Skip to content
OpenAdvisories
High ELSA-2026-38500 1 CVE

Important: maven:3.9 security update (Oracle Linux 9)

Published Jul 15, 2026 · Updated Jul 15, 2026

Summary

aopalliance
[0:1.0-49]
- Update javapackages test plan to f42

[0:1.0-40]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[0:1.0-39]
- Rebuilt for java-21-openjdk as system jdk

[0:1.0-38]
- bump of release for for java-21-openjdk as system jdk

[0:1.0-37]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[0:1.0-36]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[0:1.0-35]
- Rebuild to regenerate auto-Requires on java

[0:1.0-34]
- Convert License tag to SPDX format

[0:1.0-33]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[0:1.0-32]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

apache-commons-cli
[1.9.0-3]
- Update javapackages test plan to f42

[1.9.0-2]
- Use %autosetup -C

[1.9.0-1]
- Update to upstream version 1.9.0
- Resolves: rhbz#2305042

[1.8.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[1.8.0-1]
- Update to upstream version 1.8.0

[1.6.0-5]
- Rebuilt for java-21-openjdk as system jdk

[1.6.0-4]
- bump of release for for java-21-openjdk as system jdk

[1.6.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.6.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.6.0-1]
- Update to upstream version 1.6.0

apache-commons-codec
[1.17.1-7]
- Update javapackages test plan to f42

[1.17.1-6]
- Use %autosetup -C

[1.17.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[1.17.1-1]
- Update to upstream version 1.17.1

[1.16.1-1]
- Update to upstream version 1.16.1

[1.16.0-7]
- Rebuilt for java-21-openjdk as system jdk

[1.16.0-6]
- bump of release for for java-21-openjdk as system jdk

[1.16.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.16.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.16.0-3]
- Rebuild to regenerate auto-Requires on java

apache-commons-io
[1:2.16.1-7]
- Update javapackages test plan to f42

[1:2.16.1-6]
- Use %autosetup -C

[1:2.16.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[1:2.16.1-1]
- Update to upstream version 2.16.1

[1:2.13.0-8]
- Rebuilt for java-21-openjdk as system jdk

[1:2.13.0-7]
- bump of release for for java-21-openjdk as system jdk

[1:2.13.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.13.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1:2.13.0-4]
- Rebuild to regenerate auto-Requires on java

[1:2.13.0-3]
- Rebuild

atinject
[1.0.5-14]
- Sync with Fedora

[1.0.5-13]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018

[1.0.5-12]
- Bump release for Aug 2024 java mass rebuild

[1.0.5-11]
- Bump release for June 2024 mass rebuild

[1.0.5-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.0.5-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.0.5-8]
- Rebuild to regenerate auto-Requires on java

[1.0.5-7]
- Convert License tag to SPDX format

[1.0.5-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.0.5-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

google-guice
[5.1.0-20]
- Update javapackages test plan to f42

[5.1.0-13]
- Drop unneeded Obsoletes

[5.1.0-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[5.1.0-11]
- Rebuilt for java-21-openjdk as system jdk

[5.1.0-10]
- bump of release for for java-21-openjdk as system jdk

[5.1.0-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[5.1.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[5.1.0-7]
- Rebuild to regenerate auto-Requires on java

[5.1.0-6]
- Convert License tag to SPDX format

[5.1.0-5]
- Build with Jurand instead of deprecated javapackages-extra

guava
[33.3.0-3]
- Update javapackages test plan to f42

[33.3.0-1]
- Update to upstream version 33.3.0

[33.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[33.2.1-1]
- Update to upstream version 33.2.1

[32.1.3-5]
- Rebuilt for java-21-openjdk as system jdk

[32.1.3-4]
- bump of release for for java-21-openjdk as system jdk

[32.1.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[32.1.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[32.1.3-1]
- Update to upstream version 32.1.3

[31.1-8]
- Rebuild to regenerate auto-Requires on java

httpcomponents-client
[4.5.14-18]
- Update javapackages test plan to f42

[4.5.14-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[4.5.14-8]
- Rebuilt for java-21-openjdk as system jdk

[4.5.14-7]
- bump of release for for java-21-openjdk as system jdk

[4.5.14-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[4.5.14-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[4.5.14-4]
- Port to Mockito 5

[4.5.14-3]
- Rebuild to regenerate auto-Requires on java

[4.5.14-2]
- Convert License tag to SPDX format

[4.5.14-1]
- Update to upstream version 4.5.14

httpcomponents-core
[4.4.16-18]
- Disable tests failing without networking

[4.4.16-17]
- Update javapackages test plan to f42

[4.4.16-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[4.4.16-8]
- Rebuilt for java-21-openjdk as system jdk

[4.4.16-7]
- Port to OpenJDK 21

[4.4.16-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[4.4.16-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[4.4.16-4]
- Port to Mockito 5

[4.4.16-3]
- Rebuild to regenerate auto-Requires on java

[4.4.16-2]
- Convert License tag to SPDX format

jakarta-annotations
[1.3.5-36]
- Update javapackages test plan to f42

[1.3.5-24]
- Switch to new GitHub repository

[1.3.5-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[1.3.5-22]
- Rebuilt for java-21-openjdk as system jdk

[1.3.5-21]
- bump of release for for java-21-openjdk as sys

Fixed packages 32

ReleasePackageFixed in
Oracle Linux · 9 aopalliance 0:1.0-51.module+el9.8.0+90959+95248a69
Oracle Linux · 9 apache-commons-cli 0:1.9.0-4.module+el9.8.0+90959+95248a69
Oracle Linux · 9 apache-commons-codec 0:1.17.1-8.module+el9.8.0+90959+95248a69
Oracle Linux · 9 apache-commons-io 1:2.16.1-9.module+el9.8.0+90959+95248a69
Oracle Linux · 9 atinject 0:1.0.5-14.module+el9.8.0+90959+95248a69
Oracle Linux · 9 google-guice 0:5.1.0-23.module+el9.8.0+90959+95248a69
Oracle Linux · 9 guava 0:33.3.0-5.module+el9.8.0+90959+95248a69
Oracle Linux · 9 httpcomponents-client 0:4.5.14-21.module+el9.8.0+90959+95248a69
Oracle Linux · 9 httpcomponents-core 0:4.4.16-21.module+el9.8.0+90959+95248a69
Oracle Linux · 9 jakarta-annotations 0:1.3.5-38.module+el9.8.0+90959+95248a69
Oracle Linux · 9 jansi 0:2.4.1-12.module+el9.8.0+90959+95248a69
Oracle Linux · 9 jcl-over-slf4j 0:1.7.36-9.module+el9.8.0+90959+95248a69
Oracle Linux · 9 jsr-305 0:3.0.2-36.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-lib 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-openjdk11 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-openjdk17 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-openjdk21 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-openjdk25 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-openjdk8 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-resolver 1:1.9.22-6.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-shared-utils 0:3.4.2-19.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-unbound 1:3.9.9-13.module+el9.8.0+90959+95248a69
Oracle Linux · 9 maven-wagon 0:3.5.3-17.module+el9.8.0+90959+95248a69
Oracle Linux · 9 plexus-cipher 0:2.0-25.module+el9.8.0+90959+95248a69
Oracle Linux · 9 plexus-classworlds 0:2.8.0-9.module+el9.8.0+90959+95248a69
Oracle Linux · 9 plexus-containers-component-annotations 0:2.2.0-10.module+el9.8.0+90959+95248a69
Oracle Linux · 9 plexus-interpolation 0:1.27-10.module+el9.8.0+90959+95248a69
Oracle Linux · 9 plexus-sec-dispatcher 0:2.0-28.module+el9.8.0+90959+95248a69
Oracle Linux · 9 plexus-utils 0:3.5.1-17.module+el9.8.0+90959+95248a69
Oracle Linux · 9 sisu 1:0.9.0~M3-7.module+el9.8.0+90959+95248a69
Oracle Linux · 9 slf4j 0:1.7.36-9.module+el9.8.0+90959+95248a69

Vulnerabilities 1