Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:41948

Опубликовано: 20 июл. 2026
Источник: rocky
Оценка: Important

Описание

Important: javapackages-tools:201801 security update

The javapackages-tools packages provide macros and scripts to support Java packaging.

Security Fix(es):

  • org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
apache-commons-collectionsnoarch10.module+el8.10.0+1763+c7c02164apache-commons-collections-3.2.2-10.module+el8.10.0+1763+c7c02164.noarch.rpm
apache-commons-netnoarch3.module+el8.10.0+1763+c7c02164apache-commons-net-3.6-3.module+el8.10.0+1763+c7c02164.noarch.rpm
jakarta-commons-httpclientnoarch28.module+el8.10.0+1763+c7c02164jakarta-commons-httpclient-3.1-28.module+el8.10.0+1763+c7c02164.noarch.rpm
javassistnoarch8.module+el8.10.0+1763+c7c02164javassist-3.18.1-8.module+el8.10.0+1763+c7c02164.noarch.rpm
javassist-javadocnoarch8.module+el8.10.0+1763+c7c02164javassist-javadoc-3.18.1-8.module+el8.10.0+1763+c7c02164.noarch.rpm
apache-commons-collectionsnoarch10.module+el8.10.0+2052+1b0fb438apache-commons-collections-3.2.2-10.module+el8.10.0+2052+1b0fb438.noarch.rpm
slf4jnoarch4.module+el8.10.0+1763+c7c02164slf4j-1.7.25-4.module+el8.10.0+1763+c7c02164.noarch.rpm
slf4j-jdk14noarch4.module+el8.10.0+1763+c7c02164slf4j-jdk14-1.7.25-4.module+el8.10.0+1763+c7c02164.noarch.rpm
velocitynoarch24.module+el8.10.0+1763+c7c02164velocity-1.7-24.module+el8.10.0+1763+c7c02164.noarch.rpm
xalan-j2noarch38.module+el8.10.0+1763+c7c02164xalan-j2-2.7.1-38.module+el8.10.0+1763+c7c02164.noarch.rpm

Показывать по

Связанные CVE

CVE-2025-67030

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2025-67030

CVSS3: 8.8
ubuntu
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

redhat логотип

CVE-2025-67030

CVSS3: 8.3
redhat
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

nvd логотип

CVE-2025-67030

CVSS3: 8.8
nvd
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

msrc логотип

CVE-2025-67030

CVSS3: 8.8
msrc
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

debian логотип

CVE-2025-67030

CVSS3: 8.8
debian
4 месяца назад

Directory Traversal vulnerability in the extractFile method of org.cod ...