Register | Log in

plexus-utils2

utilities for the Plexus framework

Choose email to subscribe with

general

source: plexus-utils2 (main)
version: 3.6.2-1
maintainer: Debian Java Maintainers (archive) (DMD)
uploaders: Ludovic Claude [DMD]
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.3.0-1
oldstable: 3.4.2-1
stable: 3.4.2-1
testing: 3.4.2-1
unstable: 3.6.2-1

versioned links

3.3.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.4.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libplexus-utils2-java

action needed

lintian reports 1 warning high

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2022-09-28 Last update: 2026-10-28 09:01

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2025-67030: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Created: 2026-03-30 Last update: 2026-10-28 06:30

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2025-67030: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Created: 2026-03-30 Last update: 2026-10-28 06:30

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2025-67030: (needs triaging) Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-03-30 Last update: 2026-10-28 06:30

testing migrations

excuses:
- Migration status for plexus-utils2 (3.4.2-1 to 3.6.2-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ removing libplexus-utils2-java-doc/3.4.2-1/amd64 from testing makes libmaven-file-management-java-doc/3.0.0-2/amd64 uninstallable
- ∙ ∙ removing libplexus-utils2-java-doc/3.4.2-1/amd64 from testing makes libplexus-cli-java-doc/1.2-8/amd64 uninstallable
- ∙ ∙ removing libplexus-utils2-java-doc/3.4.2-1/amd64 from testing makes Build-Depends of src:maven-file-management uninstallable
- ∙ ∙ removing libplexus-utils2-java-doc/3.4.2-1/amd64 from testing makes Build-Depends of src:plexus-cli uninstallable
- ∙ ∙ removing libplexus-utils2-java-doc/3.4.2-1/arm64 from testing makes libmaven-file-management-java-doc/3.0.0-2/arm64 uninstallable
- ∙ ∙ removing libplexus-utils2-java-doc/3.4.2-1/arm64 from testing makes libplexus-cli-java-doc/1.2-8/arm64 uninstallable
- ∙ ∙ Autopkgtest for pomegranate-clojure/1.2.24-5: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, armhf: No tests, superficial or marked flaky ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, ppc64el: No tests, superficial or marked flaky ♻, riscv64: No tests, superficial or marked flaky ♻ (reference ♻), s390x: No tests, superficial or marked flaky ♻ (reference ♻)
- ∙ ∙ Too young, only 1 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/p/plexus-utils2.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[2026-10-28] Accepted plexus-utils2 3.6.2-1 (source) into unstable (Emmanuel Bourg)
[2022-12-11] plexus-utils2 3.4.2-1 MIGRATED to testing (Debian testing watch)
[2022-12-05] Accepted plexus-utils2 3.4.2-1 (source) into unstable (Emmanuel Bourg)
[2022-10-02] plexus-utils2 3.3.1-1 MIGRATED to testing (Debian testing watch)
[2022-09-27] Accepted plexus-utils2 3.3.1-1 (source) into unstable (Emmanuel Bourg)
[2022-07-05] plexus-utils2 3.3.0-3 MIGRATED to testing (Debian testing watch)
[2022-06-29] Accepted plexus-utils2 3.3.0-3 (source) into unstable (Markus Koschany)
[2022-06-02] plexus-utils2 3.3.0-2 MIGRATED to testing (Debian testing watch)
[2022-05-27] Accepted plexus-utils2 3.3.0-2 (source) into unstable (Emmanuel Bourg)
[2021-01-20] Accepted plexus-utils2 3.3.0-1~bpo10+1 (source all) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Sudip Mukherjee)
[2020-02-02] plexus-utils2 3.3.0-1 MIGRATED to testing (Debian testing watch)
[2020-01-27] Accepted plexus-utils2 3.3.0-1 (source) into unstable (Emmanuel Bourg)
[2019-07-21] plexus-utils2 3.2.1-1 MIGRATED to testing (Debian testing watch)
[2019-07-12] Accepted plexus-utils2 3.2.1-1 (source) into unstable (Emmanuel Bourg)
[2019-01-03] plexus-utils2 3.1.1-1 MIGRATED to testing (Debian testing watch)
[2018-12-28] Accepted plexus-utils2 3.1.1-1 (source) into unstable (Emmanuel Bourg)
[2018-12-01] plexus-utils2 3.1.0-4 MIGRATED to testing (Debian testing watch)
[2018-11-26] Accepted plexus-utils2 3.1.0-4 (source) into unstable (Emmanuel Bourg)
[2018-11-23] Accepted plexus-utils2 3.1.0-3 (source) into unstable (Emmanuel Bourg)
[2018-11-22] Accepted plexus-utils2 3.1.0-2 (source) into unstable (Emmanuel Bourg)
[2018-11-19] Accepted plexus-utils2 3.1.0-1 (source) into unstable (Emmanuel Bourg)
[2018-03-30] Accepted plexus-utils2 3.0.15-1+deb8u1 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Moritz Muehlenhoff) (signed by: Moritz Mühlenhoff)
[2018-03-22] Accepted plexus-utils2 3.0.15-1+deb8u1 (source all) into oldstable->embargoed, oldstable (Moritz Muehlenhoff) (signed by: Moritz Mühlenhoff)
[2018-01-09] Accepted plexus-utils2 2.0.5-1+deb7u1 (source all) into oldoldstable (Markus Koschany)
[2017-07-25] plexus-utils2 3.0.24-3 MIGRATED to testing (Debian testing watch)
[2017-07-23] Accepted plexus-utils2 3.0.24-3 (source) into unstable (Emmanuel Bourg)
[2017-06-20] plexus-utils2 3.0.24-2 MIGRATED to testing (Debian testing watch)
[2017-05-24] Accepted plexus-utils2 3.0.24-2 (source) into unstable (Emmanuel Bourg)
[2017-05-19] Accepted plexus-utils2 3.0.24-1 (source all) into unstable (Emmanuel Bourg)
[2015-11-25] plexus-utils2 3.0.22-1 MIGRATED to testing (Britney)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.4.2-1build1

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing