File _patchinfo of Package patchinfo.37647
<patchinfo incident="37647">
<issue tracker="bnc" id="1231298">VUL-0: CVE-2024-47554: apache-commons-io: untrusted input to XmlStreamReader can lead to uncontrolled resource consumption</issue>
<issue tracker="cve" id="2024-47554"/>
<packager>gkenion</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for apache-commons-io</summary>
<description>This update for apache-commons-io fixes the following issues:
apache-commons-io was updated from version 2.15.1 to 2.18.0:
- Key changes across versions:
* Cleaner code and updated dependencies
* Improved security when handling serialized data with the new safe deserialization feature
* New features for advanced file and stream operations
* Various bugs were fixed to improve reliability with fewer crashes and unexpected errors
* For the full list of changes please consult the packaged RELEASE-NOTES.txt
- Already fixed in previous version:
* CVE-2024-47554: Untrusted input to XmlStreamReader can lead to uncontrolled resource consumption (bsc#1231298)
</description>
</patchinfo>