[
https://issues.apache.org/jira/browse/TIKA-4199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17818867#comment-17818867
]
Tilman Hausherr edited comment on TIKA-4199 at 2/20/24 3:37 PM:
----------------------------------------------------------------
{quote}I'm not declaring this a problem with commons-compress!
{quote}
My bet was 51% it's with Tika but from the latest test code you inspired me to
write in COMPRESS-661, it might be them or BufferedInputStream itself, or a
misunderstanding how BufferedInputStream works.
I also found another incomplete delegate class (BoundedInputStream), I'll
complete that one too.
was (Author: tilman):
{quote}I'm not declaring this a problem with commons-compress!
{quote}
My bet was 51% it's with Tika but from the latest test code you inspired me to
write in COMPRESS-661, it might be them or BufferedInputStream itself.
I also found another incomplete delegate class (BoundedInputStream), I'll
complete that one too.
> commons-compress 1.26.0 breaks Apache Tika 2.9.1
> ------------------------------------------------
>
> Key: TIKA-4199
> URL: https://issues.apache.org/jira/browse/TIKA-4199
> Project: Tika
> Issue Type: Bug
> Components: parser
> Affects Versions: 2.9.1
> Reporter: Alexander Veit
> Priority: Major
>
> An update to commons-compress 1.26.0 to fix CVE-2024-25710 and CVE-2024-26308
> breaks Tika.
>
> For more information see https://issues.apache.org/jira/browse/COMPRESS-661.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
