NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Maven Central · #2172 by repository stars
Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
Last release 1 years ago
26 Jul 2025
Release timing varies
gaps range from 2 weeks to 1.4 years
Some releases are documented
notes for 15 of 35 stable releases
Nothing withdrawn
no release was ever pulled
17 years old
35 releases · first in 2009
Create release tag for Apache Commons Compress release 1.28.0.
Create release tag for Apache Commons Compress release 1.28.0.
The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.
Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
This is a feature and maintenance release. Java 8 or later is required.
This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.
Create release tag for Apache Commons Compress release 1.27.1.
Create release tag for Apache Commons Compress release 1.27.1.
One column per quarter.
Create release tag for Apache Commons Compress release 1.27.0.
Create release tag for Apache Commons Compress release 1.27.0.
Create release tag for Apache Commons Compress release 1.26.2.
Create release tag for Apache Commons Compress release 1.26.2.
Create release tag for Apache Commons Compress release 1.26.1.
Create release tag for Apache Commons Compress release 1.26.1.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
…introduced with Commons Compress 1.19. This is a breaking change if you relied on the recovery attempt. The change was made to detect broken archives…
Compress 1.21 is the first release to require Java 8 to build and run.
SevenZFileOptions has a new setting that needs to be enabled explicitly if SevenZFile should try to recover broken archives - a feature introduced with Commons Compress 1.19. This is a breaking change if you relied on the recovery attempt. The change was made to detect broken archives sooner, and to mitigate the OOM exploit.
Several formats now throw IOExceptions when reading broken archives or streams that would have caused arbitrary RuntimeExceptions in earlier versions of Compress.
Commons Compress 1.20 like any version of Commons Compress since 1.3 can not be built from sources using Java 14 as Java 14 removes support for the Pa
Commons Compress 1.20 like any version of Commons Compress since 1.3 can not be built from sources using Java 14 as Java 14 removes support for the Pack200 format. We will address this issue with the next release.
ZipArchiveInputStream and ZipFile will no longer throw an exception if an extra field generally understood by Commons Compress is malformed but rather
ZipArchiveInputStream and ZipFile will no longer throw an exception if an extra field generally understood by Commons Compress is malformed but rather turn them into UnrecognizedExtraField instances. You can influence the way extra fields are parsed in more detail by using the new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
Some of the ZIP extra fields related to strong encryption will now throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in certain cases when used directly. There is no practical difference when they are read via ZipArchiveInputStream or ZipFile.
This release changes the OSGi Manifest entry Bundle-SymbolicName from org.apache.commons.compress to org.apache.commons.commons-compress.
This release changes the OSGi Manifest entry Bundle-SymbolicName from org.apache.commons.compress to org.apache.commons.commons-compress.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Commons Compress 1.13 is the first version to require Java 7 at runtime.
Commons Compress 1.13 is the first version to require Java 7 at runtime.
Changes in this version include:
Commons Compress 1.12 is the first version to require Java 6 at runtime.
Commons Compress 1.12 is the first version to require Java 6 at runtime.
Release 1.12 changes the behavior of BZip2CompressorOutputStream's finalize method so that it no longer invokes finish. This is going to break code that relied on the finalizer to clean up an unfinished stream. The code will need to be changed to call finish or close itself. Note that a finalizer is not guaranteed to run, so the feature was not 100% effective in any case.
Nothing published for this version
Release 1.10 moves the former org.apache.commons.compress.compressors.z._internal_ package which breaks backwards compatibility for code which used th
Release 1.10 moves the former org.apache.commons.compress.compressors.z.internal package which breaks backwards compatibility for code which used the old package.
This also changes the superclass of ZCompressorInputStream which makes this class binary incompatible with the one of Compress 1.9. Code that extends ZCompressorInputStream will need to be recompiled in order to work with Compress 1.10.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Version 1.6 introduces changes to the internal API of the tar package that break backwards compatibility in the following rare cases. This version rem
Version 1.6 introduces changes to the internal API of the tar package that break backwards compatibility in the following rare cases. This version removes the package private TarBuffer class along with the protected "buffer" members in TarArchiveInputStream and TarArchiveOutputStream. This change will only affect you if you have created a subclass of one of the stream classes and accessed the buffer member or directly used the TarBuffer class.
Changes in this version include:
Nothing published for this version
This is a security bugfix release, see https://commons.apache.org/proper/commons-compress/security.html#Fixed_in_Apache_Commons_Compress_1.4.1
This is a security bugfix release, see https://commons.apache.org/proper/commons-compress/security.html#Fixed_in_Apache_Commons_Compress_1.4.1
Nothing published for this version
Commons Compress 1.3 is the first version to require Java5 at runtime.
Commons Compress 1.3 is the first version to require Java5 at runtime.
Changes in this version include:
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →