This update for plexus-utils fixes the following issue:
Security fixes:
CVE-2025-67030: directory traversal via the extractFile method of org.codehaus.plexus.util.Expand (bsc#1260588).
Update to version 4.0.2:
Bug Fixes
Specify /D for cmd.exe to bypass the Command Processor
Autorun folder
Dependency updates
Bump org.codehaus.plexus:plexus from 17 to 18
Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1
Affected Packages
plexus-utils
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP7