Описание
ELSA-2026-40841: maven:3.8 security update (IMPORTANT)
apache-commons-cli [1.5.0-5]
- Rebuild to regenerate auto-requires
[1.5.0-4]
[1.5.0-3]
- Rebuilt for java-17-openjdk as system jdk
[1.5.0-2]
[1.5.0-1]
- Update to upstream version 1.5.0
[1.4-14]
[1.4-13]
- Bootstrap build
- Non-bootstrap build
[1.4-12]
[1.4-11]
[1.4-10]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
apache-commons-codec [1.15-8]
- Rebuild to regenerate auto-requires
[1.15-7]
[1.15-6]
- Rebuilt for java-17-openjdk as system jdk
[1.15-5]
[1.15-4]
[1.15-3]
- Bootstrap build
- Non-bootstrap build
[1.15-2]
[1.15-1]
- Update to upstream version 1.15
[1.15-1]
- Update to latest upstream release
[1.13-4]
apache-commons-io [1:2.11.0-3]
- Rebuild to regenerate auto-requires
[1:2.11.0-2]
[1:2.11.0-1]
- Update to upstream version 2.11.0
[1:2.8.0-7]
- Rebuilt for java-17-openjdk as system jdk
[1:2.8.0-6]
[1:2.8.0-5]
[1:2.8.0-4]
- Bootstrap build
- Non-bootstrap build
[1:2.8.0-3]
- Add patch to fix Files.size() failing when symlink target is non-existant
[1:2.8.0-2]
[1:2.8.0-1]
- Update to version 2.8.0.
apache-commons-lang3 [3.12.0-8]
- Rebuild to regenerate auto-requires
[3.12.0-7]
[3.12.0-6]
- Workaround build issue with RPM 4.18
[3.12.0-5]
- Rebuilt for java-17-openjdk as system jdk
[3.12.0-4]
[3.12.0-3]
[3.12.0-2]
- Bootstrap build
- Non-bootstrap build
[3.12.0-1]
- Update to upstream version 3.12.0
[3.11-2]
[3.11-1]
- Update to version 3.11.
- Fixes RHBZ#1699692
atinject [1.0.5-5]
- Rebuild to regenerate auto-requires
[1.0.5-4]
[1.0.5-3]
- Rebuilt for java-17-openjdk as system jdk
[1.0.5-2]
[1.0.5-1]
- Update to upstream version 1.0.5
[1.0.3-3]
[1.0.3-2]
- Bootstrap build
- Non-bootstrap build
[1-36.20100611svn86]
[1.0.3-1]
- Update to upstream version 1.0.3
[1-35.20100611svn86]
cdi-api [2.0.2-7]
- Rebuild to regenerate auto-requires
[2.0.2-6]
[2.0.2-5]
- Rebuilt for java-17-openjdk as system jdk
[2.0.2-4]
[2.0.2-3]
[2.0.2-2]
- Bootstrap build
- Non-bootstrap build
[2.0-2]
[2.0-1]
- Update to version 2.0.
[1.2-14]
[1.2-13]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
google-guice [4.2.3-10]
- Rebuild to regenerate auto-requires
[4.2.3-9]
[4.2.3-8]
- Rebuilt for java-17-openjdk as system jdk
[4.2.3-7]
[4.2.3-6]
[4.2.3-5]
- Bump release
[4.2.3-2]
- Bootstrap build
- Non-bootstrap build
[4.2.3-4]
[4.2.3-1]
- Update to upstream version 4.2.3
[4.2.3-3]
guava [31.0.1-5]
- Rebuild to regenerate auto-requires
[31.0.1-4]
[31.0.1-3]
- Rebuilt for java-17-openjdk as system jdk
[31.0.1-2]
[31.0.1-1]
- Update to 31.0.1
[30.1-3]
[30.1-2]
- Bootstrap build
- Non-bootstrap build
[25.0-10]
[30.1-1]
- Update to upstream version 30.1
[29.0-1]
- Update to upstream version 29.0
httpcomponents-client [4.5.13-6]
- Rebuild to regenerate auto-requires
[4.5.13-5]
[4.5.13-4]
- Rebuilt for java-17-openjdk as system jdk
[4.5.13-3]
[4.5.13-2]
[4.5.13-1]
- Update to upstream version 4.5.13
[4.5.11-3]
- Bootstrap build
- Non-bootstrap build
[4.5.10-6]
- Build with -release 8 for better OpenJDK 8 compatibility.
[4.5.10-5]
[4.5.10-4]
httpcomponents-core [4.4.13-8]
- Rebuild to regenerate auto-requires
[4.4.13-7]
[4.4.13-6]
- Rebuilt for java-17-openjdk as system jdk
[4.4.13-5]
[4.4.13-4]
[4.4.13-3]
- Bootstrap build
- Non-bootstrap build
[4.4.12-5]
[4.4.12-4]
[4.4.12-3]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
[4.4.12-2]
jakarta-annotations [1.3.5-15]
- Rebuild to regenerate auto-requires
[1.3.5-14]
[1.3.5-13]
- Rebuilt for java-17-openjdk as system jdk
[1.3.5-12]
[1.3.5-11]
- Fix bundle manifest
[1.3.5-10]
[1.3.5-9]
- Re-add provides on glassfish-annotation-api
[1.3.5-8]
- Bootstrap build
- Non-bootstrap build
[1.3.5-7]
[1.3.5-6]
- Remove duplicate aliases
jansi [2.4.0-7]
- Rebuild to regenerate auto-requires
[2.4.0-6]
[2.4.0-5]
- Ensure CC env variable is set during build
[2.4.0-4]
- Make javadoc subpackage noarch
[2.4.0-3]
- Rebuilt for java-17-openjdk as system jdk
[2.4.0-2]
[2.4.0-1]
- Update to upstream version 2.4.0
[2.3.3-3]
- Install native artifact into a fixed location
- Related: rhbz#1994935
[2.3.3-2]
[2.3.3-1]
- Version 2.3.3
jsr-305 [3.0.2-7]
- Rebuild to regenerate auto-requires
[3.0.2-6]
[3.0.2-5]
- Rebuilt for java-17-openjdk as system jdk
[3.0.2-4]
[3.0.2-3]
[3.0.2-2]
- Bootstrap build
- Non-bootstrap build
[0-0.31.20130910svn]
[3.0.2-1]
- Rebuild a properly versioned package
[0-0.30.20130910svn]
[0-0.29.20130910svn]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
maven [1:3.8.5-6]
- Rebuild to regenerate auto-requires
[1:3.8.5-5]
- Add OpenJDK 21 binding
- Related: RHEL-17126
[1:3.8.5-4]
- Turn hard dependency on java-devel into a weak dependencny
- Resolves: rhbz#2165591
[1:3.8.5-3]
[1:3.8.5-2]
- Add build-dependency on extra-enforcer-rules
[1:3.8.5-1]
- Update to upstream version 3.8.5
[1:3.8.4-3]
- Suggest OpenJDK 17 as default Maven binding
[1:3.8.4-2]
[1:3.8.4-1]
- Update to upstream version 3.8.4
[1:3.6.3-14]
- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478
maven-resolver [1:1.7.3-6]
- Rebuild to regenerate auto-requires
[1:1.7.3-5]
[1:1.7.3-4]
- Add aether-connector-wagon alias
[1:1.7.3-3]
- Rebuilt for java-17-openjdk as system jdk
[1:1.7.3-2]
[1:1.7.3-1]
- Update to upstream version 1.7.3
[1:1.6.1-7]
- Remove use of deprecated SHA-1 and MD5 algorithms
[1:1.6.1-6]
- Enable transport-file and transport-http module
[1:1.6.1-5]
[1:1.6.1-4]
- Add epoch to obsoleted packages
maven-shared-utils [3.3.4-6]
- Rebuild to regenerate auto-requires
[3.3.4-5]
[3.3.4-4]
- Rebuilt for java-17-openjdk as system jdk
[3.3.4-3]
[3.3.4-2]
[3.3.4-1]
- Update to upstream version 3.3.4
[3.3.3-2]
- Bootstrap build
- Non-bootstrap build
[3.2.1-0.8]
[3.3.3-1]
- Update to upstream version 3.3.3
[3.2.1-0.7]
maven-wagon [3.5.1-3]
- Rebuild to regenerate auto-requires
[3.5.1-2]
[3.5.1-1]
- Update to upstream version 3.5.1
[3.4.2-6]
- Rebuilt for java-17-openjdk as system jdk
[3.4.2-5]
[3.4.2-4]
[3.4.2-3]
- Obsolete removed subpackages
[3.4.2-2]
- Bootstrap build
- Non-bootstrap build
[0:3.4.2-1]
- Update to version 3.4.2.
[0:3.4.1-4]
plexus-cipher [2.0-3]
- Rebuild to regenerate auto-requires
[2.0-2]
[2.0-1]
- Update to upstream version 2.0
[1.8-3]
- Rebuilt for java-17-openjdk as system jdk
[1.8-2]
[1.8-1]
- Update to version 1.8
[1.7-24]
- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
[1.7-23]
- Bootstrap build
- Non-bootstrap build
[1.7-22]
[1.7-21]
plexus-classworlds [2.6.0-13]
- Rebuild to regenerate auto-requires
[2.6.0-12]
[2.6.0-11]
- Add missing test dependency on JUnit 4
[2.6.0-10]
- Rebuilt for java-17-openjdk as system jdk
[2.6.0-9]
[2.6.0-8]
- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
[2.6.0-7]
- Bootstrap build
- Non-bootstrap build
[2.6.0-6]
[2.6.0-5]
[2.6.0-4]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
plexus-containers [2.1.1-3]
- Rebuild to regenerate auto-requires
[2.1.1-2]
[2.1.1-1]
- Update to upstream version 2.1.1
[2.1.0-9]
- Rebuilt for java-17-openjdk as system jdk
[2.1.0-8]
[2.1.0-7]
- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
[2.1.0-6]
- Bootstrap build
- Non-bootstrap build
[2.1.0-5]
[2.1.0-4]
[2.1.0-3]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
plexus-interpolation [1.26-13]
- Rebuild to regenerate auto-requires
[1.26-12]
[1.26-11]
- Add missing test dependency on JUnit 4
[1.26-10]
- Rebuilt for java-17-openjdk as system jdk
[1.26-9]
[1.26-8]
[1.26-7]
- Bootstrap build
- Non-bootstrap build
[1.26-6]
[1.26-5]
[1.26-4]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
plexus-sec-dispatcher [2.0-5]
- Rebuild to regenerate auto-requires
[2.0-4]
[2.0-3]
- Rebuilt for java-17-openjdk as system jdk
[2.0-2]
[2.0-1]
- Update to version 2.0
[1.4-34]
[1.4-33]
- Bootstrap build
- Non-bootstrap build
[1.4-32]
[1.4-31]
[1.4-30]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
plexus-utils [3.3.0-11.el8_10.1]
- Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165339
[3.3.0-11]
- Rebuild to regenerate auto-requires
[3.3.0-10]
[3.3.0-9]
- Rebuilt for java-17-openjdk as system jdk
[3.3.0-8]
[3.3.0-7]
[3.3.0-6]
- Bootstrap build
- Non-bootstrap build
[3.3.0-5]
[3.3.0-4]
[3.3.0-3]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
sisu [1:0.3.5-3]
- Rebuild to regenerate auto-requires
[1:0.3.5-2]
[1:0.3.5-1]
- Update to upstream version 0.3.5
[1:0.3.4-9]
- Rebuilt for java-17-openjdk as system jdk
[1:0.3.4-8]
[1:0.3.4-7]
[1:0.3.4-6]
- Fix obsoletes on removed subpackages
[1:0.3.4-5]
- Bootstrap build
- Non-bootstrap build
[1:0.3.4-4]
[1:0.3.4-3]
slf4j [1.7.32-5]
- Rebuild to regenerate auto-requires
[1.7.32-4]
[1.7.32-3]
- Rebuilt for java-17-openjdk as system jdk
[1.7.32-2]
[1.7.32-1]
- Update to upstream version 1.7.32
[1.7.30-11]
- Enable slf4j-migrator and log4j-over-slf4j modules
[1.7.30-10]
[1.7.30-9]
- Bootstrap build
- Non-bootstrap build
[0:1.7.30-8]
[0:1.7.30-7]
- Disable unused log4j12 module.
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module maven:3.8 is enabled
apache-commons-cli
1.5.0-5.module+el8.10.0+90966+8bcb551f
apache-commons-codec
1.15-8.module+el8.10.0+90966+8bcb551f
apache-commons-io
2.11.0-3.module+el8.10.0+90966+8bcb551f
apache-commons-lang3
3.12.0-8.module+el8.10.0+90966+8bcb551f
atinject
1.0.5-5.module+el8.10.0+90966+8bcb551f
cdi-api
2.0.2-7.module+el8.10.0+90966+8bcb551f
google-guice
4.2.3-10.module+el8.10.0+90966+8bcb551f
guava
31.0.1-5.module+el8.10.0+90966+8bcb551f
httpcomponents-client
4.5.13-6.module+el8.10.0+90966+8bcb551f
httpcomponents-core
4.4.13-8.module+el8.10.0+90966+8bcb551f
jakarta-annotations
1.3.5-15.module+el8.10.0+90966+8bcb551f
jansi
2.4.0-7.module+el8.10.0+90966+8bcb551f
jcl-over-slf4j
1.7.32-5.module+el8.10.0+90966+8bcb551f
jsr-305
3.0.2-7.module+el8.10.0+90966+8bcb551f
maven
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-lib
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk11
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk17
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk21
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk8
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-resolver
1.7.3-6.module+el8.10.0+90966+8bcb551f
maven-shared-utils
3.3.4-6.module+el8.10.0+90966+8bcb551f
maven-wagon
3.5.1-3.module+el8.10.0+90966+8bcb551f
plexus-cipher
2.0-3.module+el8.10.0+90966+8bcb551f
plexus-classworlds
2.6.0-13.module+el8.10.0+90966+8bcb551f
plexus-containers-component-annotations
2.1.1-3.module+el8.10.0+90966+8bcb551f
plexus-interpolation
1.26-13.module+el8.10.0+90966+8bcb551f
plexus-sec-dispatcher
2.0-5.module+el8.10.0+90966+8bcb551f
plexus-utils
3.3.0-11.module+el8.10.0+90966+8bcb551f.1
sisu
0.3.5-3.module+el8.10.0+90966+8bcb551f
slf4j
1.7.32-5.module+el8.10.0+90966+8bcb551f
Oracle Linux x86_64
Module maven:3.8 is enabled
apache-commons-cli
1.5.0-5.module+el8.10.0+90966+8bcb551f
apache-commons-codec
1.15-8.module+el8.10.0+90966+8bcb551f
apache-commons-io
2.11.0-3.module+el8.10.0+90966+8bcb551f
apache-commons-lang3
3.12.0-8.module+el8.10.0+90966+8bcb551f
atinject
1.0.5-5.module+el8.10.0+90966+8bcb551f
cdi-api
2.0.2-7.module+el8.10.0+90966+8bcb551f
google-guice
4.2.3-10.module+el8.10.0+90966+8bcb551f
guava
31.0.1-5.module+el8.10.0+90966+8bcb551f
httpcomponents-client
4.5.13-6.module+el8.10.0+90966+8bcb551f
httpcomponents-core
4.4.13-8.module+el8.10.0+90966+8bcb551f
jakarta-annotations
1.3.5-15.module+el8.10.0+90966+8bcb551f
jansi
2.4.0-7.module+el8.10.0+90966+8bcb551f
jcl-over-slf4j
1.7.32-5.module+el8.10.0+90966+8bcb551f
jsr-305
3.0.2-7.module+el8.10.0+90966+8bcb551f
maven
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-lib
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk11
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk17
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk21
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-openjdk8
3.8.5-6.module+el8.10.0+90966+8bcb551f
maven-resolver
1.7.3-6.module+el8.10.0+90966+8bcb551f
maven-shared-utils
3.3.4-6.module+el8.10.0+90966+8bcb551f
maven-wagon
3.5.1-3.module+el8.10.0+90966+8bcb551f
plexus-cipher
2.0-3.module+el8.10.0+90966+8bcb551f
plexus-classworlds
2.6.0-13.module+el8.10.0+90966+8bcb551f
plexus-containers-component-annotations
2.1.1-3.module+el8.10.0+90966+8bcb551f
plexus-interpolation
1.26-13.module+el8.10.0+90966+8bcb551f
plexus-sec-dispatcher
2.0-5.module+el8.10.0+90966+8bcb551f
plexus-utils
3.3.0-11.module+el8.10.0+90966+8bcb551f.1
sisu
0.3.5-3.module+el8.10.0+90966+8bcb551f
slf4j
1.7.32-5.module+el8.10.0+90966+8bcb551f
Связанные CVE
Связанные уязвимости
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Directory Traversal vulnerability in the extractFile method of org.cod ...