gpp_maybe Security update for plexus-utils

SUSE-SLE-Module-Development-Tools-15-SP7-2026-1396

This update for plexus-utils fixes the following issue: Security fixes: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588). Update to version 4.0.2: * Bug Fixes + Specify /D for cmd.exe to bypass the Command Processor Autorun folder * Dependency updates + Bump org.codehaus.plexus:plexus from 17 to 18 + Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1

• Release Date
  Apr 16 2026
• References
  Bugzilla: 1260588
  CVEs: CVE-2025-67030
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.7 s390x

• Packages
  plexus-utils
  Plexus Common Utilities

  4.0.2-150200.3.14.1 lock rpm lock src

Development Tools Module 15.7 ppc64le

• Packages
  plexus-utils
  Plexus Common Utilities

  4.0.2-150200.3.14.1 lock rpm lock src

Development Tools Module 15.7 aarch64

• Packages
  plexus-utils
  Plexus Common Utilities

  4.0.2-150200.3.14.1 lock rpm lock src

Development Tools Module 15.7 x86_64

• Packages
  plexus-utils
  Plexus Common Utilities

  4.0.2-150200.3.14.1 lock rpm lock src