# RLSA-2026:41948: Security update for 182 packages

RLSA-2026:41948, released July 20, 2026, fixes 1 CVE across 182 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rlsa-2026-41948
- Platform: Linux
- Released: Jul 20, 2026
- Priority: High (Closes CVE-2025-67030, high severity)
- CVEs: 1, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://errata.rockylinux.org/RLSA-2026:41948

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [ant](https://patchblox.com/security/data/product/linux/ant.md) | rocky 8 | 0:1.10.5-1.module+el8.3.0+74+855e3f5d |
| [ant-contrib](https://patchblox.com/security/data/product/linux/ant-contrib.md) | rocky 8 | 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d |
| [antlr](https://patchblox.com/security/data/product/linux/antlr.md) | rocky 8 | 0:2.7.7-56.module+el8.3.0+74+855e3f5d |
| [aopalliance](https://patchblox.com/security/data/product/linux/aopalliance.md) | rocky 8 | 0:1.0-17.module+el8.6.0+843+5a13dac3 |
| [apache-commons-beanutils](https://patchblox.com/security/data/product/linux/apache-commons-beanutils.md) | rocky 8 | 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb |
| [apache-commons-cli](https://patchblox.com/security/data/product/linux/apache-commons-cli.md) | rocky 8 | 0:1.4-4.module+el8.6.0+843+5a13dac3 |
| [apache-commons-codec](https://patchblox.com/security/data/product/linux/apache-commons-codec.md) | rocky 8 | 0:1.11-3.module+el8.6.0+843+5a13dac3 |
| [apache-commons-collections](https://patchblox.com/security/data/product/linux/apache-commons-collections.md) | rocky 8 | 0:3.2.2-10.module+el8.10.0+2052+1b0fb438 |
| [apache-commons-compress](https://patchblox.com/security/data/product/linux/apache-commons-compress.md) | rocky 8 | 0:1.18-1.module+el8.10.0+2003+8aeac9cb |
| [apache-commons-exec](https://patchblox.com/security/data/product/linux/apache-commons-exec.md) | rocky 8 | 0:1.3-8.module+el8.3.0+74+855e3f5d |
| [apache-commons-io](https://patchblox.com/security/data/product/linux/apache-commons-io.md) | rocky 8 | 1:2.6-3.module+el8.6.0+843+5a13dac3 |
| [apache-commons-jxpath](https://patchblox.com/security/data/product/linux/apache-commons-jxpath.md) | rocky 8 | 0:1.3-29.module+el8.10.0+2003+8aeac9cb |
| [apache-commons-lang](https://patchblox.com/security/data/product/linux/apache-commons-lang.md) | rocky 8 | 0:2.6-21.module+el8.10.0+1763+c7c02164 |
| [apache-commons-lang3](https://patchblox.com/security/data/product/linux/apache-commons-lang3.md) | rocky 8 | 0:3.7-3.module+el8.6.0+843+5a13dac3 |
| [apache-commons-logging](https://patchblox.com/security/data/product/linux/apache-commons-logging.md) | rocky 8 | 0:1.2-13.module+el8.3.0+133+b8b54b58 |
| [apache-commons-net](https://patchblox.com/security/data/product/linux/apache-commons-net.md) | rocky 8 | 0:3.6-3.module+el8.10.0+2052+1b0fb438 |
| [apache-commons-parent](https://patchblox.com/security/data/product/linux/apache-commons-parent.md) | rocky 8 | 0:43-2.module+el8.3.0+74+855e3f5d |
| [apache-ivy](https://patchblox.com/security/data/product/linux/apache-ivy.md) | rocky 8 | 0:2.4.0-14.module+el8.3.0+74+855e3f5d |
| [apache-parent](https://patchblox.com/security/data/product/linux/apache-parent.md) | rocky 8 | 0:19-2.module+el8.10.0+2003+8aeac9cb |
| [apache-resource-bundles](https://patchblox.com/security/data/product/linux/apache-resource-bundles.md) | rocky 8 | 0:2-20.module+el8.3.0+74+855e3f5d |
| [aqute-bnd](https://patchblox.com/security/data/product/linux/aqute-bnd.md) | rocky 8 | 0:3.5.0-4.module+el8.3.0+74+855e3f5d |
| [assertj-core](https://patchblox.com/security/data/product/linux/assertj-core.md) | rocky 8 | 0:3.8.0-2.module+el8.3.0+74+855e3f5d |
| [atinject](https://patchblox.com/security/data/product/linux/atinject.md) | rocky 8 | 0:1-28.20100611svn86.module+el8.6.0+843+5a13dac3 |
| [bcel](https://patchblox.com/security/data/product/linux/bcel.md) | rocky 8 | 0:6.2-2.module+el8.3.0+74+855e3f5d |
| [beust-jcommander](https://patchblox.com/security/data/product/linux/beust-jcommander.md) | rocky 8 | 0:1.71-5.module+el8.3.0+74+855e3f5d |
| [bsf](https://patchblox.com/security/data/product/linux/bsf.md) | rocky 8 | 0:2.4.0-30.module+el8.3.0+74+855e3f5d |
| [bsh](https://patchblox.com/security/data/product/linux/bsh.md) | rocky 8 | 0:2.0-13.b6.module+el8.3.0+74+855e3f5d |
| [byaccj](https://patchblox.com/security/data/product/linux/byaccj.md) | rocky 8 | 0:1.15-17.module+el8.3.0+74+855e3f5d |
| [cal10n](https://patchblox.com/security/data/product/linux/cal10n.md) | rocky 8 | 0:0.8.1-7.module+el8.3.0+74+855e3f5d |
| [cdi-api](https://patchblox.com/security/data/product/linux/cdi-api.md) | rocky 8 | 0:1.2-8.module+el8.6.0+843+5a13dac3 |
| [cglib](https://patchblox.com/security/data/product/linux/cglib.md) | rocky 8 | 0:3.2.4-7.module+el8.3.0+74+855e3f5d |
| [easymock](https://patchblox.com/security/data/product/linux/easymock.md) | rocky 8 | 0:3.5-4.module+el8.3.0+74+855e3f5d |
| [exec-maven-plugin](https://patchblox.com/security/data/product/linux/exec-maven-plugin.md) | rocky 8 | 0:1.6.0-3.module+el8.3.0+74+855e3f5d |
| [felix-osgi-compendium](https://patchblox.com/security/data/product/linux/felix-osgi-compendium.md) | rocky 8 | 0:1.4.0-26.module+el8.3.0+74+855e3f5d |
| [felix-osgi-core](https://patchblox.com/security/data/product/linux/felix-osgi-core.md) | rocky 8 | 0:1.4.0-23.module+el8.3.0+74+855e3f5d |
| [felix-osgi-foundation](https://patchblox.com/security/data/product/linux/felix-osgi-foundation.md) | rocky 8 | 0:1.2.0-23.module+el8.3.0+74+855e3f5d |
| [felix-parent](https://patchblox.com/security/data/product/linux/felix-parent.md) | rocky 8 | 0:4-5.module+el8.3.0+74+855e3f5d |
| [felix-utils](https://patchblox.com/security/data/product/linux/felix-utils.md) | rocky 8 | 0:1.10.4-2.module+el8.3.0+74+855e3f5d |
| [forge-parent](https://patchblox.com/security/data/product/linux/forge-parent.md) | rocky 8 | 0:38-11.module+el8.3.0+74+855e3f5d |
| [fusesource-pom](https://patchblox.com/security/data/product/linux/fusesource-pom.md) | rocky 8 | 0:1.11-3.module+el8.3.0+74+855e3f5d |
| [geronimo-annotation](https://patchblox.com/security/data/product/linux/geronimo-annotation.md) | rocky 8 | 0:1.0-23.module+el8.6.0+843+5a13dac3 |
| [geronimo-jms](https://patchblox.com/security/data/product/linux/geronimo-jms.md) | rocky 8 | 0:1.1.1-25.module+el8.3.0+74+855e3f5d |
| [geronimo-jpa](https://patchblox.com/security/data/product/linux/geronimo-jpa.md) | rocky 8 | 0:1.1.1-21.module+el8.3.0+74+855e3f5d |
| [geronimo-parent-poms](https://patchblox.com/security/data/product/linux/geronimo-parent-poms.md) | rocky 8 | 0:1.6-25.module+el8.3.0+74+855e3f5d |
| [glassfish-annotation-api](https://patchblox.com/security/data/product/linux/glassfish-annotation-api.md) | rocky 8 | 0:1.2-13.module+el8.3.0+74+855e3f5d |
| [glassfish-el](https://patchblox.com/security/data/product/linux/glassfish-el.md) | rocky 8 | 0:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8 |
| [glassfish-jsp-api](https://patchblox.com/security/data/product/linux/glassfish-jsp-api.md) | rocky 8 | 0:2.3.2-0.9.b01.module+el8.3.0+74+855e3f5d |
| [glassfish-legal](https://patchblox.com/security/data/product/linux/glassfish-legal.md) | rocky 8 | 0:1.1-11.module+el8.3.0+74+855e3f5d |
| [glassfish-master-pom](https://patchblox.com/security/data/product/linux/glassfish-master-pom.md) | rocky 8 | 0:8-11.module+el8.3.0+74+855e3f5d |
| [glassfish-servlet-api](https://patchblox.com/security/data/product/linux/glassfish-servlet-api.md) | rocky 8 | 0:3.1.0-14.module+el8.10.0+2003+8aeac9cb |
| [google-guice](https://patchblox.com/security/data/product/linux/google-guice.md) | rocky 8 | 0:4.1-11.module+el8.6.0+843+5a13dac3 |
| [guava20](https://patchblox.com/security/data/product/linux/guava20.md) | rocky 8 | 0:20.0-8.module+el8.3.0+133+b8b54b58 |
| [hamcrest](https://patchblox.com/security/data/product/linux/hamcrest.md) | rocky 8 | 0:1.3-23.module+el8.10.0+2003+8aeac9cb |
| [hawtjni](https://patchblox.com/security/data/product/linux/hawtjni.md) | rocky 8 | 0:1.16-2.module+el8.3.0+133+b8b54b58 |
| [httpcomponents-client](https://patchblox.com/security/data/product/linux/httpcomponents-client.md) | rocky 8 | 0:4.5.5-4.module+el8.10.0+2003+8aeac9cb |
| [httpcomponents-core](https://patchblox.com/security/data/product/linux/httpcomponents-core.md) | rocky 8 | 0:4.4.10-4.module+el8.10.0+2003+8aeac9cb |
| [httpcomponents-project](https://patchblox.com/security/data/product/linux/httpcomponents-project.md) | rocky 8 | 0:9-2.module+el8.3.0+74+855e3f5d |
| [isorelax](https://patchblox.com/security/data/product/linux/isorelax.md) | rocky 8 | 1:0-0.23.release20050331.module+el8.3.0+74+855e3f5d |
| [jakarta-commons-httpclient](https://patchblox.com/security/data/product/linux/jakarta-commons-httpclient.md) | rocky 8 | 1:3.1-28.module+el8.10.0+1763+c7c02164 |
| [jakarta-oro](https://patchblox.com/security/data/product/linux/jakarta-oro.md) | rocky 8 | 0:2.0.8-23.module+el8.3.0+74+855e3f5d |
| [jansi](https://patchblox.com/security/data/product/linux/jansi.md) | rocky 8 | 0:1.17.1-1.module+el8.3.0+74+855e3f5d |
| [jansi-native](https://patchblox.com/security/data/product/linux/jansi-native.md) | rocky 8 | 0:1.7-7.module+el8.3.0+133+b8b54b58 |
| [java_cup](https://patchblox.com/security/data/product/linux/java-cup.md) | rocky 8 | 1:0.11b-8.module+el8.3.0+74+855e3f5d |
| [javacc](https://patchblox.com/security/data/product/linux/javacc.md) | rocky 8 | 0:7.0.2-6.module+el8.3.0+74+855e3f5d |
| [javacc-maven-plugin](https://patchblox.com/security/data/product/linux/javacc-maven-plugin.md) | rocky 8 | 0:2.6-25.module+el8.3.0+74+855e3f5d |
| [javamail](https://patchblox.com/security/data/product/linux/javamail.md) | rocky 8 | 0:1.5.2-7.module+el8.3.0+74+855e3f5d |
| [javapackages-tools](https://patchblox.com/security/data/product/linux/javapackages-tools.md) | rocky 8 | 0:5.3.0-2.module+el8.3.0+125+5da1ae29 |
| [javassist](https://patchblox.com/security/data/product/linux/javassist.md) | rocky 8 | 0:3.18.1-8.module+el8.10.0+2052+1b0fb438 |
| [jaxen](https://patchblox.com/security/data/product/linux/jaxen.md) | rocky 8 | 0:1.1.6-18.module+el8.3.0+74+855e3f5d |
| [jboss-interceptors-1.2-api](https://patchblox.com/security/data/product/linux/jboss-interceptors-1.2-api.md) | rocky 8 | 0:1.0.0-8.module+el8.3.0+133+b8b54b58 |
| [jboss-parent](https://patchblox.com/security/data/product/linux/jboss-parent.md) | rocky 8 | 0:20-4.module+el8.3.0+74+855e3f5d |
| [jdepend](https://patchblox.com/security/data/product/linux/jdepend.md) | rocky 8 | 0:2.9.1-18.module+el8.3.0+74+855e3f5d |
| [jdependency](https://patchblox.com/security/data/product/linux/jdependency.md) | rocky 8 | 0:1.2-2.module+el8.3.0+74+855e3f5d |
| [jdom](https://patchblox.com/security/data/product/linux/jdom.md) | rocky 8 | 0:1.1.3-17.module+el8.3.0+74+855e3f5d |
| [jdom2](https://patchblox.com/security/data/product/linux/jdom2.md) | rocky 8 | 0:2.0.6-12.module+el8.3.0+74+855e3f5d |
| [jflex](https://patchblox.com/security/data/product/linux/jflex.md) | rocky 8 | 0:1.6.1-12.module+el8.3.0+74+855e3f5d |
| [jline](https://patchblox.com/security/data/product/linux/jline.md) | rocky 8 | 0:2.14.6-2.module+el8.3.0+241+f23502a8 |
| [jsch](https://patchblox.com/security/data/product/linux/jsch.md) | rocky 8 | 0:0.1.54-6.module+el8.3.0+74+855e3f5d |
| [jsoup](https://patchblox.com/security/data/product/linux/jsoup.md) | rocky 8 | 0:1.11.3-3.module+el8.6.0+843+5a13dac3 |
| [jsr-305](https://patchblox.com/security/data/product/linux/jsr-305.md) | rocky 8 | 0:0-0.22.20130910svn.module+el8.10.0+2003+8aeac9cb |
| [jtidy](https://patchblox.com/security/data/product/linux/jtidy.md) | rocky 8 | 2:1.0-0.28.20100930svn1125.module+el8.3.0+74+855e3f5d |
| [junit](https://patchblox.com/security/data/product/linux/junit.md) | rocky 8 | 1:4.12-9.module+el8.10.0+2003+8aeac9cb |
| [jvnet-parent](https://patchblox.com/security/data/product/linux/jvnet-parent.md) | rocky 8 | 0:4-10.module+el8.3.0+74+855e3f5d |
| [jzlib](https://patchblox.com/security/data/product/linux/jzlib.md) | rocky 8 | 0:1.1.3-8.module+el8.3.0+74+855e3f5d |
| [log4j12](https://patchblox.com/security/data/product/linux/log4j12.md) | rocky 8 | 0:1.2.17-22.module+el8.3.0+74+855e3f5d |
| [maven](https://patchblox.com/security/data/product/linux/maven.md) | rocky 8 | 1:3.5.4-5.module+el8.6.0+975+c0ed2db8 |
| [maven-antrun-plugin](https://patchblox.com/security/data/product/linux/maven-antrun-plugin.md) | rocky 8 | 0:1.8-6.module+el8.3.0+74+855e3f5d |
| [maven-archiver](https://patchblox.com/security/data/product/linux/maven-archiver.md) | rocky 8 | 0:3.2.0-2.module+el8.3.0+74+855e3f5d |
| [maven-artifact-resolver](https://patchblox.com/security/data/product/linux/maven-artifact-resolver.md) | rocky 8 | 1:1.0-18.module+el8.3.0+74+855e3f5d |
| [maven-artifact-transfer](https://patchblox.com/security/data/product/linux/maven-artifact-transfer.md) | rocky 8 | 1:0.9.0-4.module+el8.3.0+74+855e3f5d |
| [maven-assembly-plugin](https://patchblox.com/security/data/product/linux/maven-assembly-plugin.md) | rocky 8 | 0:3.1.0-3.module+el8.3.0+74+855e3f5d |
| [maven-clean-plugin](https://patchblox.com/security/data/product/linux/maven-clean-plugin.md) | rocky 8 | 0:3.0.0-5.module+el8.3.0+74+855e3f5d |
| [maven-common-artifact-filters](https://patchblox.com/security/data/product/linux/maven-common-artifact-filters.md) | rocky 8 | 0:3.0.1-4.module+el8.3.0+74+855e3f5d |
| [maven-compiler-plugin](https://patchblox.com/security/data/product/linux/maven-compiler-plugin.md) | rocky 8 | 0:3.7.0-2.module+el8.3.0+74+855e3f5d |
| [maven-dependency-analyzer](https://patchblox.com/security/data/product/linux/maven-dependency-analyzer.md) | rocky 8 | 0:1.8-2.module+el8.3.0+74+855e3f5d |
| [maven-dependency-plugin](https://patchblox.com/security/data/product/linux/maven-dependency-plugin.md) | rocky 8 | 0:3.0.2-2.module+el8.3.0+74+855e3f5d |
| [maven-dependency-tree](https://patchblox.com/security/data/product/linux/maven-dependency-tree.md) | rocky 8 | 0:3.0-5.module+el8.3.0+74+855e3f5d |
| [maven-doxia](https://patchblox.com/security/data/product/linux/maven-doxia.md) | rocky 8 | 0:1.7-8.module+el8.3.0+74+855e3f5d |
| [maven-doxia-sitetools](https://patchblox.com/security/data/product/linux/maven-doxia-sitetools.md) | rocky 8 | 0:1.7.5-2.module+el8.3.0+74+855e3f5d |
| [maven-enforcer](https://patchblox.com/security/data/product/linux/maven-enforcer.md) | rocky 8 | 0:1.4.1-8.module+el8.3.0+74+855e3f5d |
| [maven-file-management](https://patchblox.com/security/data/product/linux/maven-file-management.md) | rocky 8 | 1:3.0.0-5.module+el8.3.0+74+855e3f5d |
| [maven-filtering](https://patchblox.com/security/data/product/linux/maven-filtering.md) | rocky 8 | 0:3.1.1-5.module+el8.3.0+74+855e3f5d |
| [maven-install-plugin](https://patchblox.com/security/data/product/linux/maven-install-plugin.md) | rocky 8 | 0:2.5.2-7.module+el8.3.0+74+855e3f5d |
| [maven-invoker](https://patchblox.com/security/data/product/linux/maven-invoker.md) | rocky 8 | 0:2.2-7.module+el8.3.0+74+855e3f5d |
| [maven-invoker-plugin](https://patchblox.com/security/data/product/linux/maven-invoker-plugin.md) | rocky 8 | 0:1.10-7.module+el8.3.0+74+855e3f5d |
| [maven-jar-plugin](https://patchblox.com/security/data/product/linux/maven-jar-plugin.md) | rocky 8 | 0:3.1.0-1.module+el8.3.0+74+855e3f5d |
| [maven-parent](https://patchblox.com/security/data/product/linux/maven-parent.md) | rocky 8 | 0:27-5.module+el8.3.0+74+855e3f5d |
| [maven-plugin-build-helper](https://patchblox.com/security/data/product/linux/maven-plugin-build-helper.md) | rocky 8 | 0:1.9.1-8.module+el8.3.0+74+855e3f5d |
| [maven-plugin-bundle](https://patchblox.com/security/data/product/linux/maven-plugin-bundle.md) | rocky 8 | 0:3.5.0-2.module+el8.3.0+74+855e3f5d |
| [maven-plugin-testing](https://patchblox.com/security/data/product/linux/maven-plugin-testing.md) | rocky 8 | 0:3.3.0-12.module+el8.3.0+74+855e3f5d |
| [maven-plugin-tools](https://patchblox.com/security/data/product/linux/maven-plugin-tools.md) | rocky 8 | 0:3.5.1-4.module+el8.3.0+74+855e3f5d |
| [maven-plugins-pom](https://patchblox.com/security/data/product/linux/maven-plugins-pom.md) | rocky 8 | 0:28-7.module+el8.3.0+74+855e3f5d |
| [maven-remote-resources-plugin](https://patchblox.com/security/data/product/linux/maven-remote-resources-plugin.md) | rocky 8 | 0:1.5-2.module+el8.3.0+74+855e3f5d |
| [maven-reporting-api](https://patchblox.com/security/data/product/linux/maven-reporting-api.md) | rocky 8 | 1:3.0-14.module+el8.3.0+74+855e3f5d |
| [maven-reporting-impl](https://patchblox.com/security/data/product/linux/maven-reporting-impl.md) | rocky 8 | 0:3.0.0-4.module+el8.3.0+74+855e3f5d |
| [maven-resolver](https://patchblox.com/security/data/product/linux/maven-resolver.md) | rocky 8 | 1:1.1.1-2.module+el8.6.0+843+5a13dac3 |
| [maven-resources-plugin](https://patchblox.com/security/data/product/linux/maven-resources-plugin.md) | rocky 8 | 0:3.1.0-3.module+el8.3.0+74+855e3f5d |
| [maven-script-interpreter](https://patchblox.com/security/data/product/linux/maven-script-interpreter.md) | rocky 8 | 0:1.1-11.module+el8.3.0+74+855e3f5d |
| [maven-shade-plugin](https://patchblox.com/security/data/product/linux/maven-shade-plugin.md) | rocky 8 | 0:3.1.0-3.module+el8.3.0+74+855e3f5d |
| [maven-shared](https://patchblox.com/security/data/product/linux/maven-shared.md) | rocky 8 | 0:22-6.module+el8.3.0+74+855e3f5d |
| [maven-shared-incremental](https://patchblox.com/security/data/product/linux/maven-shared-incremental.md) | rocky 8 | 0:1.1-14.module+el8.3.0+74+855e3f5d |
| [maven-shared-io](https://patchblox.com/security/data/product/linux/maven-shared-io.md) | rocky 8 | 1:3.0.0-5.module+el8.3.0+74+855e3f5d |
| [maven-shared-utils](https://patchblox.com/security/data/product/linux/maven-shared-utils.md) | rocky 8 | 0:3.2.1-0.1.module+el8.10.0+2003+8aeac9cb |
| [maven-source-plugin](https://patchblox.com/security/data/product/linux/maven-source-plugin.md) | rocky 8 | 0:3.0.1-4.module+el8.3.0+74+855e3f5d |
| [maven-surefire](https://patchblox.com/security/data/product/linux/maven-surefire.md) | rocky 8 | 0:2.22.0-3.module+el8.3.0+74+855e3f5d |
| [maven-verifier](https://patchblox.com/security/data/product/linux/maven-verifier.md) | rocky 8 | 0:1.6-6.module+el8.3.0+74+855e3f5d |
| [maven-wagon](https://patchblox.com/security/data/product/linux/maven-wagon.md) | rocky 8 | 0:3.1.0-1.module+el8.6.0+843+5a13dac3 |
| [maven2](https://patchblox.com/security/data/product/linux/maven2.md) | rocky 8 | 0:2.2.1-59.module+el8.3.0+74+855e3f5d |
| [mockito](https://patchblox.com/security/data/product/linux/mockito.md) | rocky 8 | 0:1.10.19-17.module+el8.3.0+74+855e3f5d |
| [modello](https://patchblox.com/security/data/product/linux/modello.md) | rocky 8 | 0:1.9.1-7.module+el8.3.0+74+855e3f5d |
| [mojo-parent](https://patchblox.com/security/data/product/linux/mojo-parent.md) | rocky 8 | 0:40-6.module+el8.3.0+74+855e3f5d |
| [munge-maven-plugin](https://patchblox.com/security/data/product/linux/munge-maven-plugin.md) | rocky 8 | 0:1.0-11.module+el8.3.0+74+855e3f5d |
| [objectweb-asm](https://patchblox.com/security/data/product/linux/objectweb-asm.md) | rocky 8 | 0:6.2-5.module+el8.10.0+2003+8aeac9cb |
| [objectweb-pom](https://patchblox.com/security/data/product/linux/objectweb-pom.md) | rocky 8 | 0:1.5-7.module+el8.3.0+74+855e3f5d |
| [objenesis](https://patchblox.com/security/data/product/linux/objenesis.md) | rocky 8 | 0:2.6-2.module+el8.3.0+74+855e3f5d |
| [os-maven-plugin](https://patchblox.com/security/data/product/linux/os-maven-plugin.md) | rocky 8 | 0:1.2.3-9.module+el8.3.0+74+855e3f5d |
| [osgi-annotation](https://patchblox.com/security/data/product/linux/osgi-annotation.md) | rocky 8 | 0:6.0.0-7.module+el8.3.0+74+855e3f5d |
| [osgi-compendium](https://patchblox.com/security/data/product/linux/osgi-compendium.md) | rocky 8 | 0:6.0.0-5.module+el8.3.0+74+855e3f5d |
| [osgi-core](https://patchblox.com/security/data/product/linux/osgi-core.md) | rocky 8 | 0:6.0.0-6.module+el8.3.0+74+855e3f5d |
| [plexus-ant-factory](https://patchblox.com/security/data/product/linux/plexus-ant-factory.md) | rocky 8 | 0:1.0-0.20.a2.2.module+el8.3.0+74+855e3f5d |
| [plexus-archiver](https://patchblox.com/security/data/product/linux/plexus-archiver.md) | rocky 8 | 0:3.6.0-1.module+el8.3.0+74+855e3f5d |
| [plexus-bsh-factory](https://patchblox.com/security/data/product/linux/plexus-bsh-factory.md) | rocky 8 | 0:1.0-0.19.a7.module+el8.3.0+74+855e3f5d |
| [plexus-build-api](https://patchblox.com/security/data/product/linux/plexus-build-api.md) | rocky 8 | 0:0.0.7-20.module+el8.3.0+74+855e3f5d |
| [plexus-cipher](https://patchblox.com/security/data/product/linux/plexus-cipher.md) | rocky 8 | 0:1.7-14.module+el8.6.0+843+5a13dac3 |
| [plexus-classworlds](https://patchblox.com/security/data/product/linux/plexus-classworlds.md) | rocky 8 | 0:2.5.2-9.module+el8.6.0+843+5a13dac3 |
| [plexus-cli](https://patchblox.com/security/data/product/linux/plexus-cli.md) | rocky 8 | 0:1.6-6.module+el8.3.0+74+855e3f5d |
| [plexus-compiler](https://patchblox.com/security/data/product/linux/plexus-compiler.md) | rocky 8 | 0:2.8.2-2.module+el8.3.0+74+855e3f5d |
| [plexus-component-api](https://patchblox.com/security/data/product/linux/plexus-component-api.md) | rocky 8 | 0:1.0-0.24.alpha15.module+el8.3.0+74+855e3f5d |
| [plexus-component-factories-pom](https://patchblox.com/security/data/product/linux/plexus-component-factories-pom.md) | rocky 8 | 0:1.0-0.15.alpha11.module+el8.3.0+74+855e3f5d |
| [plexus-components-pom](https://patchblox.com/security/data/product/linux/plexus-components-pom.md) | rocky 8 | 0:1.3.1-10.module+el8.3.0+74+855e3f5d |
| [plexus-containers](https://patchblox.com/security/data/product/linux/plexus-containers.md) | rocky 8 | 0:1.7.1-8.module+el8.6.0+843+5a13dac3 |
| [plexus-i18n](https://patchblox.com/security/data/product/linux/plexus-i18n.md) | rocky 8 | 0:1.0-0.11.b10.4.module+el8.3.0+74+855e3f5d |
| [plexus-interactivity](https://patchblox.com/security/data/product/linux/plexus-interactivity.md) | rocky 8 | 0:1.0-0.27.alpha6.module+el8.3.0+74+855e3f5d |
| [plexus-interpolation](https://patchblox.com/security/data/product/linux/plexus-interpolation.md) | rocky 8 | 0:1.22-9.module+el8.6.0+843+5a13dac3 |
| [plexus-io](https://patchblox.com/security/data/product/linux/plexus-io.md) | rocky 8 | 0:3.0.0-2.module+el8.3.0+74+855e3f5d |
| [plexus-languages](https://patchblox.com/security/data/product/linux/plexus-languages.md) | rocky 8 | 0:0.9.10-3.module+el8.3.0+74+855e3f5d |
| [plexus-pom](https://patchblox.com/security/data/product/linux/plexus-pom.md) | rocky 8 | 0:5.0-2.module+el8.3.0+74+855e3f5d |
| [plexus-resources](https://patchblox.com/security/data/product/linux/plexus-resources.md) | rocky 8 | 0:1.0-0.23.a7.module+el8.3.0+74+855e3f5d |
| [plexus-sec-dispatcher](https://patchblox.com/security/data/product/linux/plexus-sec-dispatcher.md) | rocky 8 | 0:1.4-26.module+el8.6.0+843+5a13dac3 |
| [plexus-utils](https://patchblox.com/security/data/product/linux/plexus-utils.md) | rocky 8 | 0:3.1.0-3.module+el8.6.0+843+5a13dac3 |
| [plexus-velocity](https://patchblox.com/security/data/product/linux/plexus-velocity.md) | rocky 8 | 0:1.2-4.module+el8.3.0+74+855e3f5d |
| [powermock](https://patchblox.com/security/data/product/linux/powermock.md) | rocky 8 | 0:1.6.5-9.module+el8.3.0+74+855e3f5d |
| [qdox](https://patchblox.com/security/data/product/linux/qdox.md) | rocky 8 | 0:2.0-3.M9.module+el8.10.0+2003+8aeac9cb |
| [regexp](https://patchblox.com/security/data/product/linux/regexp.md) | rocky 8 | 1:1.5-26.module+el8.3.0+74+855e3f5d |
| [sisu](https://patchblox.com/security/data/product/linux/sisu.md) | rocky 8 | 1:0.3.3-7.module+el8.10.0+2003+8aeac9cb |
| [sisu-mojos](https://patchblox.com/security/data/product/linux/sisu-mojos.md) | rocky 8 | 0:0.3.1-8.module+el8.3.0+74+855e3f5d |
| [slf4j](https://patchblox.com/security/data/product/linux/slf4j.md) | rocky 8 | 0:1.7.25-4.module+el8.10.0+2052+1b0fb438 |
| [sonatype-oss-parent](https://patchblox.com/security/data/product/linux/sonatype-oss-parent.md) | rocky 8 | 0:7-14.module+el8.3.0+74+855e3f5d |
| [sonatype-plugins-parent](https://patchblox.com/security/data/product/linux/sonatype-plugins-parent.md) | rocky 8 | 0:8-12.module+el8.3.0+74+855e3f5d |
| [spec-version-maven-plugin](https://patchblox.com/security/data/product/linux/spec-version-maven-plugin.md) | rocky 8 | 0:1.2-11.module+el8.3.0+74+855e3f5d |
| [spice-parent](https://patchblox.com/security/data/product/linux/spice-parent.md) | rocky 8 | 0:26-8.module+el8.3.0+74+855e3f5d |
| [testng](https://patchblox.com/security/data/product/linux/testng.md) | rocky 8 | 0:6.14.3-5.module+el8.3.0+74+855e3f5d |
| [velocity](https://patchblox.com/security/data/product/linux/velocity.md) | rocky 8 | 0:1.7-24.module+el8.10.0+2052+1b0fb438 |
| [weld-parent](https://patchblox.com/security/data/product/linux/weld-parent.md) | rocky 8 | 0:34-5.module+el8.3.0+74+855e3f5d |
| [xalan-j2](https://patchblox.com/security/data/product/linux/xalan-j2.md) | rocky 8 | 0:2.7.1-38.module+el8.10.0+1763+c7c02164 |
| [xbean](https://patchblox.com/security/data/product/linux/xbean.md) | rocky 8 | 0:4.8-1.module+el8.3.0+74+855e3f5d |
| [xerces-j2](https://patchblox.com/security/data/product/linux/xerces-j2.md) | rocky 8 | 0:2.11.0-34.module+el8.10.0+2052+1b0fb438 |
| [xml-commons-apis](https://patchblox.com/security/data/product/linux/xml-commons-apis.md) | rocky 8 | 0:1.4.01-25.module+el8.10.0+1763+c7c02164 |
| [xml-commons-resolver](https://patchblox.com/security/data/product/linux/xml-commons-resolver.md) | rocky 8 | 0:1.2-26.module+el8.10.0+1763+c7c02164 |
| [xmlunit](https://patchblox.com/security/data/product/linux/xmlunit.md) | rocky 8 | 0:1.6-7.module+el8.3.0+74+855e3f5d |
| [xmvn](https://patchblox.com/security/data/product/linux/xmvn.md) | rocky 8 | 0:3.0.0-21.module+el8.10.0+2003+8aeac9cb |
| [xz-java](https://patchblox.com/security/data/product/linux/xz-java.md) | rocky 8 | 0:1.8-2.module+el8.10.0+2003+8aeac9cb |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-67030](https://patchblox.com/security/data/cve/CVE-2025-67030.md) | High | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code | 8.8 | 0.0069 |  |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.