Fixed packages 48
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | aopalliance | 0:1.0-17.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | apache-commons-cli | 0:1.4-4.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | apache-commons-codec | 0:1.11-3.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | apache-commons-io | 1:2.6-3.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | apache-commons-lang3 | 0:3.7-3.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | apache-commons-logging | 0:1.2-13.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | atinject | 0:1-28.20100611svn86.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | cdi-api | 0:1.2-8.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | geronimo-annotation | 0:1.0-23.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | glassfish-el | 0:3.0.1-0.7.b08.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | glassfish-el-api | 0:3.0.1-0.7.b08.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | google-guice | 0:4.1-11.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | guava20 | 0:20.0-8.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | hawtjni | 0:1.16-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | hawtjni-runtime | 0:1.16-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | httpcomponents-client | 0:4.5.5-4.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | httpcomponents-core | 0:4.4.10-3.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | jansi | 0:1.17.1-1.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | jansi-native | 0:1.7-7.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | jboss-interceptors-1.2-api | 0:1.0.0-8.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | jcl-over-slf4j | 0:1.7.25-4.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | jsoup | 0:1.11.3-3.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven | 1:3.5.4-5.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-lib | 1:3.5.4-5.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver-api | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver-connector-basic | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver-impl | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver-spi | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver-transport-wagon | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-resolver-util | 1:1.1.1-2.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-shared-utils | 0:3.2.1-0.2.module+el8.1.0+15171+4eab2c6b |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-wagon | 0:3.1.0-1.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-wagon-file | 0:3.1.0-1.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-wagon-http | 0:3.1.0-1.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-wagon-http-shared | 0:3.1.0-1.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | maven-wagon-provider-api | 0:3.1.0-1.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-cipher | 0:1.7-14.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-classworlds | 0:2.5.2-9.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-containers | 0:1.7.1-8.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-containers-component-annotations | 0:1.7.1-8.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-interpolation | 0:1.22-9.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-sec-dispatcher | 0:1.4-26.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | plexus-utils | 0:3.1.0-3.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | sisu | 1:0.3.3-6.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | sisu-inject | 1:0.3.3-6.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | sisu-plexus | 1:0.3.3-6.module+el8+2452+b359bfcd |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | slf4j | 0:1.7.25-4.module+el8+2452+b359bfcd |
Vulnerabilities 1
-
Critical 9.8
Commandline class shell injection vulnerabilities
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066479
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4699.json
-
report
https://access.redhat.com/security/cve/CVE-2022-29599
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-29599
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-29599