Linux · Security advisory · May 17, 2022
ELSA-2022-1860: Security update for 32 packages
ELSA-2022-1860, released May 17, 2022, fixes 1 CVE across 32 products. None of them is reported as exploited. Patch Radar priority: Routine.
Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0903
95th percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| aopalliance | ol 8 | 0:1.0-20.module+el8.6.0+20615+edd0bff8 |
| apache-commons-cli | ol 8 | 0:1.4-7.module+el8.6.0+20615+edd0bff8 |
| apache-commons-codec | ol 8 | 0:1.13-3.module+el8.6.0+20615+edd0bff8 |
| apache-commons-io | ol 8 | 1:2.6-6.module+el8.6.0+20615+edd0bff8 |
| apache-commons-lang3 | ol 8 | 0:3.9-4.module+el8.6.0+20615+edd0bff8 |
| atinject | ol 8 | 0:1-31.20100611svn86.module+el8.6.0+20615+edd0bff8 |
| cdi-api | ol 8 | 0:2.0.1-3.module+el8.6.0+20615+edd0bff8 |
| geronimo-annotation | ol 8 | 0:1.0-26.module+el8.6.0+20615+edd0bff8 |
| google-guice | ol 8 | 0:4.2.2-4.module+el8.6.0+20615+edd0bff8 |
| guava | ol 8 | 0:28.1-3.module+el8.6.0+20615+edd0bff8 |
| httpcomponents-client | ol 8 | 0:4.5.10-4.module+el8.6.0+20615+edd0bff8 |
| httpcomponents-core | ol 8 | 0:4.4.12-3.module+el8.6.0+20615+edd0bff8 |
| jansi | ol 8 | 0:1.18-4.module+el8.6.0+20615+edd0bff8 |
| jcl-over-slf4j | ol 8 | 0:1.7.28-3.module+el8.6.0+20615+edd0bff8 |
| jsoup | ol 8 | 0:1.12.1-3.module+el8.6.0+20615+edd0bff8 |
| jsr-305 | ol 8 | 0:0-0.25.20130910svn.module+el8.6.0+20615+edd0bff8 |
| maven | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-lib | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-openjdk11 | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-openjdk17 | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-openjdk8 | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-resolver | ol 8 | 0:1.4.1-3.module+el8.6.0+20615+edd0bff8 |
| maven-shared-utils | ol 8 | 0:3.2.1-0.4.module+el8.6.0+20615+edd0bff8 |
| maven-wagon | ol 8 | 0:3.3.4-2.module+el8.6.0+20615+edd0bff8 |
| plexus-cipher | ol 8 | 0:1.7-17.module+el8.6.0+20615+edd0bff8 |
| plexus-classworlds | ol 8 | 0:2.6.0-4.module+el8.6.0+20615+edd0bff8 |
| plexus-containers-component-annotations | ol 8 | 0:2.1.0-2.module+el8.6.0+20615+edd0bff8 |
| plexus-interpolation | ol 8 | 0:1.26-3.module+el8.6.0+20615+edd0bff8 |
| plexus-sec-dispatcher | ol 8 | 0:1.4-29.module+el8.6.0+20615+edd0bff8 |
| plexus-utils | ol 8 | 0:3.3.0-3.module+el8.6.0+20615+edd0bff8 |
| sisu | ol 8 | 0:0.3.4-2.module+el8.6.0+20615+edd0bff8 |
| slf4j | ol 8 | 0:1.7.28-3.module+el8.6.0+20615+edd0bff8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2020-13956 | httpcomponents-client: This update for httpcomponents-client, httpcomponents-core fixes the following issues: httpcomponents-client: - Up... | 5.3 | 0.0903 | None reported |
Showing 1 to 1 of 1
1