Denial of service attacks due to use of vulnerable version of apache-commons-compress package

Affected versions of Atlassian Jira Service Server and Data Center allow an unauthenticated attacker to perform a denial of service attack against services that use the apache-commons-compress package.

The affected versions are before version 8.13.19, from version 8.14.0 before 8.20.6, from version 8.21.0 before 8.22.1, and from version 8.23.0 before 9.0.0.

Affected versions:

• version < 8.13.19
• 8.14.0 ≤ version < 8.20.6
• 8.21.0 ≤ version < 8.22.1
• 8.23.0 ≤ version < 9.0.0

Fixed versions:

• 8.13.19
• 8.20.6
• 8.22.1
• 9.0.0