The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.
Users are recommended to upgrade to version 1.26.0 which fixes the issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade apache-commons-compress-javadocUpgrade apache-commons-compress | Mar 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade libcommons-compress-java | May 15, 2025 | Feb 19, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.4Upgrade Splunk Enterprise to version 9.3.2Upgrade Splunk Enterprise to version 9.1.7 | Jul 30, 2026 | Feb 19, 2024 |
| Suse | — | Upgrade xmvn-connector-javadocUpgrade xmvn-substUpgrade maven-reporting-impl-javadocUpgrade xmvn-tools-javadocUpgrade maven-doxia-module-latexUpgrade xmvn-installUpgrade xmvnUpgrade maven-reporting-implUpgrade maven-libUpgrade maven-doxia-module-fmlUpgrade maven-assembly-plugin-javadocUpgrade mavenUpgrade maven-resolver-transport-fileUpgrade maven-doxia-test-docsUpgrade apache-commons-configuration2Upgrade maven-resolver-transport-wagonUpgrade maven-resolver-transport-classpathUpgrade maven-resolver-implUpgrade xmvn-connectorUpgrade maven-doxia-javadocUpgrade xmvn-mojo-javadocUpgrade xmvn-resolveUpgrade xmvn-mojoUpgrade maven-resolver-connector-basicUpgrade maven-resolver-test-utilUpgrade maven-jar-pluginUpgrade maven-resolver-javadocUpgrade apache-commons-codecUpgrade maven-doxia-module-confluenceUpgrade maven-localUpgrade maven-resources-plugin-javadocUpgrade apache-commons-compressUpgrade maven-doxia-module-docbook-simpleUpgrade maven-javadoc-pluginUpgrade xmvn-coreUpgrade maven-javadocUpgrade maven-doxia-sitetoolsUpgrade maven-jar-plugin-javadocUpgrade maven-jar-plugin-bootstrapUpgrade maven-doxia-module-twikiUpgrade maven-doxia-logging-apiUpgrade maven-resolver-transport-httpUpgrade maven-doxia-sink-apiUpgrade maven-reporting-api-javadocUpgrade sbtUpgrade maven-doxia-module-xdocUpgrade xmvn-apiUpgrade gradle-localUpgrade maven-doxia-sitetools-javadocUpgrade sbt-bootstrapUpgrade maven-resolver-named-locksUpgrade maven-doxia-module-rtfUpgrade apache-commons-ioUpgrade apache-commons-configuration2-javadocUpgrade maven-doxia-module-foUpgrade maven-doxia-module-aptUpgrade maven-resources-pluginUpgrade maven-javadoc-plugin-bootstrapUpgrade maven-doxia-module-xhtml5Upgrade apache-commons-io-javadocUpgrade apache-commons-compress-javadocUpgrade apache-commons-codec-javadocUpgrade maven-resolver-utilUpgrade maven-resources-plugin-bootstrapUpgrade maven-resolverUpgrade xmvn-parentUpgrade maven-reporting-apiUpgrade maven-resolver-spiUpgrade maven-resolver-apiUpgrade ivy-localUpgrade maven-doxia-module-xhtmlUpgrade maven-javadoc-plugin-javadocUpgrade maven-assembly-pluginUpgrade maven-doxia-coreUpgrade xmvn-minimal | Mar 1, 2024 | Feb 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub