Ubuntu
plexus-archiver package

plexus-archiver 1.2-1+deb8u1build0.14.04.1 source package in Ubuntu

Changelog

plexus-archiver (1.2-1+deb8u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

plexus-archiver (1.2-1+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fail when trying to extract outside of dest dir (CVE-2018-1002200)
    Fixes arbitrary file write vulnerability using a specially crafted zip
    file. (Closes: #900953)

 -- Mike Salvatore <email address hidden>  Fri, 09 Nov 2018 11:18:57 -0500

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Trusty
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates universe libs
Trusty security universe libs

Builds

Trusty: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
plexus-archiver_1.2.orig.tar.gz 123.0 KiB 37c48eaa6af2d88476b885849a4e7157190a918c0259eeab7ead00c52d7d4e59
plexus-archiver_1.2-1+deb8u1build0.14.04.1.debian.tar.gz 4.6 KiB ff6f2a9cea29bd9759f0d99905f202a25896b81ecf60a1a6d012f74c390b3155
plexus-archiver_1.2-1+deb8u1build0.14.04.1.dsc 2.3 KiB 247ed4e9a03be2801cff4bbe5d2cc17dbe31bcbb2ec57fbd4d452512447571f1

View changes file

Binary packages built by this source

libplexus-archiver-java: Archiver plugin for the Plexus compiler system

 The Plexus project provides a full software stack for creating and
 executing software projects. Based on the Plexus container, the applications
 can utilise component-oriented programming to build modular, reusable
 components that can easily be assembled and reused.
 .
 This package provides the Archiver plugin for Plexus, used to create
 JARs and other archives.