.21-tuxcare.1...

DoS (Denial of Service) org.apache.commons:commons-compress Dependency in Confluence Data Center and Server

This High severity org.apache.commons:commons-compress Dependency vulnerability was introduced in versions 7.19.23, 8.5.10, 8.9.2 of Confluence Data Center and Server. This org.apache.commons:commons-compress Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

DoS (Denial of Service) org.apache.commons:commons-compress Dependency in Confluence Data Center and Server

This High severity org.apache.commons:commons-compress Dependency vulnerability was introduced in versions 7.19.23, 8.5.10, 8.9.2 of Confluence Data Center and Server. This org.apache.commons:commons-compress Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10, <=1.1.0), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +37547 more potentially affected by CVE-2024-25710 via org.apache.commons:commons-compress (>=1.3, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.3, =0.0.10, =1.3, =1.0.1, =0.0.4, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2.10 and more Source cves: CVE-2024-25710 Source advisory: OSV:GHSA-4G9R-VXHX-9PGX...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10, <=1.1.0), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +37547 more potentially affected by CVE-2024-25710 via org.apache.commons:commons-compress (>=1.3, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.3, =0.0.10, =1.3, =1.0.1, =0.0.4, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2.10 and more Source cves: CVE-2024-25710 Source advisory: MEND:CVE-2024-25710...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10, <=1.1.0), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +26141 more potentially affected by CVE-2021-35515 via org.apache.commons:commons-compress (>=1.0, <=1.20)

org.apache.commons:commons-compress MAVEN version =1.0, =0.0.10, =1.3, =1.0.1, =0.0.4, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2021-35515 Source advisory: OSV:GHSA-7HFM-57QF-J43Q...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10, <=1.1.0), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +26141 more potentially affected by CVE-2021-36090 via org.apache.commons:commons-compress (>=1.0, <=1.20)

org.apache.commons:commons-compress MAVEN version =1.0, =0.0.10, =1.3, =1.0.1, =0.0.4, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2021-36090 Source advisory: MEND:CVE-2021-36090...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2) +9313 more potentially affected by CVE-2018-11771 via org.apache.commons:commons-compress (>=1.7, <=1.17)

org.apache.commons:commons-compress MAVEN version =1.7, =1.3, =1.0.1, =0.0.4, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =chaining-0.0.46-dev, =chaining-0.0.46-dev,...