Skip to content
OpenAdvisories
Critical RHSA-2018:0582 1 CVE

Red Hat Security Advisory: rh-maven35-slf4j security update

Published Sep 13, 2024 · Updated Aug 9, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-jcl-over-slf4j 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-jul-to-slf4j 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-log4j-over-slf4j 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-ext 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-javadoc 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-jcl 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-jdk14 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-log4j12 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-manual 0:1.7.25-1.3.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-maven35-slf4j-sources 0:1.7.25-1.3.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-8088 EPSS 15%

    Improper Access Control in SLF4J

    org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 late…

    org.slf4j:slf4j-ext libslf4j-java Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1548909
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0582.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-8088
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-8088
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-8088