Debian Security Update DSA-4146 plexus-utils - security update

[LinuxBot]

Charles Duffy discovered that the Commandline class in the utilities for the Plexus framework performs insufficient quoting of double-encoded strings, which could result in the execution of arbitrary shell commands.

Continue reading...