This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-compress.git
The following commit(s) were added to refs/heads/master by this push:
new 1ace49a4a Fix copyOfRange end index in x0017 strong encryption header
(#786).
1ace49a4a is described below
commit 1ace49a4a302ac86d52c40dab04e7709d1c598bf
Author: Gary Gregory <[email protected]>
AuthorDate: Wed Jul 15 14:19:36 2026 -0400
Fix copyOfRange end index in x0017 strong encryption header (#786).
---
src/changes/changes.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index f034d37f6..0a243ce1a 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -60,6 +60,7 @@ The <action> type attribute can be add,update,fix,remove.
<action type="fix" dev="pkarwasz" due-to="Piotr P. Karwasz">Refactor
unsigned number parsing and header validation in SevenZFile.</action>
<action type="fix" dev="ggregory" due-to="Gary Gregory">Fix Apache RAT
plugin console warnings.</action>
<action type="fix" dev="ggregory" due-to="KALI 834X, Gary
Gregory">Reject short LZMA properties and oversized dictionary in LZMADecoder
(#784).</action>
+ <action type="fix" dev="ggregory" due-to="KALI 834X, Gary Gregory">Fix
copyOfRange end index in x0017 strong encryption header (#786).</action>
<!-- FIX bzip2 -->
<action type="fix" dev="ggregory" due-to="Tyler Nighswander, Gary
Gregory">BZip2CompressorInputStream now throw CompressorException (a subclass
of IOException) for invalid or corrupted data, providing more specific error
reporting.</action>
<action type="fix" dev="pkarwasz" due-to="Tyler Nighswander, Piotr P.
Karwasz">BZip2 input streams treat Huffman codes longer than 20 bits as
corrupted data, matching the behavior of the reference implementation.</action>
