Ubuntu
plexus-archiver package

plexus-archiver 2.2-1+deb9u1build0.16.04.1 source package in Ubuntu

Changelog

plexus-archiver (2.2-1+deb9u1build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

plexus-archiver (2.2-1+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fail when trying to extract outside of dest dir (CVE-2018-1002200)
    Fixes arbitrary file write vulnerability using a specially crafted zip
    file. (Closes: #900953)

 -- Mike Salvatore <email address hidden>  Fri, 09 Nov 2018 11:14:32 -0500

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Xenial
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates universe libs
Xenial security universe libs

Builds

Xenial: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
plexus-archiver_2.2.orig.tar.gz 133.0 KiB 93572eafdbf0e037303a5a1ed7e91b9cb251a9072ae513067efa5ca3ca32570e
plexus-archiver_2.2-1+deb9u1build0.16.04.1.debian.tar.xz 4.9 KiB 896dbee0391962697925e965193c74d248dcd4c13b44f83b6eb51c30e9f60415
plexus-archiver_2.2-1+deb9u1build0.16.04.1.dsc 2.3 KiB 3c466e2ad489ae829aae456eb2fa9f8f0041448d4178344c631b90ec5f2f88cb

View changes file

Binary packages built by this source

libplexus-archiver-java: Archiver plugin for the Plexus compiler system

 The Plexus project provides a full software stack for creating and
 executing software projects. Based on the Plexus container, the applications
 can utilise component-oriented programming to build modular, reusable
 components that can easily be assembled and reused.
 .
 This package provides the Archiver plugin for Plexus, used to create
 JARs and other archives.