[ https://issues.apache.org/jira/browse/TIKA-4199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17818867#comment-17818867 ]
Tilman Hausherr commented on TIKA-4199: --------------------------------------- {quote}I'm not declaring this a problem with commons-compress! {quote} My bet was 51% it's with Tika but from the latest test code you inspired me to write in COMPRESS-661, it might be them or BufferedInputStream itself. I also found another incomplete delegate class (BoundedInputStream), I'll complete that one too. > commons-compress 1.26.0 breaks Apache Tika 2.9.1 > ------------------------------------------------ > > Key: TIKA-4199 > URL: https://issues.apache.org/jira/browse/TIKA-4199 > Project: Tika > Issue Type: Bug > Components: parser > Affects Versions: 2.9.1 > Reporter: Alexander Veit > Priority: Major > > An update to commons-compress 1.26.0 to fix CVE-2024-25710 and CVE-2024-26308 > breaks Tika. > > For more information see https://issues.apache.org/jira/browse/COMPRESS-661. -- This message was sent by Atlassian Jira (v8.20.10#820010)