Update commons-compress version to mitigate CVE-2024-25710

(cherry picked from commit 0f6ffef)
quarkusio · Feb 20, 2024 · f1ab295 · f1ab295
1 parent 45c86cc
commit f1ab295
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/bom/application/pom.xml b/bom/application/pom.xml
@@ -198,7 +198,7 @@
         <scram-client.version>2.1</scram-client.version>
         <picocli.version>4.7.5</picocli.version>
         <google-cloud-functions.version>1.1.0</google-cloud-functions.version>
-        <commons-compress.version>1.25.0</commons-compress.version>
+        <commons-compress.version>1.26.0</commons-compress.version>
         <commons-text.version>1.11.0</commons-text.version>
         <gson.version>2.10.1</gson.version>
         <log4j2-jboss-logmanager.version>1.1.2.Final</log4j2-jboss-logmanager.version>

diff --git a/independent-projects/tools/pom.xml b/independent-projects/tools/pom.xml
@@ -52,7 +52,7 @@
         <jackson-bom.version>2.16.1</jackson-bom.version>
         <jakarta.enterprise.cdi-api.version>4.0.1</jakarta.enterprise.cdi-api.version>
         <junit.version>5.10.2</junit.version>
-        <commons-compress.version>1.25.0</commons-compress.version>
+        <commons-compress.version>1.26.0</commons-compress.version>
         <jboss-logging.version>3.5.3.Final</jboss-logging.version>
         <mockito.version>5.8.0</mockito.version>
         <version.enforcer.plugin>3.2.1</version.enforcer.plugin>