[ANN] Apache Commons Compress 1.17 Released
-----BEGIN PGP SIGNED MESSAGE-----
The Apache Commons Team is pleased to announce the release of Apache
Commons Compress 1.17.
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
As usual this release is a mix of bug fixes and new features. It
introduces a new interface InputStreamStatistics that can be used to
monitor decompression progress which is implemented by most of the
compressor and some of the archiving input streams.
Source and binary distributions are available for download from the
Apache Commons download site:
When downloading, please verify signatures using the KEYS file available
at the above location when downloading the release.
Changes in this version include:
o Added a unit test that is supposed to fail if we break the
OSGi manifest entries again.
o Add a new SkipShieldingInputStream class that can be used with
streams that throw an IOException when skip is invoked.
o New constructors have been added to SevenZFile that accept
chars rather than bytes in order to avoid a common error
of using the wrong encoding when creating the byte. This
change may break source compatibility for client code that
uses one of the constructors expecting a password and passes
in null as password. We recommend to change the code to use a
constructor without password argument.
o Removed the objenesis dependency from the pom as it is not
needed at all.
o Fixed resource leak in ParallelScatterZipCreator#writeTo.
o Certain errors when parsing ZIP extra fields in corrupt
archives are now turned into ZipException, they used to
manifest as ArrayIndexOutOfBoundsException before.
o IOUtils.copy now verifies the buffer size is bigger than 0.
o ZipArchiveInputStream failed to read some files with stored
entries using a data descriptor.
o Fixed some code examples.
Github Pull Request #63.
Thanks to Marchenko Sergey.
o The streams returned by ZipFile and most other decompressing
streams now provide information about the number of compressed
and uncompressed bytes read so far. This may be used to detect
a ZipBomb if the compression ratio exceeds a certain
threshold, for example.
For SevenZFile a new method returns the statistics for the
Thanks to Andreas Beeker.
o Added a workaround for a bug in AdoptOpenJDK for S/390 to
For complete information on Commons Compress, including instructions
on how to submit bug reports, patches, or suggestions for improvement,
see the Apache Commons Compress website:
Stefan Bodewig, on behalf of the Apache Commons community
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
-----END PGP SIGNATURE-----
To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx