Debian Security Update DSA-4149 plexus-utils2 - security update

[LinuxBot]

Charles Duffy discovered that the Commandline class in the utilities for the Plexus framework performs insufficient quoting of double-encoded strings, which could result in the execution of arbitrary shell commands.

Continue reading...