(RHSA-2022:4797) Important: maven:3.6 security update

2022-05-3011:39:17

access.redhat.com

0.025 Low

EPSS

Percentile

90.3%

JSON

The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven.

Security Fix(es):

maven-shared-utils: Command injection via Commandline class (CVE-2022-29599)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchgoogle-guice< 4.2.2-4.module+el8.2.0+5557+11a14461google-guice-4.2.2-4.module+el8.2.0+5557+11a14461.noarch.rpm
RedHatanynoarchplexus-interpolation< 1.26-3.module+el8.3.0+6804+157bd82eplexus-interpolation-1.26-3.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHatanynoarchmaven-resolver< 1.4.1-3.module+el8.2.0+5557+11a14461maven-resolver-1.4.1-3.module+el8.2.0+5557+11a14461.noarch.rpm
RedHatanynoarchapache-commons-io< 2.6-6.module+el8.6.0+13337+afcb49ecapache-commons-io-2.6-6.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHatanynoarchcdi-api< 2.0.1-3.module+el8.3.0+6804+157bd82ecdi-api-2.0.1-3.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHatanynoarchslf4j< 1.7.28-3.module+el8.3.0+6804+157bd82eslf4j-1.7.28-3.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHatanynoarchmaven-openjdk8< 3.6.2-6.module+el8.4.0+9250+1786af37maven-openjdk8-3.6.2-6.module+el8.4.0+9250+1786af37.noarch.rpm
RedHatanynoarchplexus-cipher< 1.7-17.module+el8.3.0+6804+157bd82eplexus-cipher-1.7-17.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHatanynoarchgeronimo-annotation< 1.0-26.module+el8.2.0+5557+11a14461geronimo-annotation-1.0-26.module+el8.2.0+5557+11a14461.noarch.rpm
RedHatanynoarchmaven-shared-utils< 3.2.1-0.5.module+el8.6.0+15049+43453910maven-shared-utils-3.2.1-0.5.module+el8.6.0+15049+43453910.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	google-guice	< 4.2.2-4.module+el8.2.0+5557+11a14461	google-guice-4.2.2-4.module+el8.2.0+5557+11a14461.noarch.rpm
RedHat	any	noarch	plexus-interpolation	< 1.26-3.module+el8.3.0+6804+157bd82e	plexus-interpolation-1.26-3.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHat	any	noarch	maven-resolver	< 1.4.1-3.module+el8.2.0+5557+11a14461	maven-resolver-1.4.1-3.module+el8.2.0+5557+11a14461.noarch.rpm
RedHat	any	noarch	apache-commons-io	< 2.6-6.module+el8.6.0+13337+afcb49ec	apache-commons-io-2.6-6.module+el8.6.0+13337+afcb49ec.noarch.rpm
RedHat	any	noarch	cdi-api	< 2.0.1-3.module+el8.3.0+6804+157bd82e	cdi-api-2.0.1-3.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHat	any	noarch	slf4j	< 1.7.28-3.module+el8.3.0+6804+157bd82e	slf4j-1.7.28-3.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHat	any	noarch	maven-openjdk8	< 3.6.2-6.module+el8.4.0+9250+1786af37	maven-openjdk8-3.6.2-6.module+el8.4.0+9250+1786af37.noarch.rpm
RedHat	any	noarch	plexus-cipher	< 1.7-17.module+el8.3.0+6804+157bd82e	plexus-cipher-1.7-17.module+el8.3.0+6804+157bd82e.noarch.rpm
RedHat	any	noarch	geronimo-annotation	< 1.0-26.module+el8.2.0+5557+11a14461	geronimo-annotation-1.0-26.module+el8.2.0+5557+11a14461.noarch.rpm
RedHat	any	noarch	maven-shared-utils	< 3.2.1-0.5.module+el8.6.0+15049+43453910	maven-shared-utils-3.2.1-0.5.module+el8.6.0+15049+43453910.noarch.rpm