[cross-project-issues-dev] Alert regarding Apache commons-compress 1.6

[Thomas Hallgren <thomas@xxxxxxx>]

Hi,

I just encountered a really nasty bug in the Apache commons-compress TarAchiveInputStream that makes it silently ignore 
large parts of an archive during unpack. The bug was fixed in version 1.7. Here's the JIRA ticket:

https://issues.apache.org/jira/browse/COMPRESS-249

I'm posting this here because in Eclipse Orbit, the 1.6 version seems to be the most recent one. That is the version 
that is affected by this critical bug and really needs to get updated to at least 1.7 or even better, to the latest 
release (1.8 it seems).

- thomas