From 27e444501e73c96c14a2af111f01d6b4ffccc583 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pere=20Fern=C3=A1ndez?= <pefernan@users.noreply.github.com>
Date: Mon, 30 Oct 2023 11:23:40 +0100
Subject: [PATCH] NO_ISSUE: Overriding commons-compress version to fix
 CVE-2023-42503 present in 1.22

---
 kogito-build/kogito-dependencies-bom/pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kogito-build/kogito-dependencies-bom/pom.xml b/kogito-build/kogito-dependencies-bom/pom.xml
index 704ab81459c..21a11e42a55 100644
--- a/kogito-build/kogito-dependencies-bom/pom.xml
+++ b/kogito-build/kogito-dependencies-bom/pom.xml
@@ -126,6 +126,7 @@
     <version.com.github.stephenc.jcip>1.0-1</version.com.github.stephenc.jcip>
     <version.black.ninia>4.1.1</version.black.ninia>
     <version.com.google.guava>32.0.1-jre</version.com.google.guava>
+    <version.apache.commons.commons-compress>1.24.0</version.apache.commons.commons-compress>
   </properties>
 
   <dependencyManagement>
@@ -136,6 +137,13 @@
         <artifactId>guava</artifactId>
         <version>${version.com.google.guava}</version>
       </dependency>
+
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-compress</artifactId>
+        <version>${version.apache.commons.commons-compress}</version>
+      </dependency>
+
       <dependency>
         <groupId>org.slf4j</groupId>
         <artifactId>slf4j-api</artifactId>