| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: apache-commons-compress | Distribution: openSUSE Tumbleweed |
| Version: 1.28.0 | Vendor: openSUSE |
| Release: 2.3 | Build date: Wed May 13 13:00:27 2026 |
| Group: Development/Libraries/Java | Build host: reproducible |
| Size: 1113592 | Source RPM: apache-commons-compress-1.28.0-2.3.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://commons.apache.org/proper/commons-compress/ | |
| Summary: Java API for working with compressed files and archivers | |
The Apache Commons Compress library defines an API for working with ar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files. In version 1.14 read-only support for Brotli decompression has been added, but it has been removed from this package.
Apache-2.0
* Mon May 11 2026 Fridrich Strba <fstrba@suse.com>
- Update to 1.28.0
* New Features
+ Add GzipParameters.getModificationInstant()
+ Add GzipParameters.setModificationInstant(Instant)
+ Add GzipParameters.OS, setOS(OS), getOS()
+ Add GzipParameters.toString()
+ COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset)
and getFileNameCharset() to override the default ISO-8859-1
Charset
+ Add support for gzip extra subfields, see
GzipParameters.setExtra(HeaderExtraField)
+ Add CompressFilterOutputStream and refactor to use
+ Add ZipFile.stream()
+ GzipCompressorInputStream reads the modification time (MTIME)
and stores its value incorrectly multiplied by 1,000
+ GzipCompressorInputStream writes the modification time (MTIME)
the value incorrectly divided by 1,000
+ Add optional FHCRC to GZIP header
+ Add GzipCompressorInputStream.Builder allowing to customize
the file name and comment Charsets
+ Add GzipCompressorInputStream.Builder
.setOnMemberStart(IOConsumer) to monitor member parsing
+ Add GzipCompressorInputStream.Builder
.setOnMemberEnd(IOConsumer) to monitor member parsing
+ Add PMD check to default Maven goal
+ Add SevenZFile.Builder.setMaxMemoryLimitKiB(int)
+ Add MemoryLimitException.MemoryLimitException(long, int,
Throwable) and deprecate MemoryLimitException
.MemoryLimitException(long, int, Exception)
+ COMPRESS-692: Add support for zstd compression in zip archives
+ Add support for XZ compression in ZIP archives
+ COMPRESS-695: Add ZipArchiveInputStream
.createZstdInputStream(InputStream) to provide a different
InputStream implementation for Zstandard (Zstd)
+ Add org.apache.commons.compress.harmony.pack200
.Pack200Exception.Pack200Exception(String, Throwable)
+ COMPRESS-697: Move BitStream.nextBit() method to BitInputStream
+ Add org.apache.commons.compress.compressors.lzma
.LZMACompressorInputStream.builder/Builder()
+ Add org.apache.commons.compress.compressors.lzma
.LZMACompressorOutputStream.builder/Builder()
+ Add org.apache.commons.compress.compressors.xz
.XZCompressorInputStream.builder/Builder()
+ Add org.apache.commons.compress.compressors.xz
.XZCompressorOutputStream.builder/Builder()
+ Add org.apache.commons.compress.compressors.xz
.ZstdCompressorOutputStream.builder/Builder()
+ Add org.apache.commons.compress.compressors.xz.ZstdConstants
+ Add org.apache.commons.compress.archivers.ArchiveException
.requireNonNull(T, Supplier<String>)
+ Add org.apache.commons.compress.compressors
.CompressorException as the root for all custom exceptions
ArchiveException and CompressorException
+ Add ArchiveException.ArchiveException(String, Throwable)
+ Add ArchiveException.ArchiveException(Throwable)
+ Add org.apache.commons.compress.archivers.sevenz
.SevenZArchiveEntry.isEmptyStream()
+ Add generics for org.apache.commons.compress.compressors
.CompressorStreamProvider.createCompressorOutputStream(String, T)
* Fixed Bugs
+ COMPRESS-686: Better exception messages in
SeekableInMemoryByteChannel
+ COMPRESS-691: ZipArchiveOutputStream.addRawArchiveEntry()
should check is2PhaseSource
+ ArchiveException extends IOException
+ CompressorException extends IOException
+ Update outdated descriptions in IOUtils and IOUtilsTest
+ Remove unused local variable in ZipFile
+ Optimize ZipEightByteInteger
+ ZipEightByteInteger.toString() now returns a number string
without text prefix, like BigInteger
+ Throw an IllegalArgumentException when a file name or comment
in gzip parameters encodes to a byte array with a 0 byte
+ Update outdated links in ZipMethod Javadoc
+ Deprecate ZipUtil.signedByteToUnsignedInt(byte) in favor of
Byte.toUnsignedInt(byte)
+ ZipArchiveOutputStream.close() does not close its underlying
output stream
+ ZipArchiveOutputStream.close() does not close its underlying
output stream
+ Don't use deprecated code in TarArchiveInputStream
+ Don't use deprecated code in TarFile
+ CpioArchiveInputStream.read(byte[], int, int) now throws an
IOException on a data pad count mismatch
+ CpioArchiveInputStream.readNewEntry(boolean) now throws an
IOException on a header pad count mismatch
+ CpioArchiveInputStream.readOldBinaryEntry(boolean) now throws
an IOException on a header pad count mismatch
+ Fix Javadoc and names in the org.apache.commons.compress
.archivers.sevenz package to specify kibibyte scale in memory
limits
+ Fix Javadoc and names in the org.apache.commons.compress
.compressors.lzw package to specify kibibyte scale in memory
limits
+ Fix Javadoc and names in the org.apache.commons.compress
.compressors.z package to specify kibibyte scale in memory
limits
+ Refactor LZ77Compressor block classes to reduce duplication
+ Package-private and private classes can be final
+ Deprecate ArjArchiveEntry.HostOs.HostOs()
+ Drop coveralls reference (no longer needed)
+ Some ZIP operations won't read all data from a non-blocking
file channel
+ COMPRESS-696: ZipArchiveInputStream.getCompressedCount()
throws NullPointerException if called before getNextEntry()
+ org.apache.commons.compress.harmony.unpack200
.SegmentConstantPool.getConstantPoolEntry(int, long) now
throws Pack200Exception instead of Error and does better range
checking of the index argument
+ org.apache.commons.compress.harmony.unpack200
.SegmentConstantPool.getInitMethodPoolEntry(int, long, String)
now throws Pack200Exception instead of Error and does better
range checking of the index argument
+ org.apache.commons.compress.harmony.unpack200
.SegmentConstantPool.getInitMethodPoolEntry(int, long, String)
now throws Pack200Exception instead of Error on bad constant
pool type input
+ org.apache.commons.compress.harmony.unpack200
.SegmentConstantPool.getClassSpecificPoolEntry(int, long,
String) now throws Pack200Exception instead of Error on bad
constant pool type input
+ org.apache.commons.compress.harmony.unpack200
.SegmentConstantPool.getClassPoolEntry(String) now throws
Pack200Exception instead of Error on some bad inputs and
states
+ org.apache.commons.compress.harmony.unpack200.bytecode
.ByteCode.extractOperands(OperandManager, Segment, int) now
throws Pack200Exception instead of Error on some bad inputs
and states
+ org.apache.commons.compress.harmony.unpack200.bytecode.forms
.ByteCodeForm.setByteCodeOperands(ByteCode, OperandManager,
int) now throws Pack200Exception instead of Error on some bad
inputs and states
+ org.apache.commons.compress.harmony.unpack200.bytecode
.CodeAttribute.CodeAttribute(int, int, byte[], Segment,
OperandManager, List) now throws Pack200Exception instead of
Error on some bad inputs and states
+ org.apache.commons.compress.harmony.unpack200.bytecode.forms
.IMethodRefForm.setByteCodeOperands(ByteCode, OperandManager,
int) now throws Pack200Exception instead of Error on some bad
inputs and states
+ org.apache.commons.compress.harmony.unpack200.bytecode.forms
.MultiANewArrayForm.setByteCodeOperands(ByteCode,
OperandManager, int) now throws Pack200Exception instead of
Error on some bad inputs and states
+ org.apache.commons.compress.harmony.unpack200.bytecode.forms
.NewClassRefForm.setByteCodeOperands(ByteCode, OperandManager,
int) now throws Pack200Exception instead of Error on some bad
inputs and states
+ org.apache.commons.compress.harmony.unpack200.bytecode.forms
.ReferenceForm.setByteCodeOperands(ByteCode, OperandManager,
int) now throws Pack200Exception instead of Error on some bad
inputs and states
+ Deprecate org.apache.commons.compress.harmony.pack200
.CanonicalCodecFamilies.CanonicalCodecFamilies()
+ Deprecate FileNameUtils#getBaseName(Path)
+ Deprecate FileNameUtils#getExtension(Path)
+ org.apache.commons.compress.harmony.unpack200.Archive.unpack()
should not log to system out (the console)
+ [site] Fix minor zip docs type: remove extraneous 'a'
+ Throw a better exception in org.apache.commons.compress
.archivers.sevenz.SevenZFile.readFilesInfo(ByteBuffer,
Archive)
+ MemoryLimitException now extends CompressException instead of
IOException (CompressException extends IOException)
+ DumpArchiveException now extends ArchiveException instead of
IOException (ArchiveException extends CompressException)
+ PasswordRequiredException now extends CompressException
instead of IOException (CompressException extends IOException)
+ Pack200Exception now extends CompressException instead of
IOException (CompressException extends IOException)
+ ArArchiveInputStream.getBSDLongName(String) now throws its
EOFException with a message
+ ZipEncodingHelper.getZipEncoding(*) can throw
NullPointerException and IllegalArgumentException on bad input
instead of returning a value using the default Charset
+ Javadoc improvements throughout
+ COMPRESS-699: ArchiveStreamFactory.detect(inputStream)
ArchiveException for TAR regression
+ COMPRESS-700: Can't detect file
flutter_awesome_buttons-0.1.0.tar as a TAR file
+ Deprecate org.apache.commons.compress.utils.TimeUtils
.toUnixTime(FileTime) in favor of org.apache.commons.io.file
.attribute.FileTimes.toUnixTime(FileTime)
+ Deprecate org.apache.commons.compress.utils.TimeUtils
.truncateToHundredNanos(FileTime)
* Changes
+ Bump org.apache.commons:commons-parent from 72 to 85
+ Bump com.github.luben:zstd-jni from 1.5.6-4 to 1.5.7-4
+ Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.18.0
+ Bump commons-io:commons-io from 2.16.1 to 2.20.0
+ Bump com.github.marschall:memoryfilesystem from 2.8.0 to 2.8.1
+ Bump org.ow2.asm:asm from 9.7 to 9.7.1
+ Bump commons-codec:commons-codec from 1.17.1 to 1.19.0
* Removed
+ COMPRESS-638: GzipCompressorOutputStream no longer
percent-endcodes in US-ASCII a file name or comment that the
Charset in GzipParameters.setFileNameCharset(Charset) cannot
encode
+ Remove ZstdCompressorOutputStream.toString(), it was
misleading by returning the delegate's toString()
- Changes of version 1.27.1
* Fixed Bugs
+ COMPRESS-686: Compression into BZip2 format has unexpected end
of file when using a BufferedOutputStream
+ Changes
+ Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0
- Changes of version 1.27.0
* New Features
+ Add ArchiveInputStream.forEach(IOConsumer)
+ Add ArchiveInputStream.iterator()
+ Add ArchiveOutputStream.isFinished()
+ Add ArchiveOutputStream.checkFinished()
* Fixed Bugs
+ Fix PMD UnnecessaryFullyQualifiedName and others
+ COMPRESS-681: Support reading a 7z file that writing archive
properties
+ Upgrade commons-io from 2.15.1 to 2.16.1
+ CompressorOutputStream now extends FilterOutputStream
+ ArchiveOutputStream now extends FilterOutputStream
+ COMPRESS-685: Update Javadoc description for
GzipCompressorInputStream
+ Replace FileNameUtil.getCompressedFileName(String) use of
Locale.ENGLISH with Locale.ROOT
+ Fix SpotBugs DLS_DEAD_LOCAL_STORE in
SevenZFile.readPackInfo(ByteBuffer, Archive)
+ Fix SpotBugs NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE in
ZipFile.openZipChannel(Path, long, OpenOption[])
+ Fix SpotBugs UC_USELESS_OBJECT in
unpack200.CpBands.parseCpSignature(InputStream)
+ Fix PMD UselessOverridingMethod in
unpack200.bytecode.InnerClassesAttribute
+ Fix PMD UselessOverridingMethod in
unpack200.bytecode.LineNumberTableAttribute
+ Fix PMD CheckSkipResult in ZipArchiveInputStream.closeEntry()
* Changes
+ COMPRESS-684: Replace assert with Exception
+ Bump org.apache.commons:commons-parent from 69 to 72
+ Bump PMD from 6.x to 7.2.0
+ Bump commons-codec:commons-codec from 1.17.0 to 1.17.1
+ Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0
+ Bump com.github.luben:zstd-jni from 1.5.6-3 to 1.5.6-4
+ Bump org.tukaani:xz from 1.9 to 1.10
+ Bump org.hamcrest:hamcrest from 2.2 to 3.0
- Removed patches:
* 0001-Remove-Brotli-compressor.patch
* 0002-Remove-ZSTD-compressor.patch
* 0003-Remove-Pack200-compressor.patch
+ we have now the dependencies for zstd and brotli
* Tue May 14 2024 Fridrich Strba <fstrba@suse.com>
- Upgrade to 1.26.1
* Fixed Bugs
+ COMPRESS-659: TarArchiveOutputStream should use Commons IO
Charsets instead of Commons Codec Charsets.
+ COMPRESS-660: Add org.apache.commons.codec to OSGi imports.
+ COMPRESS-664 Return null value from getNextEntry() for empty
file.
+ COMPRESS-664: Remove unused variables in tests.
+ COMPRESS-666: Multithreaded access to Tar archive throws
java.util.zip.ZipException: Corrupt GZIP trailer.
+ COMPRESS-644: ArchiveStreamFactory.detect(InputStream) returns
TAR for ICO file.
+ COMPRESS-661: ArchiveInputStream markSupported should always
return false.
+ COMPRESS-662: Remove out of date jar and scripts.
* Tue Feb 20 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Mon Feb 19 2024 Fridrich Strba <fstrba@suse.com>
- Upgrade to 1.26
* Fixing several vulnerabilities
+ bsc#1220068, CVE-2024-26308
+ bsc#1220070, CVE-2024-25710
* New Features
+ Add and use ZipFile.builder(), ZipFile.Builder, and deprecate
constructors
+ Add and use SevenZFile.builder(), SevenZFile.Builder, and
deprecate constructors
+ Add and use ArchiveInputStream.getCharset()
+ Add and use ArchiveEntry.resolveIn(Path)
+ Add Maven property project.build.outputTimestamp for build
reproducibility
* Fixed Bugs
+ COMPRESS-632: Check for invalid PAX values in TarArchiveEntry
+ COMPRESS-632: Fix for zero size headers in ArjInputStream
+ COMPRESS-632: Fixes and tests for ArInputStream
+ COMPRESS-632: Fixes for dump file parsing
+ COMPRESS-632: Improve CPIO exception detection and handling
+ Deprecate SkipShieldingInputStream without replacement (no
longer used)
+ Reuse commons-codec, don't duplicate class PureJavaCrc32C
(removed package-private class)
+ Reuse commons-codec, don't duplicate class XXHash32
(deprecated class)
+ Reuse commons-io, don't duplicate class Charsets (deprecated
class)
+ Reuse commons-io, don't duplicate class IOUtils (deprecated
methods)
+ Reuse commons-io, don't duplicate class BoundedInputStream
(deprecated class)
+ Reuse commons-io, don't duplicate class FileTimes (deprecated
TimeUtils methods)
+ Reuse Arrays.equals(byte[], byte[]) and deprecate
ArchiveUtils.isEqual(byte[], byte[])
+ Add a null-check for the class loader of OsgiUtils
+ Add a null-check in Pack200.newInstance(String, String)
+ Deprecate ChecksumCalculatingInputStream in favor of
java.util.zip.CheckedInputStream
+ Deprecate CRC32VerifyingInputStream
.CRC32VerifyingInputStream(InputStream, long, int)
+ COMPRESS-655: FramedSnappyCompressorOutputStream produces
incorrect output when writing a large buffer
+ COMPRESS-657: Fix TAR directory entries being misinterpreted
as files
+ Deprecate unused method FileNameUtils.getBaseName(String)
+ Deprecate unused method FileNameUtils.getExtension(String)
+ ArchiveInputStream.BoundedInputStream.read() incorrectly adds
1 for EOF to the bytes read count
+ Deprecate IOUtils.read(File, byte[])
+ Deprecate IOUtils.copyRange(InputStream, long, OutputStream,
int)
+ COMPRESS-653: ZipArchiveOutputStream multi archive updates
metadata in incorrect file
+ Deprecate ByteUtils.InputStreamByteSupplier
+ Deprecate ByteUtils.fromLittleEndian(InputStream, int)
+ Deprecate ByteUtils.toLittleEndian(DataOutput, long, int)
+ Reduce duplication by having ArchiveInputStream extend
FilterInputStream
+ Support preamble garbage in ZipArchiveInputStream
+ COMPRESS-658: Fix formatting the lowest expressable DOS time
+ Drop reflection from ExtraFieldUtils static initialization
+ Preserve exception causation in
ExtraFieldUtils.register(Class)
- Upgrade to 1.25.0
* New features:
+ Add GzipParameters.getFileName() and deprecate getFilename()
+ Add GzipParameters.setFileName(String) and deprecate
setFilename(String)
+ Add FileNameUtil.getCompressedFileName(String) and deprecate
getCompressedFilename(String)
+ Add FileNameUtil.getUncompressedFileName(String) and deprecate
getUncompressedFilename(String)
+ Add FileNameUtil.isCompressedFileName(String) and deprecate
isCompressedFilename(String)
+ Add BZip2Utils.getCompressedFileName(String) and deprecate
getCompressedFilename(String)
+ Add BZip2Utils.getUncompressedFileName(String) and deprecate
getUncompressedFilename(String)
+ Add BZip2Utils.isCompressedFileName(String) and deprecate
isCompressedFilename(String)
+ Add LZMAUtils.getCompressedFileName(String) and deprecate
getCompressedFilename(String)
+ Add LZMAUtils.getUncompressedFileName(String) and deprecate
getUncompressedFilename(String)
+ Add LZMAUtils.isCompressedFileName(String) and deprecate
isCompressedFilename(String)
+ Add XYUtils.getCompressedFileName(String) and deprecate
getCompressedFilename(String)
+ Add XYUtils.getUncompressedFileName(String) and deprecate
getUncompressedFilename(String)
+ Add XYUtils.isCompressedFileName(String) and deprecate
isCompressedFilename(String)
+ Add GzipUtils.getCompressedFileName(String) and deprecate
getCompressedFilename(String)
+ Add GzipUtils.getUncompressedFileName(String) and deprecate
getUncompressedFilename(String)
+ Add GzipUtils.isCompressedFileName(String) and deprecate
isCompressedFilename(String)
+ Add SevenZOutputFile.putArchiveEntry(SevenZArchiveEntry) and
deprecate putArchiveEntry(ArchiveEntry)
+ Add generics to ChangeSet and ChangeSetPerformer
+ Add generics to ArchiveStreamProvider and friends
+ Add a generic type parameter to ArchiveOutputStream and avoid
unchecked/unconfirmed type casts in subclasses
+ Add a generic type parameter to ArchiveInputStream and
deprecate redundant get methods in subclasses
+ COMPRESS-648: Add ability to restrict autodetection in
CompressorStreamFactory
* Fixed Bugs:
+ Precompile regular expression in
ArArchiveInputStream.isBSDLongName(String)
+ Precompile regular expression in
ArArchiveInputStream.isGNULongName(String)
+ Precompile regular expression in
TarArchiveEntry.parseInstantFromDecimalSeconds(String)
+ Precompile regular expression in
ChangeSet.addDeletion(Change)
+ COMPRESS-649: Improve performance in
BlockLZ4CompressorOutputStream
+ Null-guard Lister.main(String[]) for programmatic invocation
+ NPE in pack200.NewAttributeBands.Reference
.addAttributeToBand(NewAttribute, InputStream)
+ Incorrect lazy initialization and update of static field in
pack200.CodecEncoding.getSpecifier(Codec, Codec)
+ Incorrect string comparison in unpack200.AttributeLayout
.numBackwardsCallables()
+ Inefficient use of keySet iterator instead of entrySet
iterator in pack200.PackingOptions
.addOrUpdateAttributeActions(List, Map, int)
+ Package private class pack200.IcBands.IcTuple should be a
static inner class
+ Private class ZipFile.BoundedFileChannelInputStream should be
a static inner class
+ Refactor internal SevenZ AES256SHA256Decoder InputStream into
a named static inner class
+ Refactor internal SevenZ AES256SHA256Decoder OutputStream into
a named static inner class
+ Use the root Locale for string conversion of command line
options in org.apache.commons.compress.archivers.sevenz.CLI
+ Calling PackingUtils.config(PackingOptions) with null now
closes the internal FileHandler
+ COMPRESS-650: LZ4 compressor throws IndexOutOfBoundsException
+ COMPRESS-632: LZWInputStream.initializeTables(int) should
throw IllegalArgumentException instead of
ArrayIndexOutOfBoundsException
+ COMPRESS-647: Throw IOException instead of
ArrayIndexOutOfBoundsException when reading Zip with data
descriptor entries
- Update to 1.24.0
* New features:
+ Make ZipArchiveEntry.getLocalHeaderOffset() public
* Fixed Bugs:
+ Use try-with-resources in ArchiveStreamFactory
+ Javadoc and code comments: Sanitize grammar issues and typos
+ Remove redundant (null) initializations
+ [StepSecurity] ci: Harden GitHub Actions
- Update to 1.23.0
* New features:
+ COMPRESS-614: Use FileTime for time fields in
SevenZipArchiveEntry
+ COMPRESS-621: Fix calculation the offset of the first ZIP
central directory entry
+ COMPRESS-633:Add encryption support for SevenZ
+ COMPRESS-613: Support for extra time data in Zip archives
+ COMPRESS-621: Add org.apache.commons.compress.archivers.zip
.DefaultBackingStoreSupplier to write to a custom folder
instead of the default temporary folder.
+ COMPRESS-600: Add capability to configure Deflater strategy
in GzipCompressorOutputStream:
GzipParameters.setDeflateStrategy(int).
* Fixed Bugs:
+ Implicit narrowing conversion in compound assignment
+ Avoid NPE in FileNameUtils.getBaseName(Path) for paths with
zero elements like root paths
+ Avoid NPE in FileNameUtils.getExtension(Path) for paths with
zero elements like root paths
+ LZMA2Decoder.decode() looses original exception
+ Extract conditions and avoid duplicate code.
+ Remove duplicate conditions. Use switch instead.
+ Replace JUnit 3 and 4 with JUnit 5
+ Make 'ZipFile.offsetComparator' static
+ COMPRESS-638: The GzipCompressorOutputStream#writeHeader()
uses ISO_8859_1 to write the file name and comment. If the
strings contains non-ISO_8859_1 characters, unknown characters
are displayed after decompression. Use percent encoding for
non ISO_8859_1 characters.
+ Port some code from IO to NIO APIs
+ pack200: Fix FileBands misusing InputStream#read(byte[])
+ COMPRESS-641: Add TarArchiveEntry.getLinkFlag()
+ COMPRESS-642: Integer overflow ArithmeticException in
TarArchiveOutputStream
+ COMPRESS-642: org.apache.commons.compress.archivers.zip
.ZipFile.finalize() should not write to std err.
* Removed:
+ Remove BZip2CompressorOutputStream.finalize() which only wrote
to std err
- Update to 1.22
* New features:
+ COMPRESS-602: Migrate zip package to use NIO
+ Add APK file extension constants: ArchiveStreamFactory.APK,
APKM, APKS, XAPK
+ ArchiveStreamFactory.createArchiveInputStream(String,
InputStream, String) supports the "APK" format (it's a JAR)
+ Expander example now has NIO Path versions of IO File APIs
+ COMPRESS-612: Improve TAR support for file times
+ Add SevenZArchiveEntry.setContentMethods(SevenZMethodConfiguration...)
* Fixed Bugs:
+ Fix some compiler warnings in pack200 packages
+ Close File input stream after unpacking in
Pack200UnpackerAdapter.unpack(File, JarOutputStream)
+ Pack200UnpackerAdapter.unpack(InputStream, JarOutputStream)
should not close its given input stream
+ COMPRESS-596: Fix minor problem in examples.
+ COMPRESS-584: Add a limit to the copy buffer in
IOUtils.readRange() to avoid reading more from a channel than
asked for
+ Documentation nits
+ Replace wrapper Collections.sort is with an instance method
directly
+ Replace manual comparisons with Comparator.comparingInt()
+ Replace manual copy of array contents with System.arraycopy()
+ Fix thread safety issues when encoding 7z password
+ bzip2: calculate median-of-3 on unsigned values
+ Use Math.min and Math.max calculations.
+ COMPRESS-603: Expander should be able to work if an entry's
name is "./".
+ COMPRESS-604: Ensure compatibility with Java 8
+ Use StringBuilder instead of StringBuffer.
+ Inline variable. Remove redundant local variable.
+ Use compare method
+ Remove Unnecessary interface modifiers
+ Avoid use C-style array declaration.
+ ChecksumVerifyingInputStream.read() does not always validate
checksum at end-of-stream
+ Fix TarFileTest
+ COMPRESS-625: Update Wikipedia link in TarUtils.java:627.
+ COMPRESS-626: OutOfMemoryError on malformed pack200 input
(attributes).
+ COMPRESS-628: OutOfMemoryError on malformed pack200 input
(org.apache.commons.compress.harmony.pack200.NewAttributeBands
.readNextUnionCase).
+ COMPRESS-628: OutOfMemoryError on malformed unpack200 input
(org.apache.commons.compress.harmony.unpack200
.NewAttributeBands.readNextUnionCase).
+ Some input streams are not closed in org.apache.commons
.compress.harmony.pack200.PackingUtils
+ COMPRESS-627: Pack200 causes a 'archive.3E' error if it's not
in the system class loader.
- Modified patches:
* 0001-Remove-Brotli-compressor.patch
* 0002-Remove-ZSTD-compressor.patch
* 0003-Remove-Pack200-compressor.patch
+ rediff to changed context
- Removed patch:
* fix_java_8_compatibility.patch
+ not needed, since we handle the compatibility differently
* Mon Mar 21 2022 Fridrich Strba <fstrba@suse.com>
- Added patch:
* 0003-Remove-Pack200-compressor.patch
+ Remove support for pack200 which depends on old asm3
* Tue Jul 20 2021 Fridrich Strba <fstrba@suse.com>
- Updated to 1.21
* When reading a specially crafted 7Z archive, the construction of
the list of codecs that decompress an entry can result in an
infinite loop. This could be used to mount a denial of service
attack against services that use Compress' sevenz package.
(CVE-2021-35515, bsc#1188463)
* When reading a specially crafted 7Z archive, Compress can be
made to allocate large amounts of memory that finally leads to
an out of memory error even for very small inputs. This could
be used to mount a denial of service attack against services
that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
* When reading a specially crafted TAR archive, Compress can be
made to allocate large amounts of memory that finally leads to
an out of memory error even for very small inputs. This could be
used to mount a denial of service attack against services that
use Compress' tar package. (CVE-2021-35517, bsc#1188465)
* When reading a specially crafted ZIP archive, Compress can be
made to allocate large amounts of memory that finally leads to
an out of memory error even for very small inputs. This could
be used to mount a denial of service attack against services
that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
added some new ocurrences
* Wed Aug 28 2019 Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
* ZipFile could get stuck in an infinite loop when parsing ZIP archives
with certain strong encryption headers (CVE-2019-12402).
* ZipArchiveInputStream and ZipFile will no longer throw an exception if
an extra field generally understood by Commons Compress is malformed
but rather turn them into UnrecognizedExtraField instances. You can
influence the way extra fields are parsed in more detail by using the
new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
* Some of the ZIP extra fields related to strong encryption will now
throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
certain cases when used directly. There is no practical difference
when they are read via ZipArchiveInputStream or ZipFile.
* ParallelScatterZipCreator now writes entries in the same order they have
been added to the archive.
* ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
fields by default now.
* TarArchiveInputStream has a new lenient mode that may allow it to read
certain broken archives.
- Rebased patch fix_java_8_compatibility.patch
* Mon Mar 25 2019 Fridrich Strba <fstrba@suse.com>
- Remove pom parent, since we don't use it when not building with
maven
* Sun Jan 27 2019 Jan Engelhardt <jengelh@inai.de>
- Add missing RPM group for %name-javadoc.
* Fri Jan 25 2019 Fridrich Strba <fstrba@suse.com>
- Rename package to apache-commons-compress
* Upgrade to version 1.18
* Use build.xml file generated ba mvn ant:ant and simplified
manually after
+ Allows building with ant and considerably shortens build
cycle
- Added patches
* 0001-Remove-Brotli-compressor.patch
+ do not build Brotli compressor, since we don't have its
dependencies
* 0002-Remove-ZSTD-compressor.patch
+ do not build ZSTD compressor, since we don't have its
dependencies
* fix_java_8_compatibility.patch
+ restore Java 8 compatibility in java.nio.ByteBuffer use
/usr/share/doc/packages/apache-commons-compress /usr/share/doc/packages/apache-commons-compress/NOTICE.txt /usr/share/java/apache-commons-compress.jar /usr/share/java/commons-compress.jar /usr/share/licenses/apache-commons-compress /usr/share/licenses/apache-commons-compress/LICENSE.txt /usr/share/maven-metadata/apache-commons-compress.xml /usr/share/maven-poms/commons-compress.pom
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 03:14:27 2026