Package: plexus-utils2 / 3.0.15-1+deb8u1

Metadata

Package Version Patches format
plexus-utils2 3.0.15-1+deb8u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
CVE 2017 1000487.patch | (download)

src/main/java/org/codehaus/plexus/util/cli/Commandline.java | 25 20 + 5 - 0 !
src/main/java/org/codehaus/plexus/util/cli/shell/BourneShell.java | 60 19 + 41 - 0 !
src/main/java/org/codehaus/plexus/util/cli/shell/Shell.java | 35 28 + 7 - 0 !
src/test/java/org/codehaus/plexus/util/cli/CommandlineTest.java | 37 21 + 16 - 0 !
src/test/java/org/codehaus/plexus/util/cli/shell/BourneShellTest.java | 19 9 + 10 - 0 !
5 files changed, 97 insertions(+), 79 deletions(-)

 [patch] [plxutils-161] commandline shell injection problems

Patch by Charles Duffy, applied unmodified