Linux · Rocky Linux · Security advisory · July 20, 2026

RLSA-2026:41948: Security update for 182 packages

RLSA-2026:41948, released July 20, 2026, fixes 1 CVE across 182 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0069
52nd percentile

Fixed package versions

ProductReleaseFixed in
antrocky 80:1.10.5-1.module+el8.3.0+74+855e3f5d
ant-contribrocky 80:1.0-0.32.b3.module+el8.3.0+74+855e3f5d
antlrrocky 80:2.7.7-56.module+el8.3.0+74+855e3f5d
aopalliancerocky 80:1.0-17.module+el8.6.0+843+5a13dac3
apache-commons-beanutilsrocky 80:1.9.3-5.module+el8.10.0+2003+8aeac9cb
apache-commons-clirocky 80:1.4-4.module+el8.6.0+843+5a13dac3
apache-commons-codecrocky 80:1.11-3.module+el8.6.0+843+5a13dac3
apache-commons-collectionsrocky 80:3.2.2-10.module+el8.10.0+2052+1b0fb438
apache-commons-compressrocky 80:1.18-1.module+el8.10.0+2003+8aeac9cb
apache-commons-execrocky 80:1.3-8.module+el8.3.0+74+855e3f5d
apache-commons-iorocky 81:2.6-3.module+el8.6.0+843+5a13dac3
apache-commons-jxpathrocky 80:1.3-29.module+el8.10.0+2003+8aeac9cb
apache-commons-langrocky 80:2.6-21.module+el8.10.0+1763+c7c02164
apache-commons-lang3rocky 80:3.7-3.module+el8.6.0+843+5a13dac3
apache-commons-loggingrocky 80:1.2-13.module+el8.3.0+133+b8b54b58
apache-commons-netrocky 80:3.6-3.module+el8.10.0+2052+1b0fb438
apache-commons-parentrocky 80:43-2.module+el8.3.0+74+855e3f5d
apache-ivyrocky 80:2.4.0-14.module+el8.3.0+74+855e3f5d
apache-parentrocky 80:19-2.module+el8.10.0+2003+8aeac9cb
apache-resource-bundlesrocky 80:2-20.module+el8.3.0+74+855e3f5d
aqute-bndrocky 80:3.5.0-4.module+el8.3.0+74+855e3f5d
assertj-corerocky 80:3.8.0-2.module+el8.3.0+74+855e3f5d
atinjectrocky 80:1-28.20100611svn86.module+el8.6.0+843+5a13dac3
bcelrocky 80:6.2-2.module+el8.3.0+74+855e3f5d
beust-jcommanderrocky 80:1.71-5.module+el8.3.0+74+855e3f5d
bsfrocky 80:2.4.0-30.module+el8.3.0+74+855e3f5d
bshrocky 80:2.0-13.b6.module+el8.3.0+74+855e3f5d
byaccjrocky 80:1.15-17.module+el8.3.0+74+855e3f5d
cal10nrocky 80:0.8.1-7.module+el8.3.0+74+855e3f5d
cdi-apirocky 80:1.2-8.module+el8.6.0+843+5a13dac3
cglibrocky 80:3.2.4-7.module+el8.3.0+74+855e3f5d
easymockrocky 80:3.5-4.module+el8.3.0+74+855e3f5d
exec-maven-pluginrocky 80:1.6.0-3.module+el8.3.0+74+855e3f5d
felix-osgi-compendiumrocky 80:1.4.0-26.module+el8.3.0+74+855e3f5d
felix-osgi-corerocky 80:1.4.0-23.module+el8.3.0+74+855e3f5d
felix-osgi-foundationrocky 80:1.2.0-23.module+el8.3.0+74+855e3f5d
felix-parentrocky 80:4-5.module+el8.3.0+74+855e3f5d
felix-utilsrocky 80:1.10.4-2.module+el8.3.0+74+855e3f5d
forge-parentrocky 80:38-11.module+el8.3.0+74+855e3f5d
fusesource-pomrocky 80:1.11-3.module+el8.3.0+74+855e3f5d
geronimo-annotationrocky 80:1.0-23.module+el8.6.0+843+5a13dac3
geronimo-jmsrocky 80:1.1.1-25.module+el8.3.0+74+855e3f5d
geronimo-jparocky 80:1.1.1-21.module+el8.3.0+74+855e3f5d
geronimo-parent-pomsrocky 80:1.6-25.module+el8.3.0+74+855e3f5d
glassfish-annotation-apirocky 80:1.2-13.module+el8.3.0+74+855e3f5d
glassfish-elrocky 80:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8
glassfish-jsp-apirocky 80:2.3.2-0.9.b01.module+el8.3.0+74+855e3f5d
glassfish-legalrocky 80:1.1-11.module+el8.3.0+74+855e3f5d
glassfish-master-pomrocky 80:8-11.module+el8.3.0+74+855e3f5d
glassfish-servlet-apirocky 80:3.1.0-14.module+el8.10.0+2003+8aeac9cb
google-guicerocky 80:4.1-11.module+el8.6.0+843+5a13dac3
guava20rocky 80:20.0-8.module+el8.3.0+133+b8b54b58
hamcrestrocky 80:1.3-23.module+el8.10.0+2003+8aeac9cb
hawtjnirocky 80:1.16-2.module+el8.3.0+133+b8b54b58
httpcomponents-clientrocky 80:4.5.5-4.module+el8.10.0+2003+8aeac9cb
httpcomponents-corerocky 80:4.4.10-4.module+el8.10.0+2003+8aeac9cb
httpcomponents-projectrocky 80:9-2.module+el8.3.0+74+855e3f5d
isorelaxrocky 81:0-0.23.release20050331.module+el8.3.0+74+855e3f5d
jakarta-commons-httpclientrocky 81:3.1-28.module+el8.10.0+1763+c7c02164
jakarta-ororocky 80:2.0.8-23.module+el8.3.0+74+855e3f5d
jansirocky 80:1.17.1-1.module+el8.3.0+74+855e3f5d
jansi-nativerocky 80:1.7-7.module+el8.3.0+133+b8b54b58
java_cuprocky 81:0.11b-8.module+el8.3.0+74+855e3f5d
javaccrocky 80:7.0.2-6.module+el8.3.0+74+855e3f5d
javacc-maven-pluginrocky 80:2.6-25.module+el8.3.0+74+855e3f5d
javamailrocky 80:1.5.2-7.module+el8.3.0+74+855e3f5d
javapackages-toolsrocky 80:5.3.0-2.module+el8.3.0+125+5da1ae29
javassistrocky 80:3.18.1-8.module+el8.10.0+2052+1b0fb438
jaxenrocky 80:1.1.6-18.module+el8.3.0+74+855e3f5d
jboss-interceptors-1.2-apirocky 80:1.0.0-8.module+el8.3.0+133+b8b54b58
jboss-parentrocky 80:20-4.module+el8.3.0+74+855e3f5d
jdependrocky 80:2.9.1-18.module+el8.3.0+74+855e3f5d
jdependencyrocky 80:1.2-2.module+el8.3.0+74+855e3f5d
jdomrocky 80:1.1.3-17.module+el8.3.0+74+855e3f5d
jdom2rocky 80:2.0.6-12.module+el8.3.0+74+855e3f5d
jflexrocky 80:1.6.1-12.module+el8.3.0+74+855e3f5d
jlinerocky 80:2.14.6-2.module+el8.3.0+241+f23502a8
jschrocky 80:0.1.54-6.module+el8.3.0+74+855e3f5d
jsouprocky 80:1.11.3-3.module+el8.6.0+843+5a13dac3
jsr-305rocky 80:0-0.22.20130910svn.module+el8.10.0+2003+8aeac9cb
jtidyrocky 82:1.0-0.28.20100930svn1125.module+el8.3.0+74+855e3f5d
junitrocky 81:4.12-9.module+el8.10.0+2003+8aeac9cb
jvnet-parentrocky 80:4-10.module+el8.3.0+74+855e3f5d
jzlibrocky 80:1.1.3-8.module+el8.3.0+74+855e3f5d
log4j12rocky 80:1.2.17-22.module+el8.3.0+74+855e3f5d
mavenrocky 81:3.5.4-5.module+el8.6.0+975+c0ed2db8
maven-antrun-pluginrocky 80:1.8-6.module+el8.3.0+74+855e3f5d
maven-archiverrocky 80:3.2.0-2.module+el8.3.0+74+855e3f5d
maven-artifact-resolverrocky 81:1.0-18.module+el8.3.0+74+855e3f5d
maven-artifact-transferrocky 81:0.9.0-4.module+el8.3.0+74+855e3f5d
maven-assembly-pluginrocky 80:3.1.0-3.module+el8.3.0+74+855e3f5d
maven-clean-pluginrocky 80:3.0.0-5.module+el8.3.0+74+855e3f5d
maven-common-artifact-filtersrocky 80:3.0.1-4.module+el8.3.0+74+855e3f5d
maven-compiler-pluginrocky 80:3.7.0-2.module+el8.3.0+74+855e3f5d
maven-dependency-analyzerrocky 80:1.8-2.module+el8.3.0+74+855e3f5d
maven-dependency-pluginrocky 80:3.0.2-2.module+el8.3.0+74+855e3f5d
maven-dependency-treerocky 80:3.0-5.module+el8.3.0+74+855e3f5d
maven-doxiarocky 80:1.7-8.module+el8.3.0+74+855e3f5d
maven-doxia-sitetoolsrocky 80:1.7.5-2.module+el8.3.0+74+855e3f5d
maven-enforcerrocky 80:1.4.1-8.module+el8.3.0+74+855e3f5d
maven-file-managementrocky 81:3.0.0-5.module+el8.3.0+74+855e3f5d
maven-filteringrocky 80:3.1.1-5.module+el8.3.0+74+855e3f5d
maven-install-pluginrocky 80:2.5.2-7.module+el8.3.0+74+855e3f5d
maven-invokerrocky 80:2.2-7.module+el8.3.0+74+855e3f5d
maven-invoker-pluginrocky 80:1.10-7.module+el8.3.0+74+855e3f5d
maven-jar-pluginrocky 80:3.1.0-1.module+el8.3.0+74+855e3f5d
maven-parentrocky 80:27-5.module+el8.3.0+74+855e3f5d
maven-plugin-build-helperrocky 80:1.9.1-8.module+el8.3.0+74+855e3f5d
maven-plugin-bundlerocky 80:3.5.0-2.module+el8.3.0+74+855e3f5d
maven-plugin-testingrocky 80:3.3.0-12.module+el8.3.0+74+855e3f5d
maven-plugin-toolsrocky 80:3.5.1-4.module+el8.3.0+74+855e3f5d
maven-plugins-pomrocky 80:28-7.module+el8.3.0+74+855e3f5d
maven-remote-resources-pluginrocky 80:1.5-2.module+el8.3.0+74+855e3f5d
maven-reporting-apirocky 81:3.0-14.module+el8.3.0+74+855e3f5d
maven-reporting-implrocky 80:3.0.0-4.module+el8.3.0+74+855e3f5d
maven-resolverrocky 81:1.1.1-2.module+el8.6.0+843+5a13dac3
maven-resources-pluginrocky 80:3.1.0-3.module+el8.3.0+74+855e3f5d
maven-script-interpreterrocky 80:1.1-11.module+el8.3.0+74+855e3f5d
maven-shade-pluginrocky 80:3.1.0-3.module+el8.3.0+74+855e3f5d
maven-sharedrocky 80:22-6.module+el8.3.0+74+855e3f5d
maven-shared-incrementalrocky 80:1.1-14.module+el8.3.0+74+855e3f5d
maven-shared-iorocky 81:3.0.0-5.module+el8.3.0+74+855e3f5d
maven-shared-utilsrocky 80:3.2.1-0.1.module+el8.10.0+2003+8aeac9cb
maven-source-pluginrocky 80:3.0.1-4.module+el8.3.0+74+855e3f5d
maven-surefirerocky 80:2.22.0-3.module+el8.3.0+74+855e3f5d
maven-verifierrocky 80:1.6-6.module+el8.3.0+74+855e3f5d
maven-wagonrocky 80:3.1.0-1.module+el8.6.0+843+5a13dac3
maven2rocky 80:2.2.1-59.module+el8.3.0+74+855e3f5d
mockitorocky 80:1.10.19-17.module+el8.3.0+74+855e3f5d
modellorocky 80:1.9.1-7.module+el8.3.0+74+855e3f5d
mojo-parentrocky 80:40-6.module+el8.3.0+74+855e3f5d
munge-maven-pluginrocky 80:1.0-11.module+el8.3.0+74+855e3f5d
objectweb-asmrocky 80:6.2-5.module+el8.10.0+2003+8aeac9cb
objectweb-pomrocky 80:1.5-7.module+el8.3.0+74+855e3f5d
objenesisrocky 80:2.6-2.module+el8.3.0+74+855e3f5d
os-maven-pluginrocky 80:1.2.3-9.module+el8.3.0+74+855e3f5d
osgi-annotationrocky 80:6.0.0-7.module+el8.3.0+74+855e3f5d
osgi-compendiumrocky 80:6.0.0-5.module+el8.3.0+74+855e3f5d
osgi-corerocky 80:6.0.0-6.module+el8.3.0+74+855e3f5d
plexus-ant-factoryrocky 80:1.0-0.20.a2.2.module+el8.3.0+74+855e3f5d
plexus-archiverrocky 80:3.6.0-1.module+el8.3.0+74+855e3f5d
plexus-bsh-factoryrocky 80:1.0-0.19.a7.module+el8.3.0+74+855e3f5d
plexus-build-apirocky 80:0.0.7-20.module+el8.3.0+74+855e3f5d
plexus-cipherrocky 80:1.7-14.module+el8.6.0+843+5a13dac3
plexus-classworldsrocky 80:2.5.2-9.module+el8.6.0+843+5a13dac3
plexus-clirocky 80:1.6-6.module+el8.3.0+74+855e3f5d
plexus-compilerrocky 80:2.8.2-2.module+el8.3.0+74+855e3f5d
plexus-component-apirocky 80:1.0-0.24.alpha15.module+el8.3.0+74+855e3f5d
plexus-component-factories-pomrocky 80:1.0-0.15.alpha11.module+el8.3.0+74+855e3f5d
plexus-components-pomrocky 80:1.3.1-10.module+el8.3.0+74+855e3f5d
plexus-containersrocky 80:1.7.1-8.module+el8.6.0+843+5a13dac3
plexus-i18nrocky 80:1.0-0.11.b10.4.module+el8.3.0+74+855e3f5d
plexus-interactivityrocky 80:1.0-0.27.alpha6.module+el8.3.0+74+855e3f5d
plexus-interpolationrocky 80:1.22-9.module+el8.6.0+843+5a13dac3
plexus-iorocky 80:3.0.0-2.module+el8.3.0+74+855e3f5d
plexus-languagesrocky 80:0.9.10-3.module+el8.3.0+74+855e3f5d
plexus-pomrocky 80:5.0-2.module+el8.3.0+74+855e3f5d
plexus-resourcesrocky 80:1.0-0.23.a7.module+el8.3.0+74+855e3f5d
plexus-sec-dispatcherrocky 80:1.4-26.module+el8.6.0+843+5a13dac3
plexus-utilsrocky 80:3.1.0-3.module+el8.6.0+843+5a13dac3
plexus-velocityrocky 80:1.2-4.module+el8.3.0+74+855e3f5d
powermockrocky 80:1.6.5-9.module+el8.3.0+74+855e3f5d
qdoxrocky 80:2.0-3.M9.module+el8.10.0+2003+8aeac9cb
regexprocky 81:1.5-26.module+el8.3.0+74+855e3f5d
sisurocky 81:0.3.3-7.module+el8.10.0+2003+8aeac9cb
sisu-mojosrocky 80:0.3.1-8.module+el8.3.0+74+855e3f5d
slf4jrocky 80:1.7.25-4.module+el8.10.0+2052+1b0fb438
sonatype-oss-parentrocky 80:7-14.module+el8.3.0+74+855e3f5d
sonatype-plugins-parentrocky 80:8-12.module+el8.3.0+74+855e3f5d
spec-version-maven-pluginrocky 80:1.2-11.module+el8.3.0+74+855e3f5d
spice-parentrocky 80:26-8.module+el8.3.0+74+855e3f5d
testngrocky 80:6.14.3-5.module+el8.3.0+74+855e3f5d
velocityrocky 80:1.7-24.module+el8.10.0+2052+1b0fb438
weld-parentrocky 80:34-5.module+el8.3.0+74+855e3f5d
xalan-j2rocky 80:2.7.1-38.module+el8.10.0+1763+c7c02164
xbeanrocky 80:4.8-1.module+el8.3.0+74+855e3f5d
xerces-j2rocky 80:2.11.0-34.module+el8.10.0+2052+1b0fb438
xml-commons-apisrocky 80:1.4.01-25.module+el8.10.0+1763+c7c02164
xml-commons-resolverrocky 80:1.2-26.module+el8.10.0+1763+c7c02164
xmlunitrocky 80:1.6-7.module+el8.3.0+74+855e3f5d
xmvnrocky 80:3.0.0-21.module+el8.10.0+2003+8aeac9cb
xz-javarocky 80:1.8-2.module+el8.10.0+2003+8aeac9cb

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code8.8 0.0069 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.