Skip to content
OpenAdvisories
High ELSA-2026-40841 1 CVE

Important: maven:3.8 security update (Oracle Linux 8)

Published Jul 20, 2026 · Updated Jul 20, 2026

Summary

apache-commons-cli
[1.5.0-5]
- Rebuild to regenerate auto-requires

[1.5.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1.5.0-3]
- Rebuilt for java-17-openjdk as system jdk

[1.5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1.5.0-1]
- Update to upstream version 1.5.0

[1.4-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.4-13]
- Bootstrap build
- Non-bootstrap build

[1.4-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.4-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.4-10]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

apache-commons-codec
[1.15-8]
- Rebuild to regenerate auto-requires

[1.15-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1.15-6]
- Rebuilt for java-17-openjdk as system jdk

[1.15-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1.15-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.15-3]
- Bootstrap build
- Non-bootstrap build

[1.15-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.15-1]
- Update to upstream version 1.15

[1.15-1]
- Update to latest upstream release

[1.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

apache-commons-io
[1:2.11.0-3]
- Rebuild to regenerate auto-requires

[1:2.11.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1:2.11.0-1]
- Update to upstream version 2.11.0

[1:2.8.0-7]
- Rebuilt for java-17-openjdk as system jdk

[1:2.8.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1:2.8.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1:2.8.0-4]
- Bootstrap build
- Non-bootstrap build

[1:2.8.0-3]
- Add patch to fix Files.size() failing when symlink target is non-existant

[1:2.8.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1:2.8.0-1]
- Update to version 2.8.0.

apache-commons-lang3
[3.12.0-8]
- Rebuild to regenerate auto-requires

[3.12.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[3.12.0-6]
- Workaround build issue with RPM 4.18

[3.12.0-5]
- Rebuilt for java-17-openjdk as system jdk

[3.12.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[3.12.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[3.12.0-2]
- Bootstrap build
- Non-bootstrap build

[3.12.0-1]
- Update to upstream version 3.12.0

[3.11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.11-1]
- Update to version 3.11.
- Fixes RHBZ#1699692

atinject
[1.0.5-5]
- Rebuild to regenerate auto-requires

[1.0.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1.0.5-3]
- Rebuilt for java-17-openjdk as system jdk

[1.0.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1.0.5-1]
- Update to upstream version 1.0.5

[1.0.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.0.3-2]
- Bootstrap build
- Non-bootstrap build

[1-36.20100611svn86]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.3-1]
- Update to upstream version 1.0.3

[1-35.20100611svn86]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

cdi-api
[2.0.2-7]
- Rebuild to regenerate auto-requires

[2.0.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[2.0.2-5]
- Rebuilt for java-17-openjdk as system jdk

[2.0.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[2.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2.0.2-2]
- Bootstrap build
- Non-bootstrap build

[2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.0-1]
- Update to version 2.0.

[1.2-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.2-13]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

google-guice
[4.2.3-10]
- Rebuild to regenerate auto-requires

[4.2.3-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[4.2.3-8]
- Rebuilt for java-17-openjdk as system jdk

[4.2.3-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[4.2.3-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[4.2.3-5]
- Bump release

[4.2.3-2]
- Bootstrap build
- Non-bootstrap build

[4.2.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[4.2.3-1]
- Update to upstream version 4.2.3

[4.2.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

guava
[31.0.1-5]
- Rebuild to regenerate auto-requires

[31.0.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[31.0.1-3]
- Rebuilt for java-17-openjdk as system jdk

[31.0.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[31.0.1-1]
- Update to 31.0.1

[30.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[30.1-2]
- Bootstrap build
- Non-bootstrap build

[25.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[30.1-1]
- Update to upstream version 30.1

[29.0-1]
- Update to upstream version 29.0

httpcomponents-client
[4.5.13-6]
- Rebuild to regenerate auto-requires

[4.5.13-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[4.5.13-4]
- Rebuilt for java-17-openjdk as system jdk

[4.5.13-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[4.5.13-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[4.5.13-1]
- Update to upstream version 4.5.13

[4.5.11-3]
- Bootstrap build
- Non-bootstrap build

[4.5.10-6]
- Build with -release 8 for better OpenJDK 8 compatibility.

[4.5.10-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[4.5.10-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

httpcomponents-core
[4.4.13-8]
- Rebuil

Fixed packages 31

ReleasePackageFixed in
Oracle Linux · 8 apache-commons-cli 0:1.5.0-5.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 apache-commons-codec 0:1.15-8.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 apache-commons-io 1:2.11.0-3.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 apache-commons-lang3 0:3.12.0-8.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 atinject 0:1.0.5-5.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 cdi-api 0:2.0.2-7.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 google-guice 0:4.2.3-10.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 guava 0:31.0.1-5.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 httpcomponents-client 0:4.5.13-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 httpcomponents-core 0:4.4.13-8.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 jakarta-annotations 0:1.3.5-15.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 jansi 0:2.4.0-7.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 jcl-over-slf4j 0:1.7.32-5.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 jsr-305 0:3.0.2-7.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven 1:3.8.5-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-lib 1:3.8.5-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-openjdk11 1:3.8.5-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-openjdk17 1:3.8.5-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-openjdk21 1:3.8.5-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-openjdk8 1:3.8.5-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-resolver 1:1.7.3-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-shared-utils 0:3.3.4-6.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 maven-wagon 0:3.5.1-3.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 plexus-cipher 0:2.0-3.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 plexus-classworlds 0:2.6.0-13.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 plexus-containers-component-annotations 0:2.1.1-3.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 plexus-interpolation 0:1.26-13.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 plexus-sec-dispatcher 0:2.0-5.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 plexus-utils 0:3.3.0-11.module+el8.10.0+90966+8bcb551f.1
Oracle Linux · 8 sisu 1:0.3.5-3.module+el8.10.0+90966+8bcb551f
Oracle Linux · 8 slf4j 0:1.7.32-5.module+el8.10.0+90966+8bcb551f

Vulnerabilities 1