Linux · Security advisory · June 1, 2022
ELSA-2022-4797: Security update for 32 packages
ELSA-2022-4797, released June 1, 2022, fixes 1 CVE across 32 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0442
91st percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| aopalliance | ol 8 | 0:1.0-20.module+el8.6.0+20615+edd0bff8 |
| apache-commons-cli | ol 8 | 0:1.4-7.module+el8.6.0+20615+edd0bff8 |
| apache-commons-codec | ol 8 | 0:1.13-3.module+el8.6.0+20615+edd0bff8 |
| apache-commons-io | ol 8 | 1:2.6-6.module+el8.6.0+20615+edd0bff8 |
| apache-commons-lang3 | ol 8 | 0:3.9-4.module+el8.6.0+20615+edd0bff8 |
| atinject | ol 8 | 0:1-31.20100611svn86.module+el8.6.0+20615+edd0bff8 |
| cdi-api | ol 8 | 0:2.0.1-3.module+el8.6.0+20615+edd0bff8 |
| geronimo-annotation | ol 8 | 0:1.0-26.module+el8.6.0+20615+edd0bff8 |
| google-guice | ol 8 | 0:4.2.2-4.module+el8.6.0+20615+edd0bff8 |
| guava | ol 8 | 0:28.1-3.module+el8.6.0+20615+edd0bff8 |
| httpcomponents-client | ol 8 | 0:4.5.10-4.module+el8.6.0+20615+edd0bff8 |
| httpcomponents-core | ol 8 | 0:4.4.12-3.module+el8.6.0+20615+edd0bff8 |
| jansi | ol 8 | 0:1.18-4.module+el8.6.0+20615+edd0bff8 |
| jcl-over-slf4j | ol 8 | 0:1.7.28-3.module+el8.6.0+20615+edd0bff8 |
| jsoup | ol 8 | 0:1.12.1-3.module+el8.6.0+20615+edd0bff8 |
| jsr-305 | ol 8 | 0:0-0.25.20130910svn.module+el8.6.0+20615+edd0bff8 |
| maven | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-lib | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-openjdk11 | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-openjdk17 | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-openjdk8 | ol 8 | 1:3.6.2-7.module+el8.6.0+20615+edd0bff8 |
| maven-resolver | ol 8 | 0:1.4.1-3.module+el8.6.0+20615+edd0bff8 |
| maven-shared-utils | ol 8 | 0:3.2.1-0.4.module+el8.6.0+20675+b1cf145f |
| maven-wagon | ol 8 | 0:3.3.4-2.module+el8.6.0+20615+edd0bff8 |
| plexus-cipher | ol 8 | 0:1.7-17.module+el8.6.0+20615+edd0bff8 |
| plexus-classworlds | ol 8 | 0:2.6.0-4.module+el8.6.0+20615+edd0bff8 |
| plexus-containers-component-annotations | ol 8 | 0:2.1.0-2.module+el8.6.0+20615+edd0bff8 |
| plexus-interpolation | ol 8 | 0:1.26-3.module+el8.6.0+20615+edd0bff8 |
| plexus-sec-dispatcher | ol 8 | 0:1.4-29.module+el8.6.0+20615+edd0bff8 |
| plexus-utils | ol 8 | 0:3.3.0-3.module+el8.6.0+20615+edd0bff8 |
| sisu | ol 8 | 0:0.3.4-2.module+el8.6.0+20615+edd0bff8 |
| slf4j | ol 8 | 0:1.7.28-3.module+el8.6.0+20615+edd0bff8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-29599 | libmaven-shared-utils-java: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings witho... | 9.8 | 0.0442 | None reported |
Showing 1 to 1 of 1
1