# ALSA-2026:41948: Security update for 510 packages

ALSA-2026:41948, released July 20, 2026, fixes 1 CVE across 200 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alsa-2026-41948
- Platform: Linux
- Released: Jul 20, 2026
- Priority: High (Closes CVE-2025-67030, high severity)
- CVEs: 1, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:41948

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [ant](https://patchblox.com/security/data/product/linux/ant.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-antlr](https://patchblox.com/security/data/product/linux/ant-antlr.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-bcel](https://patchblox.com/security/data/product/linux/ant-apache-bcel.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-bsf](https://patchblox.com/security/data/product/linux/ant-apache-bsf.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-log4j](https://patchblox.com/security/data/product/linux/ant-apache-log4j.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-oro](https://patchblox.com/security/data/product/linux/ant-apache-oro.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-regexp](https://patchblox.com/security/data/product/linux/ant-apache-regexp.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-resolver](https://patchblox.com/security/data/product/linux/ant-apache-resolver.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-apache-xalan2](https://patchblox.com/security/data/product/linux/ant-apache-xalan2.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-commons-logging](https://patchblox.com/security/data/product/linux/ant-commons-logging.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-commons-net](https://patchblox.com/security/data/product/linux/ant-commons-net.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-contrib](https://patchblox.com/security/data/product/linux/ant-contrib.md) | almalinux 8 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
| [ant-contrib-javadoc](https://patchblox.com/security/data/product/linux/ant-contrib-javadoc.md) | almalinux 8 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
| [ant-javadoc](https://patchblox.com/security/data/product/linux/ant-javadoc.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-javamail](https://patchblox.com/security/data/product/linux/ant-javamail.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-jdepend](https://patchblox.com/security/data/product/linux/ant-jdepend.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-jmf](https://patchblox.com/security/data/product/linux/ant-jmf.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-jsch](https://patchblox.com/security/data/product/linux/ant-jsch.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-junit](https://patchblox.com/security/data/product/linux/ant-junit.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-lib](https://patchblox.com/security/data/product/linux/ant-lib.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-manual](https://patchblox.com/security/data/product/linux/ant-manual.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-swing](https://patchblox.com/security/data/product/linux/ant-swing.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-testutil](https://patchblox.com/security/data/product/linux/ant-testutil.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [ant-xz](https://patchblox.com/security/data/product/linux/ant-xz.md) | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| [antlr-C++](https://patchblox.com/security/data/product/linux/antlr-c.md) | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| [antlr-javadoc](https://patchblox.com/security/data/product/linux/antlr-javadoc.md) | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| [antlr-manual](https://patchblox.com/security/data/product/linux/antlr-manual.md) | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| [antlr-tool](https://patchblox.com/security/data/product/linux/antlr-tool.md) | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| [aopalliance](https://patchblox.com/security/data/product/linux/aopalliance.md) | almalinux 8 | 1.0-17.module_el8.0.0+6004+2fc32706 |
| [aopalliance-javadoc](https://patchblox.com/security/data/product/linux/aopalliance-javadoc.md) | almalinux 8 | 1.0-17.module_el8.0.0+6004+2fc32706 |
| [apache-commons-beanutils](https://patchblox.com/security/data/product/linux/apache-commons-beanutils.md) | almalinux 8 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
| [apache-commons-beanutils-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-beanutils-javadoc.md) | almalinux 8 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
| [apache-commons-cli](https://patchblox.com/security/data/product/linux/apache-commons-cli.md) | almalinux 8 | 1.4-4.module_el8.0.0+6004+2fc32706 |
| [apache-commons-cli-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-cli-javadoc.md) | almalinux 8 | 1.4-4.module_el8.0.0+6004+2fc32706 |
| [apache-commons-codec](https://patchblox.com/security/data/product/linux/apache-commons-codec.md) | almalinux 8 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-codec-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-codec-javadoc.md) | almalinux 8 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-collections](https://patchblox.com/security/data/product/linux/apache-commons-collections.md) | almalinux 8 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| [apache-commons-collections-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-collections-javadoc.md) | almalinux 8 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| [apache-commons-collections-testframework](https://patchblox.com/security/data/product/linux/apache-commons-collections-testframework.md) | almalinux 8 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| [apache-commons-compress](https://patchblox.com/security/data/product/linux/apache-commons-compress.md) | almalinux 8 | 1.18-1.module_el8.0.0+6004+2fc32706 |
| [apache-commons-compress-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-compress-javadoc.md) | almalinux 8 | 1.18-1.module_el8.0.0+6004+2fc32706 |
| [apache-commons-exec](https://patchblox.com/security/data/product/linux/apache-commons-exec.md) | almalinux 8 | 1.3-8.module_el8.0.0+6004+2fc32706 |
| [apache-commons-exec-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-exec-javadoc.md) | almalinux 8 | 1.3-8.module_el8.0.0+6004+2fc32706 |
| [apache-commons-io](https://patchblox.com/security/data/product/linux/apache-commons-io.md) | almalinux 8 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-io-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-io-javadoc.md) | almalinux 8 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-jxpath](https://patchblox.com/security/data/product/linux/apache-commons-jxpath.md) | almalinux 8 | 1.3-29.module_el8.0.0+6004+2fc32706 |
| [apache-commons-jxpath-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-jxpath-javadoc.md) | almalinux 8 | 1.3-29.module_el8.0.0+6004+2fc32706 |
| [apache-commons-lang](https://patchblox.com/security/data/product/linux/apache-commons-lang.md) | almalinux 8 | 2.6-21.module_el8.0.0+6004+2fc32706 |
| [apache-commons-lang-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-lang-javadoc.md) | almalinux 8 | 2.6-21.module_el8.0.0+6004+2fc32706 |
| [apache-commons-lang3](https://patchblox.com/security/data/product/linux/apache-commons-lang3.md) | almalinux 8 | 3.7-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-lang3-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-lang3-javadoc.md) | almalinux 8 | 3.7-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-logging](https://patchblox.com/security/data/product/linux/apache-commons-logging.md) | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| [apache-commons-logging-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-logging-javadoc.md) | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| [apache-commons-net](https://patchblox.com/security/data/product/linux/apache-commons-net.md) | almalinux 8 | 3.6-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-net-javadoc](https://patchblox.com/security/data/product/linux/apache-commons-net-javadoc.md) | almalinux 8 | 3.6-3.module_el8.0.0+6004+2fc32706 |
| [apache-commons-parent](https://patchblox.com/security/data/product/linux/apache-commons-parent.md) | almalinux 8 | 43-2.module_el8.0.0+6004+2fc32706 |
| [apache-ivy](https://patchblox.com/security/data/product/linux/apache-ivy.md) | almalinux 8 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
| [apache-ivy-javadoc](https://patchblox.com/security/data/product/linux/apache-ivy-javadoc.md) | almalinux 8 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
| [apache-parent](https://patchblox.com/security/data/product/linux/apache-parent.md) | almalinux 8 | 19-2.module_el8.0.0+6004+2fc32706 |
| [apache-resource-bundles](https://patchblox.com/security/data/product/linux/apache-resource-bundles.md) | almalinux 8 | 2-20.module_el8.0.0+6004+2fc32706 |
| [aqute-bnd](https://patchblox.com/security/data/product/linux/aqute-bnd.md) | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| [aqute-bnd-javadoc](https://patchblox.com/security/data/product/linux/aqute-bnd-javadoc.md) | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| [aqute-bndlib](https://patchblox.com/security/data/product/linux/aqute-bndlib.md) | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| [assertj-core](https://patchblox.com/security/data/product/linux/assertj-core.md) | almalinux 8 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
| [assertj-core-javadoc](https://patchblox.com/security/data/product/linux/assertj-core-javadoc.md) | almalinux 8 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
| [atinject](https://patchblox.com/security/data/product/linux/atinject.md) | almalinux 8 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| [atinject-javadoc](https://patchblox.com/security/data/product/linux/atinject-javadoc.md) | almalinux 8 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| [atinject-tck](https://patchblox.com/security/data/product/linux/atinject-tck.md) | almalinux 8 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| [bcel](https://patchblox.com/security/data/product/linux/bcel.md) | almalinux 8 | 6.2-2.module_el8.0.0+6004+2fc32706 |
| [bcel-javadoc](https://patchblox.com/security/data/product/linux/bcel-javadoc.md) | almalinux 8 | 6.2-2.module_el8.0.0+6004+2fc32706 |
| [beust-jcommander](https://patchblox.com/security/data/product/linux/beust-jcommander.md) | almalinux 8 | 1.71-5.module_el8.0.0+6004+2fc32706 |
| [beust-jcommander-javadoc](https://patchblox.com/security/data/product/linux/beust-jcommander-javadoc.md) | almalinux 8 | 1.71-5.module_el8.0.0+6004+2fc32706 |
| [bnd-maven-plugin](https://patchblox.com/security/data/product/linux/bnd-maven-plugin.md) | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| [bsf](https://patchblox.com/security/data/product/linux/bsf.md) | almalinux 8 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
| [bsf-javadoc](https://patchblox.com/security/data/product/linux/bsf-javadoc.md) | almalinux 8 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
| [bsh](https://patchblox.com/security/data/product/linux/bsh.md) | almalinux 8 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| [bsh-javadoc](https://patchblox.com/security/data/product/linux/bsh-javadoc.md) | almalinux 8 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| [bsh-manual](https://patchblox.com/security/data/product/linux/bsh-manual.md) | almalinux 8 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| [byaccj](https://patchblox.com/security/data/product/linux/byaccj.md) | almalinux 8 | 1.15-17.module_el8.0.0+6004+2fc32706 |
| [cal10n](https://patchblox.com/security/data/product/linux/cal10n.md) | almalinux 8 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
| [cal10n-javadoc](https://patchblox.com/security/data/product/linux/cal10n-javadoc.md) | almalinux 8 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
| [cdi-api](https://patchblox.com/security/data/product/linux/cdi-api.md) | almalinux 8 | 1.2-8.module_el8.0.0+6004+2fc32706 |
| [cdi-api-javadoc](https://patchblox.com/security/data/product/linux/cdi-api-javadoc.md) | almalinux 8 | 1.2-8.module_el8.0.0+6004+2fc32706 |
| [cglib](https://patchblox.com/security/data/product/linux/cglib.md) | almalinux 8 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
| [cglib-javadoc](https://patchblox.com/security/data/product/linux/cglib-javadoc.md) | almalinux 8 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
| [easymock](https://patchblox.com/security/data/product/linux/easymock.md) | almalinux 8 | 3.5-4.module_el8.0.0+6004+2fc32706 |
| [easymock-javadoc](https://patchblox.com/security/data/product/linux/easymock-javadoc.md) | almalinux 8 | 3.5-4.module_el8.0.0+6004+2fc32706 |
| [exec-maven-plugin](https://patchblox.com/security/data/product/linux/exec-maven-plugin.md) | almalinux 8 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
| [exec-maven-plugin-javadoc](https://patchblox.com/security/data/product/linux/exec-maven-plugin-javadoc.md) | almalinux 8 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
| [felix-osgi-compendium](https://patchblox.com/security/data/product/linux/felix-osgi-compendium.md) | almalinux 8 | 1.4.0-26.module_el8.0.0+6004+2fc32706 |
| [felix-osgi-compendium-javadoc](https://patchblox.com/security/data/product/linux/felix-osgi-compendium-javadoc.md) | almalinux 8 | 1.4.0-26.module_el8.0.0+6004+2fc32706 |
| [felix-osgi-core](https://patchblox.com/security/data/product/linux/felix-osgi-core.md) | almalinux 8 | 1.4.0-23.module_el8.0.0+6004+2fc32706 |
| [felix-osgi-core-javadoc](https://patchblox.com/security/data/product/linux/felix-osgi-core-javadoc.md) | almalinux 8 | 1.4.0-23.module_el8.0.0+6004+2fc32706 |
| [felix-osgi-foundation](https://patchblox.com/security/data/product/linux/felix-osgi-foundation.md) | almalinux 8 | 1.2.0-23.module_el8.0.0+6004+2fc32706 |
| [felix-osgi-foundation-javadoc](https://patchblox.com/security/data/product/linux/felix-osgi-foundation-javadoc.md) | almalinux 8 | 1.2.0-23.module_el8.0.0+6004+2fc32706 |
| [felix-parent](https://patchblox.com/security/data/product/linux/felix-parent.md) | almalinux 8 | 4-5.module_el8.0.0+6004+2fc32706 |
| [felix-utils](https://patchblox.com/security/data/product/linux/felix-utils.md) | almalinux 8 | 1.10.4-2.module_el8.0.0+6004+2fc32706 |
| [felix-utils-javadoc](https://patchblox.com/security/data/product/linux/felix-utils-javadoc.md) | almalinux 8 | 1.10.4-2.module_el8.0.0+6004+2fc32706 |
| [forge-parent](https://patchblox.com/security/data/product/linux/forge-parent.md) | almalinux 8 | 38-11.module_el8.0.0+6004+2fc32706 |
| [fusesource-pom](https://patchblox.com/security/data/product/linux/fusesource-pom.md) | almalinux 8 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| [geronimo-annotation](https://patchblox.com/security/data/product/linux/geronimo-annotation.md) | almalinux 8 | 1.0-23.module_el8.0.0+6004+2fc32706 |
| [geronimo-annotation-javadoc](https://patchblox.com/security/data/product/linux/geronimo-annotation-javadoc.md) | almalinux 8 | 1.0-23.module_el8.0.0+6004+2fc32706 |
| [geronimo-jms](https://patchblox.com/security/data/product/linux/geronimo-jms.md) | almalinux 8 | 1.1.1-25.module_el8.0.0+6004+2fc32706 |
| [geronimo-jms-javadoc](https://patchblox.com/security/data/product/linux/geronimo-jms-javadoc.md) | almalinux 8 | 1.1.1-25.module_el8.0.0+6004+2fc32706 |
| [geronimo-jpa](https://patchblox.com/security/data/product/linux/geronimo-jpa.md) | almalinux 8 | 1.1.1-21.module_el8.0.0+6004+2fc32706 |
| [geronimo-jpa-javadoc](https://patchblox.com/security/data/product/linux/geronimo-jpa-javadoc.md) | almalinux 8 | 1.1.1-21.module_el8.0.0+6004+2fc32706 |
| [geronimo-parent-poms](https://patchblox.com/security/data/product/linux/geronimo-parent-poms.md) | almalinux 8 | 1.6-25.module_el8.0.0+6004+2fc32706 |
| [glassfish-annotation-api](https://patchblox.com/security/data/product/linux/glassfish-annotation-api.md) | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| [glassfish-annotation-api-javadoc](https://patchblox.com/security/data/product/linux/glassfish-annotation-api-javadoc.md) | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| [glassfish-el](https://patchblox.com/security/data/product/linux/glassfish-el.md) | almalinux 8 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| [glassfish-el-api](https://patchblox.com/security/data/product/linux/glassfish-el-api.md) | almalinux 8 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| [glassfish-el-javadoc](https://patchblox.com/security/data/product/linux/glassfish-el-javadoc.md) | almalinux 8 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| [glassfish-jsp-api](https://patchblox.com/security/data/product/linux/glassfish-jsp-api.md) | almalinux 8 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 |
| [glassfish-jsp-api-javadoc](https://patchblox.com/security/data/product/linux/glassfish-jsp-api-javadoc.md) | almalinux 8 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 |
| [glassfish-legal](https://patchblox.com/security/data/product/linux/glassfish-legal.md) | almalinux 8 | 1.1-11.module_el8.0.0+6004+2fc32706 |
| [glassfish-master-pom](https://patchblox.com/security/data/product/linux/glassfish-master-pom.md) | almalinux 8 | 8-11.module_el8.0.0+6004+2fc32706 |
| [glassfish-servlet-api](https://patchblox.com/security/data/product/linux/glassfish-servlet-api.md) | almalinux 8 | 3.1.0-14.module_el8.0.0+6004+2fc32706 |
| [glassfish-servlet-api-javadoc](https://patchblox.com/security/data/product/linux/glassfish-servlet-api-javadoc.md) | almalinux 8 | 3.1.0-14.module_el8.0.0+6004+2fc32706 |
| [google-guice](https://patchblox.com/security/data/product/linux/google-guice.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [google-guice-javadoc](https://patchblox.com/security/data/product/linux/google-guice-javadoc.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guava20](https://patchblox.com/security/data/product/linux/guava20.md) | almalinux 8 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| [guava20-javadoc](https://patchblox.com/security/data/product/linux/guava20-javadoc.md) | almalinux 8 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| [guava20-testlib](https://patchblox.com/security/data/product/linux/guava20-testlib.md) | almalinux 8 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| [guice-assistedinject](https://patchblox.com/security/data/product/linux/guice-assistedinject.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-bom](https://patchblox.com/security/data/product/linux/guice-bom.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-extensions](https://patchblox.com/security/data/product/linux/guice-extensions.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-grapher](https://patchblox.com/security/data/product/linux/guice-grapher.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-jmx](https://patchblox.com/security/data/product/linux/guice-jmx.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-jndi](https://patchblox.com/security/data/product/linux/guice-jndi.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-multibindings](https://patchblox.com/security/data/product/linux/guice-multibindings.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-parent](https://patchblox.com/security/data/product/linux/guice-parent.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-servlet](https://patchblox.com/security/data/product/linux/guice-servlet.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-testlib](https://patchblox.com/security/data/product/linux/guice-testlib.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [guice-throwingproviders](https://patchblox.com/security/data/product/linux/guice-throwingproviders.md) | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| [hamcrest](https://patchblox.com/security/data/product/linux/hamcrest.md) | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| [hamcrest-core](https://patchblox.com/security/data/product/linux/hamcrest-core.md) | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| [hamcrest-demo](https://patchblox.com/security/data/product/linux/hamcrest-demo.md) | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| [hamcrest-javadoc](https://patchblox.com/security/data/product/linux/hamcrest-javadoc.md) | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| [hawtjni](https://patchblox.com/security/data/product/linux/hawtjni.md) | almalinux 8 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| [hawtjni-javadoc](https://patchblox.com/security/data/product/linux/hawtjni-javadoc.md) | almalinux 8 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| [hawtjni-runtime](https://patchblox.com/security/data/product/linux/hawtjni-runtime.md) | almalinux 8 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| [httpcomponents-client](https://patchblox.com/security/data/product/linux/httpcomponents-client.md) | almalinux 8 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| [httpcomponents-client-cache](https://patchblox.com/security/data/product/linux/httpcomponents-client-cache.md) | almalinux 8 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| [httpcomponents-client-javadoc](https://patchblox.com/security/data/product/linux/httpcomponents-client-javadoc.md) | almalinux 8 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| [httpcomponents-core](https://patchblox.com/security/data/product/linux/httpcomponents-core.md) | almalinux 8 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 |
| [httpcomponents-core-javadoc](https://patchblox.com/security/data/product/linux/httpcomponents-core-javadoc.md) | almalinux 8 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 |
| [httpcomponents-project](https://patchblox.com/security/data/product/linux/httpcomponents-project.md) | almalinux 8 | 9-2.module_el8.0.0+6004+2fc32706 |
| [isorelax](https://patchblox.com/security/data/product/linux/isorelax.md) | almalinux 8 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 |
| [isorelax-javadoc](https://patchblox.com/security/data/product/linux/isorelax-javadoc.md) | almalinux 8 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 |
| [ivy-local](https://patchblox.com/security/data/product/linux/ivy-local.md) | almalinux 8 | 5.3.0-2.module_el8.0.0+6004+2fc32706 |
| [jakarta-commons-httpclient](https://patchblox.com/security/data/product/linux/jakarta-commons-httpclient.md) | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| [jakarta-commons-httpclient-demo](https://patchblox.com/security/data/product/linux/jakarta-commons-httpclient-demo.md) | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| [jakarta-commons-httpclient-javadoc](https://patchblox.com/security/data/product/linux/jakarta-commons-httpclient-javadoc.md) | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| [jakarta-commons-httpclient-manual](https://patchblox.com/security/data/product/linux/jakarta-commons-httpclient-manual.md) | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| [jakarta-oro](https://patchblox.com/security/data/product/linux/jakarta-oro.md) | almalinux 8 | 2.0.8-23.module_el8.0.0+6004+2fc32706 |
| [jakarta-oro-javadoc](https://patchblox.com/security/data/product/linux/jakarta-oro-javadoc.md) | almalinux 8 | 2.0.8-23.module_el8.0.0+6004+2fc32706 |
| [jansi](https://patchblox.com/security/data/product/linux/jansi.md) | almalinux 8 | 1.17.1-1.module_el8.0.0+6004+2fc32706 |
| [jansi-javadoc](https://patchblox.com/security/data/product/linux/jansi-javadoc.md) | almalinux 8 | 1.17.1-1.module_el8.0.0+6004+2fc32706 |
| [jansi-native](https://patchblox.com/security/data/product/linux/jansi-native.md) | almalinux 8 | 1.7-7.module_el8.0.0+6004+2fc32706 |
| [jansi-native-javadoc](https://patchblox.com/security/data/product/linux/jansi-native-javadoc.md) | almalinux 8 | 1.7-7.module_el8.0.0+6004+2fc32706 |
| [java_cup](https://patchblox.com/security/data/product/linux/java-cup.md) | almalinux 8 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| [java_cup-javadoc](https://patchblox.com/security/data/product/linux/java-cup-javadoc.md) | almalinux 8 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| [java_cup-manual](https://patchblox.com/security/data/product/linux/java-cup-manual.md) | almalinux 8 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| [javacc](https://patchblox.com/security/data/product/linux/javacc.md) | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| [javacc-demo](https://patchblox.com/security/data/product/linux/javacc-demo.md) | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| [javacc-javadoc](https://patchblox.com/security/data/product/linux/javacc-javadoc.md) | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| [javacc-manual](https://patchblox.com/security/data/product/linux/javacc-manual.md) | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| [javacc-maven-plugin](https://patchblox.com/security/data/product/linux/javacc-maven-plugin.md) | almalinux 8 | 2.6-25.module_el8.0.0+6004+2fc32706 |
| [javacc-maven-plugin-javadoc](https://patchblox.com/security/data/product/linux/javacc-maven-plugin-javadoc.md) | almalinux 8 | 2.6-25.module_el8.0.0+6004+2fc32706 |
| [javamail](https://patchblox.com/security/data/product/linux/javamail.md) | almalinux 8 | 1.5.2-7.module_el8.0.0+6004+2fc32706 |
| [javamail-javadoc](https://patchblox.com/security/data/product/linux/javamail-javadoc.md) | almalinux 8 | 1.5.2-7.module_el8.0.0+6004+2fc32706 |
| [javapackages-filesystem](https://patchblox.com/security/data/product/linux/javapackages-filesystem.md) | almalinux 8 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 |
| [javapackages-local](https://patchblox.com/security/data/product/linux/javapackages-local.md) | almalinux 8 | 5.3.0-2.module_el8.0.0+6004+2fc32706 |
| [javapackages-tools](https://patchblox.com/security/data/product/linux/javapackages-tools.md) | almalinux 8 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 |
| [javassist](https://patchblox.com/security/data/product/linux/javassist.md) | almalinux 8 | 3.18.1-8.module_el8.0.0+6004+2fc32706 |
| [javassist-javadoc](https://patchblox.com/security/data/product/linux/javassist-javadoc.md) | almalinux 8 | 3.18.1-8.module_el8.0.0+6004+2fc32706 |
| [jaxen](https://patchblox.com/security/data/product/linux/jaxen.md) | almalinux 8 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| [jaxen-demo](https://patchblox.com/security/data/product/linux/jaxen-demo.md) | almalinux 8 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| [jaxen-javadoc](https://patchblox.com/security/data/product/linux/jaxen-javadoc.md) | almalinux 8 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| [jboss-interceptors-1.2-api](https://patchblox.com/security/data/product/linux/jboss-interceptors-1.2-api.md) | almalinux 8 | 1.0.0-8.module_el8.0.0+6004+2fc32706 |
| [jboss-interceptors-1.2-api-javadoc](https://patchblox.com/security/data/product/linux/jboss-interceptors-1.2-api-javadoc.md) | almalinux 8 | 1.0.0-8.module_el8.0.0+6004+2fc32706 |
| [jboss-parent](https://patchblox.com/security/data/product/linux/jboss-parent.md) | almalinux 8 | 20-4.module_el8.0.0+6004+2fc32706 |
| [jcl-over-slf4j](https://patchblox.com/security/data/product/linux/jcl-over-slf4j.md) | almalinux 8 | 1.7.25-4.module_el8.0.0+6004+2fc32706 |
| [jdepend](https://patchblox.com/security/data/product/linux/jdepend.md) | almalinux 8 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| [jdepend-demo](https://patchblox.com/security/data/product/linux/jdepend-demo.md) | almalinux 8 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| [jdepend-javadoc](https://patchblox.com/security/data/product/linux/jdepend-javadoc.md) | almalinux 8 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| [jdependency](https://patchblox.com/security/data/product/linux/jdependency.md) | almalinux 8 | 1.2-2.module_el8.0.0+6004+2fc32706 |
| [jdependency-javadoc](https://patchblox.com/security/data/product/linux/jdependency-javadoc.md) | almalinux 8 | 1.2-2.module_el8.0.0+6004+2fc32706 |
| [jdom](https://patchblox.com/security/data/product/linux/jdom.md) | almalinux 8 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| [jdom-demo](https://patchblox.com/security/data/product/linux/jdom-demo.md) | almalinux 8 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| [jdom-javadoc](https://patchblox.com/security/data/product/linux/jdom-javadoc.md) | almalinux 8 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| [jdom2](https://patchblox.com/security/data/product/linux/jdom2.md) | almalinux 8 | 2.0.6-12.module_el8.0.0+6004+2fc32706 |
| [jdom2-javadoc](https://patchblox.com/security/data/product/linux/jdom2-javadoc.md) | almalinux 8 | 2.0.6-12.module_el8.0.0+6004+2fc32706 |
| [jflex](https://patchblox.com/security/data/product/linux/jflex.md) | almalinux 8 | 1.6.1-12.module_el8.0.0+6004+2fc32706 |
| [jflex-javadoc](https://patchblox.com/security/data/product/linux/jflex-javadoc.md) | almalinux 8 | 1.6.1-12.module_el8.0.0+6004+2fc32706 |
| [jline](https://patchblox.com/security/data/product/linux/jline.md) | almalinux 8 | 2.14.6-2.module_el8.0.0+6004+2fc32706 |
| [jline-javadoc](https://patchblox.com/security/data/product/linux/jline-javadoc.md) | almalinux 8 | 2.14.6-2.module_el8.0.0+6004+2fc32706 |
| [jsch](https://patchblox.com/security/data/product/linux/jsch.md) | almalinux 8 | 0.1.54-6.module_el8.0.0+6004+2fc32706 |
| [jsch-javadoc](https://patchblox.com/security/data/product/linux/jsch-javadoc.md) | almalinux 8 | 0.1.54-6.module_el8.0.0+6004+2fc32706 |
| [jsoup](https://patchblox.com/security/data/product/linux/jsoup.md) | almalinux 8 | 1.11.3-3.module_el8.0.0+6004+2fc32706 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-67030](https://patchblox.com/security/data/cve/CVE-2025-67030.md) | High | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code | 8.8 | 0.0069 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo