(RHSA-2022:1860) Moderate: maven:3.6 security and enhancement update

2022-05-1008:04:46

access.redhat.com

0.002 Low

EPSS

Percentile

53.1%

JSON

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project’s build, reporting and documentation from a central piece of information.

Security Fix(es):

apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchhttpcomponents-client< 4.5.10-4.module+el8.6.0+13337+afcb49echttpcomponents-client-4.5.10-4.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchplexus-sec-dispatcher< 1.4-29.module+el8.6.0+13337+afcb49ecplexus-sec-dispatcher-1.4-29.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchmaven-openjdk8< 3.6.2-7.module+el8.6.0+13337+afcb49ecmaven-openjdk8-3.6.2-7.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchplexus-utils< 3.3.0-3.module+el8.6.0+13337+afcb49ecplexus-utils-3.3.0-3.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchguava< 28.1-3.module+el8.6.0+13337+afcb49ecguava-28.1-3.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchgeronimo-annotation< 1.0-26.module+el8.6.0+13337+afcb49ecgeronimo-annotation-1.0-26.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchatinject< 1-31.20100611svn86.module+el8.6.0+13337+afcb49ecatinject-1-31.20100611svn86.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchslf4j< 1.7.28-3.module+el8.6.0+13337+afcb49ecslf4j-1.7.28-3.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchplexus-classworlds< 2.6.0-4.module+el8.6.0+13337+afcb49ecplexus-classworlds-2.6.0-4.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchhttpcomponents-core< 4.4.12-3.module+el8.6.0+13337+afcb49echttpcomponents-core-4.4.12-3.module+el8.6.0+13337+afcb49ec.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	httpcomponents-client	< 4.5.10-4.module+el8.6.0+13337+afcb49ec	httpcomponents-client-4.5.10-4.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	plexus-sec-dispatcher	< 1.4-29.module+el8.6.0+13337+afcb49ec	plexus-sec-dispatcher-1.4-29.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	maven-openjdk8	< 3.6.2-7.module+el8.6.0+13337+afcb49ec	maven-openjdk8-3.6.2-7.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	plexus-utils	< 3.3.0-3.module+el8.6.0+13337+afcb49ec	plexus-utils-3.3.0-3.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	guava	< 28.1-3.module+el8.6.0+13337+afcb49ec	guava-28.1-3.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	geronimo-annotation	< 1.0-26.module+el8.6.0+13337+afcb49ec	geronimo-annotation-1.0-26.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	atinject	< 1-31.20100611svn86.module+el8.6.0+13337+afcb49ec	atinject-1-31.20100611svn86.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	slf4j	< 1.7.28-3.module+el8.6.0+13337+afcb49ec	slf4j-1.7.28-3.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	plexus-classworlds	< 2.6.0-4.module+el8.6.0+13337+afcb49ec	plexus-classworlds-2.6.0-4.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	httpcomponents-core	< 4.4.12-3.module+el8.6.0+13337+afcb49ec	httpcomponents-core-4.4.12-3.module+el8.6.0+13337+afcb49ec.noarch.rpm