From 7513009aa4a4dd61033d3b313c1c76b32634f309 Mon Sep 17 00:00:00 2001
From: David Xia <dxia@spotify.com>
Date: Tue, 23 Oct 2018 11:20:29 -0400
Subject: [PATCH] Upgrade org.apache.commons:comons-compress to fix vuln

See CVE-2018-11771 https://nvd.nist.gov/vuln/detail/CVE-2018-11771.
---
 plugin/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin/pom.xml b/plugin/pom.xml
index bf22db03..db4bd19f 100644
--- a/plugin/pom.xml
+++ b/plugin/pom.xml
@@ -28,7 +28,7 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-compress</artifactId>
-        <version>1.14</version>
+        <version>1.18</version>
       </dependency>
       <dependency>
         <groupId>org.codehaus.plexus</groupId>