Red Hat Security Advisory: OpenShift Container Platform 4.9.55 security update

Fixed packages 1

Vulnerabilities 1

• Critical 9.8
  CVE-2022-29599

  Commandline class shell injection vulnerabilities

  In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

  Apache Software Foundation Apache Maven maven-shared-utils org.apache.maven.shared:maven-shared-utils Debian Ubuntu Maven
  May 23, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2066479
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0573.json
• report
  https://access.redhat.com/security/cve/CVE-2022-29599
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29599
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29599