Source: plexus-utils2 Version: 3.4.2-1 Severity: important Tags: security upstream Forwarded: https://github.com/codehaus-plexus/plexus-utils/issues/294 X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerability was published for plexus-utils2. CVE-2025-67030[0]: | Directory Traversal vulnerability in the extractFile method of | org.codehaus.plexus.util.Expand in plexus-utils before | 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to | execute arbitrary code If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2025-67030 https://www.cve.org/CVERecord?id=CVE-2025-67030 [1] https://github.com/codehaus-plexus/plexus-utils/issues/294 [2] https://github.com/codehaus-plexus/plexus-utils/commit/36ea3526309d2842075bf018d45152816a37fc98 Regards, Salvatore
