Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1396-1

Опубликовано: 16 апр. 2026
Источник: suse-cvrf

Описание

Security update for plexus-utils

This update for plexus-utils fixes the following issue:

Security fixes:

  • CVE-2025-67030: directory traversal via the extractFile method of org.codehaus.plexus.util.Expand (bsc#1260588).

Update to version 4.0.2:

  • Bug Fixes
  • Specify /D for cmd.exe to bypass the Command Processor Autorun folder
  • Dependency updates
  • Bump org.codehaus.plexus:plexus from 17 to 18
  • Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1

Список пакетов

Container bci/openjdk-devel:17
plexus-utils-4.0.2-150200.3.14.1
Container bci/openjdk-devel:21
plexus-utils-4.0.2-150200.3.14.1
Container bci/openjdk-devel:latest
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Server 15 SP4-LTSS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Server 15 SP5-LTSS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Server 15 SP6-LTSS
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
plexus-utils-4.0.2-150200.3.14.1
openSUSE Leap 15.6
plexus-utils-4.0.2-150200.3.14.1
plexus-utils-javadoc-4.0.2-150200.3.14.1

Ссылки

Описание

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Затронутые продукты
Container bci/openjdk-devel:17:plexus-utils-4.0.2-150200.3.14.1
Container bci/openjdk-devel:21:plexus-utils-4.0.2-150200.3.14.1
Container bci/openjdk-devel:latest:plexus-utils-4.0.2-150200.3.14.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:plexus-utils-4.0.2-150200.3.14.1
Ссылки