The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.
Users are recommended to upgrade to version 1.26.0 which fixes the issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade apache-commons-compress-javadocUpgrade apache-commons-compress | Mar 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade libcommons-compress-java | May 15, 2025 | Feb 19, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.4Upgrade Splunk Enterprise to version 9.1.7Upgrade Splunk Enterprise to version 9.3.2 | Jul 30, 2026 | Feb 19, 2024 |
| Suse | — | Upgrade apache-commons-codecUpgrade maven-doxia-module-latexUpgrade maven-doxia-javadocUpgrade maven-libUpgrade maven-doxia-module-confluenceUpgrade xmvn-installUpgrade xmvn-resolveUpgrade xmvn-mojo-javadocUpgrade maven-localUpgrade maven-reporting-implUpgrade maven-resolver-implUpgrade xmvn-connector-javadocUpgrade xmvn-connectorUpgrade xmvn-mojoUpgrade maven-assembly-plugin-javadocUpgrade maven-doxia-test-docsUpgrade xmvn-coreUpgrade apache-commons-configuration2Upgrade maven-reporting-impl-javadocUpgrade maven-jar-pluginUpgrade maven-resolver-javadocUpgrade xmvn-tools-javadocUpgrade maven-resolver-transport-fileUpgrade mavenUpgrade apache-commons-compressUpgrade maven-doxia-module-docbook-simpleUpgrade maven-javadoc-pluginUpgrade maven-resolver-transport-classpathUpgrade maven-resolver-connector-basicUpgrade maven-resolver-test-utilUpgrade maven-doxia-module-fmlUpgrade xmvnUpgrade xmvn-substUpgrade maven-resolver-transport-wagonUpgrade maven-resources-plugin-javadocUpgrade maven-doxia-module-xhtml5Upgrade maven-resolver-spiUpgrade apache-commons-codec-javadocUpgrade maven-jar-plugin-bootstrapUpgrade maven-doxia-coreUpgrade maven-resolver-transport-httpUpgrade maven-reporting-api-javadocUpgrade maven-doxia-sink-apiUpgrade maven-jar-plugin-javadocUpgrade maven-doxia-sitetools-javadocUpgrade maven-resources-plugin-bootstrapUpgrade maven-resources-pluginUpgrade xmvn-parentUpgrade maven-resolver-apiUpgrade maven-resolverUpgrade maven-reporting-apiUpgrade maven-assembly-pluginUpgrade maven-javadocUpgrade xmvn-minimalUpgrade maven-doxia-sitetoolsUpgrade maven-doxia-logging-apiUpgrade maven-doxia-module-twikiUpgrade maven-resolver-utilUpgrade sbt-bootstrapUpgrade maven-doxia-module-foUpgrade maven-resolver-named-locksUpgrade apache-commons-ioUpgrade sbtUpgrade xmvn-apiUpgrade maven-doxia-module-xdocUpgrade apache-commons-configuration2-javadocUpgrade maven-doxia-module-rtfUpgrade gradle-localUpgrade apache-commons-io-javadocUpgrade maven-doxia-module-xhtmlUpgrade ivy-localUpgrade maven-javadoc-plugin-javadocUpgrade maven-doxia-module-aptUpgrade maven-javadoc-plugin-bootstrapUpgrade apache-commons-compress-javadoc | Mar 1, 2024 | Feb 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub