Linux · Security advisory · May 10, 2022

RLSA-2022:1861: Security update for 31 packages

RLSA-2022:1861, released May 10, 2022, fixes 1 CVE across 31 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0903
95th percentile

Fixed package versions

ProductReleaseFixed in
aopalliancerocky 80:1.0-17.module+el8.6.0+843+5a13dac3
apache-commons-clirocky 80:1.4-4.module+el8.6.0+843+5a13dac3
apache-commons-codecrocky 80:1.11-3.module+el8.6.0+843+5a13dac3
apache-commons-iorocky 81:2.6-3.module+el8.6.0+843+5a13dac3
apache-commons-lang3rocky 80:3.7-3.module+el8.6.0+843+5a13dac3
apache-commons-loggingrocky 80:1.2-13.module+el8.3.0+133+b8b54b58
atinjectrocky 80:1-28.20100611svn86.module+el8.6.0+843+5a13dac3
cdi-apirocky 80:1.2-8.module+el8.6.0+843+5a13dac3
geronimo-annotationrocky 80:1.0-23.module+el8.6.0+843+5a13dac3
glassfish-elrocky 80:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8
google-guicerocky 80:4.1-11.module+el8.6.0+843+5a13dac3
guava20rocky 80:20.0-8.module+el8.3.0+133+b8b54b58
hawtjnirocky 80:1.16-2.module+el8.3.0+133+b8b54b58
httpcomponents-clientrocky 80:4.5.5-5.module+el8.6.0+843+5a13dac3
httpcomponents-corerocky 80:4.4.10-3.module+el8.6.0+843+5a13dac3
jansirocky 80:1.17.1-1.module+el8.3.0+241+f23502a8
jansi-nativerocky 80:1.7-7.module+el8.3.0+133+b8b54b58
jboss-interceptors-1.2-apirocky 80:1.0.0-8.module+el8.3.0+133+b8b54b58
jsouprocky 80:1.11.3-3.module+el8.6.0+843+5a13dac3
mavenrocky 81:3.5.4-5.module+el8.6.0+975+c0ed2db8
maven-resolverrocky 81:1.1.1-2.module+el8.6.0+843+5a13dac3
maven-shared-utilsrocky 80:3.2.1-0.1.module+el8.3.0+74+855e3f5d
maven-wagonrocky 80:3.1.0-1.module+el8.6.0+843+5a13dac3
plexus-cipherrocky 80:1.7-14.module+el8.6.0+843+5a13dac3
plexus-classworldsrocky 80:2.5.2-9.module+el8.6.0+843+5a13dac3
plexus-containersrocky 80:1.7.1-8.module+el8.6.0+843+5a13dac3
plexus-interpolationrocky 80:1.22-9.module+el8.6.0+843+5a13dac3
plexus-sec-dispatcherrocky 80:1.4-26.module+el8.6.0+843+5a13dac3
plexus-utilsrocky 80:3.1.0-3.module+el8.6.0+843+5a13dac3
sisurocky 81:0.3.3-6.module+el8.6.0+843+5a13dac3
slf4jrocky 80:1.7.25-4.module+el8.5.0+697+f586bb30

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2020-13956 httpcomponents-client: This update for httpcomponents-client, httpcomponents-core fixes the following issues: httpcomponents-client: - Up... 5.3 0.0903 None reported
Showing 1 to 1 of 1 1