Bug#988155: CVE-2021-26291

[Moritz Muehlenhoff]

Package: maven
Version: 3.6.3-3
Severity: important
Tags: security
X-Debbugs-Cc: Debian Security Team <team at security.debian.org>

CVE-2021-26291
https://www.openwall.com/lists/oss-security/2021/04/23/5
https://issues.apache.org/jira/browse/MNG-7118

Patch:
https://github.com/apache/maven/commit/907d53ad3264718f66ff15e1363d76b07dd0c05f (3.8.x)

Cheers,
        Moritz