https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11771
https://commons.apache.org/proper/commons-compress/security-reports.html Will do this shortly.
r1838214