https://bugzilla.redhat.com/show_bug.cgi?id=1764640 Bug 1764640 depends on bug 1761797, which changed state.
Bug 1761797 Summary: CVE-2019-12402 apache-commons-compress: denial of service vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1761797
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA