UbuntuUpdates.org

Package "maven-shared-utils"

Name: maven-shared-utils

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Replacement for plexus-utils in Maven
  • Replacement for plexus-utils in Maven (documentation)
Latest version: 3.3.0-1ubuntu0.20.04.1
Release: focal (20.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "maven-shared-utils" in Focal

Repository Area Version
base universe 3.3.0-1
security universe 3.3.0-1ubuntu0.20.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.3.0-1ubuntu0.20.04.1 2024-04-12 01:07:06 UTC

  maven-shared-utils (3.3.0-1ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Commandline class can emit double-quoted strings
    without proper escaping, allowing shell injection attacks.
    - debian/patches/CVE-2022-29599.patch: BourneShell unconditionally
      single quotes executable and arguments.
    - CVE-2022-29599

 -- Chris Kim <email address hidden> Thu, 28 Mar 2024 14:31:18 -0700
CVE-2022-29599 In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing she


About   -   Send Feedback to @ubuntu_updates