[Bug 1148475] VUL-1: CVE-2019-12402: apache-commons-compress: infinite loop via specially crafted inputs