Control: tag -1 pending Hello,
Bug #900953 in plexus-archiver reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below, and you can check the diff of the fix at: https://salsa.debian.org/java-team/plexus-archiver/commit/35f70760eb10ddde30dbdb337546cc09e533183f ------------------------------------------------------------------------ New upstream release (3.6.0) Fixes CVE-2018-1002200: Arbitrary file write vulnerability using a specially crafted zip file (Closes: #900953) ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/900953
