USN-6730-1: Apache Maven Shared Utils vulnerability
11 April 2024
maven-shared-utils could be made to run programs if it received specially crafted input.
Releases
Packages
- maven-shared-utils - A collection of Maven utility classes.
Details
It was discovered that Apache Maven Shared Utils did not handle double-quoted
strings properly, allowing shell injection attacks. This could allow an
attacker to run arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
Ubuntu 20.04
Ubuntu 18.04
-
libmaven-shared-utils-java
-
3.3.0-1ubuntu0.18.04.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
libmaven-shared-utils-java
-
0.9-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 14.04
-
libmaven-shared-utils-java
-
0.4-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.