From 369ae568f1017b54fc00bd2f49fd2ebe94fb1b2e Mon Sep 17 00:00:00 2001
From: alwibrm <35731816+alwibrm@users.noreply.github.com>
Date: Fri, 20 Oct 2023 10:04:18 +0200
Subject: [PATCH] fix CVE-2023-42503 by using Apache Commons Compress 1.24.0
 (#2560)

---
 lang/java/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lang/java/pom.xml b/lang/java/pom.xml
index 5ac03fa4086..46b23ccfa93 100644
--- a/lang/java/pom.xml
+++ b/lang/java/pom.xml
@@ -39,7 +39,7 @@
     <!-- version properties for dependencies -->
     <ant.version>1.10.14</ant.version>
     <commons-cli.version>1.5.0</commons-cli.version>
-    <commons-compress.version>1.22</commons-compress.version>
+    <commons-compress.version>1.24.0</commons-compress.version>
     <commons-text.version>1.10.0</commons-text.version>
     <grpc.version>1.58.0</grpc.version>
     <hadoop.version>3.3.5</hadoop.version>