Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:38500

Опубликовано: 13 июл. 2026
Источник: rocky
Оценка: Important

Описание

Important: maven:3.9 security update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

  • org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
mavennoarch13.module+el9.8.0+40251+0a41e792maven-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-libnoarch13.module+el9.8.0+40251+0a41e792maven-lib-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-openjdk11noarch13.module+el9.8.0+40251+0a41e792maven-openjdk11-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-openjdk17noarch13.module+el9.8.0+40251+0a41e792maven-openjdk17-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-openjdk21noarch13.module+el9.8.0+40251+0a41e792maven-openjdk21-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-openjdk25noarch13.module+el9.8.0+40251+0a41e792maven-openjdk25-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-openjdk8noarch13.module+el9.8.0+40251+0a41e792maven-openjdk8-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
maven-unboundnoarch13.module+el9.8.0+40251+0a41e792maven-unbound-3.9.9-13.module+el9.8.0+40251+0a41e792.noarch.rpm
plexus-utilsnoarch17.module+el9.8.0+40243+b89a0c01.1plexus-utils-3.5.1-17.module+el9.8.0+40243+b89a0c01.1.noarch.rpm
aopalliancenoarch51.module+el9.7.0+40002+8e3c44a9aopalliance-1.0-51.module+el9.7.0+40002+8e3c44a9.noarch.rpm

Показывать по

Связанные CVE

CVE-2025-67030

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2025-67030

CVSS3: 8.8
ubuntu
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

redhat логотип

CVE-2025-67030

CVSS3: 8.3
redhat
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

nvd логотип

CVE-2025-67030

CVSS3: 8.8
nvd
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

msrc логотип

CVE-2025-67030

CVSS3: 8.8
msrc
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

debian логотип

CVE-2025-67030

CVSS3: 8.8
debian
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.cod ...