ELSA-2023-6886

ELSA-2023-6886 - plexus-archiver security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-11-13

Description

[0:2.4.2-6]
- Avoid override target symlink by standard file in AbstractUnArchiver
- Fixes: CVE-2023-37460

Related CVEs

CVE-2023-37460

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	plexus-archiver-2.4.2-6.el7_9.src.rpm	ec245d896b83b973d88cf5bfc312f526	-	ol7_aarch64_optional_latest
	plexus-archiver-2.4.2-6.el7_9.noarch.rpm	e5e4315919d1408d4fd953d9ab7599ff	-	ol7_aarch64_optional_latest
	plexus-archiver-javadoc-2.4.2-6.el7_9.noarch.rpm	05a2111baf55b274d36fef0ca719ac66	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	plexus-archiver-2.4.2-6.el7_9.src.rpm	ec245d896b83b973d88cf5bfc312f526	-	ol7_x86_64_optional_latest
	plexus-archiver-2.4.2-6.el7_9.noarch.rpm	e5e4315919d1408d4fd953d9ab7599ff	-	ol7_x86_64_optional_latest
	plexus-archiver-javadoc-2.4.2-6.el7_9.noarch.rpm	05a2111baf55b274d36fef0ca719ac66	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team