Description
Improper Access Control vulnerability in Apache Commons.
A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default.
Releases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().
Starting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests.
This issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils
1.x are recommended to upgrade to version 1.11.0, which fixes the issue.
Users of the artifact org.apache.commons:commons-beanutils2
2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Commons BeanUtils 1.x | 1.0 – < 1.11.0 | 1.11.0 |
| Apache Software Foundation | Apache Commons BeanUtils 2.x | 2.0.0-M1 – < 2.0.0-M2 | 2.0.0-M2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | commons-beanutils | 1.10.1-1.1 | — |
| Debian 13 | commons-beanutils | 1.10.1-1.1 | — |
| Debian 12 | commons-beanutils | 1.9.4-1+deb12u1 | — |
| Debian 11 | commons-beanutils | 1.9.4-1+deb11u1 | DLA-4229-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | commons-beanutils | 1.9.4-1+deb11u1build0.22.04.1 | USN-8322-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | commons-beanutils | 1.9.4-2ubuntu0.1~esm1 | USN-8322-1 |
| Ubuntu Pro 20.04 LTS | commons-beanutils | 1.9.4-1ubuntu0.20.04.1~esm1 | USN-8322-1 |
| Ubuntu Pro 18.04 LTS | commons-beanutils | 1.9.3-1ubuntu0.1~esm2 | USN-8322-1 |
| Ubuntu Pro 16.04 LTS | commons-beanutils | 1.9.2-3ubuntu0.1~esm1 | USN-8322-1 |
| Ubuntu Pro 14.04 LTS | commons-beanutils | 1.9.1-1ubuntu0.1~esm2 | USN-8322-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | apache-commons-beanutils +1 | 1.9.4-21.el10_0 | RHSA-2025:9166 |
| RHEL 9 | apache-commons-beanutils | 1.9.4-10.el9_6 | RHSA-2025:9114 |
| RHEL 8 | ant +21 | 1.10.5-1.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | ant-contrib +1 | 1.0-0.32.b3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | antlr +4 | 2.7.7-56.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | aopalliance +1 | 1.0-17.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-beanutils +1 | 1.9.3-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-cli +1 | 1.4-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-collections +2 | 3.2.2-10.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-compress +1 | 1.18-1.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-exec +1 | 1.3-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-io +1 | 1:2.6-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-jxpath +1 | 1.3-29.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-lang +1 | 2.6-21.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-lang3 +1 | 3.7-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-logging +3 | 1.2-13.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-net +1 | 3.6-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-commons-parent | 43-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-ivy +1 | 2.4.0-14.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-parent | 19-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | apache-resource-bundles | 2-20.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | aqute-bnd +3 | 3.5.0-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | assertj-core +1 | 3.8.0-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | atinject +2 | 1-28.20100611svn86.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | bcel +1 | 6.2-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | beust-jcommander +1 | 1.71-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | bsf +1 | 2.4.0-30.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | bsh +2 | 2.0-13.b6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | byaccj | 1.15-17.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | cal10n +2 | 0.8.1-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | cdi-api +1 | 1.2-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | cglib +1 | 3.2.4-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | easymock +1 | 3.5-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | exec-maven-plugin +1 | 1.6.0-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | felix-osgi-compendium +1 | 1.4.0-26.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | felix-osgi-core +1 | 1.4.0-23.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | felix-osgi-foundation +1 | 1.2.0-23.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | felix-parent | 4-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | felix-utils +1 | 1.10.4-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | forge-parent | 38-11.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | fusesource-pom +2 | 1.11-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | geronimo-annotation +1 | 1.0-23.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | geronimo-jms +1 | 1.1.1-25.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | geronimo-jpa +1 | 1.1.1-21.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | geronimo-parent-poms | 1.6-25.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | glassfish-el +2 | 3.0.1-0.7.b08.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | glassfish-jsp-api +1 | 2.3.2-0.9.b01.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | glassfish-legal +2 | 1.1-11.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | glassfish-master-pom | 8-11.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | glassfish-servlet-api +1 | 3.1.0-14.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | guava20 +2 | 20.0-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | guice-bom +12 | 4.1-11.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | hamcrest +3 | 1.3-23.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | hawtjni +3 | 1.16-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | httpcomponents-client +2 | 4.5.5-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | httpcomponents-core +1 | 4.4.10-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | httpcomponents-project | 9-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | isorelax +1 | 1:0-0.23.release20050331.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | ivy-local +4 | 5.3.0-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jakarta-commons-httpclient +3 | 1:3.1-28.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jakarta-oro +1 | 2.0.8-23.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jansi +1 | 1.17.1-1.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jansi-native +1 | 1.7-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | java_cup +2 | 1:0.11b-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | javacc +3 | 7.0.2-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | javacc-maven-plugin +1 | 2.6-25.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | javamail +1 | 1.5.2-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | javassist +1 | 3.18.1-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jaxen +2 | 1.1.6-18.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jboss-interceptors-1.2-api +1 | 1.0.0-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jboss-parent | 20-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jdepend +2 | 2.9.1-18.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jdependency +1 | 1.2-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jdom +2 | 1.1.3-17.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jdom2 +1 | 2.0.6-12.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jflex +1 | 1.6.1-12.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jline +1 | 2.14.6-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jsch +1 | 0.1.54-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jsoup +1 | 1.11.3-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jsr-305 +1 | 0-0.22.20130910svn.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jtidy +1 | 2:1.0-0.28.20100930svn1125.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jul-to-slf4j +2 | 1.7.25-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | junit +2 | 1:4.12-9.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jvnet-parent | 4-10.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | jzlib +2 | 1.1.3-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | log4j12 +1 | 1.2.17-22.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven +2 | 1:3.5.4-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-antrun-plugin +1 | 1.8-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-archiver +1 | 3.2.0-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-artifact-resolver +1 | 1:1.0-18.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-artifact-transfer +1 | 1:0.9.0-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-clean-plugin +1 | 3.0.0-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-compiler-plugin +1 | 3.7.0-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-dependency-analyzer +1 | 1.8-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-dependency-plugin +1 | 3.0.2-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-dependency-tree +1 | 3.0-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-doxia +16 | 1.7-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-doxia-sitetools +1 | 1.7.5-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-enforcer +4 | 1.4.1-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-filtering +1 | 3.1.1-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-install-plugin +1 | 2.5.2-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-invoker +1 | 2.2-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-invoker-plugin +1 | 1.10-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-parent | 27-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-plugin-build-helper +1 | 1.9.1-8.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-plugin-bundle +1 | 3.5.0-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-plugins-pom | 28-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-remote-resources-plugin +1 | 1.5-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-reporting-api +1 | 1:3.0-14.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-reporting-impl +1 | 3.0.0-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-resolver +11 | 1:1.1.1-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-script +14 | 3.5.1-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-shade-plugin +5 | 3.1.0-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-shared | 22-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-shared-incremental +1 | 1.1-14.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-shared-io +3 | 1:3.0.0-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-shared-utils +1 | 3.2.1-0.1.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-source-plugin +3 | 3.0.1-4.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-surefire +7 | 2.22.0-3.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-test-tools +4 | 3.3.0-12.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-verifier +1 | 1.6-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven-wagon +10 | 3.1.0-1.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | maven2 +11 | 2.2.1-59.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | mockito +1 | 1.10.19-17.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | modello +1 | 1.9.1-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | mojo-parent | 40-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | munge-maven-plugin +1 | 1.0-11.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | objectweb-asm +1 | 6.2-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | objectweb-pom | 1.5-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | objenesis +1 | 2.6-2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | os-maven-plugin +1 | 1.2.3-9.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | osgi-annotation +1 | 6.0.0-7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | osgi-compendium +1 | 6.0.0-5.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | osgi-core +1 | 6.0.0-6.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | plexus-ant-factory +1 | 1.0-0.20.a2.2.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | plexus-archiver +1 | 3.6.0-1.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | plexus-bsh-factory +1 | 1.0-0.19.a7.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
| RHEL 8 | plexus-build-api | 0.0.7-20.module+el8.10.0+23274+27840b45 | RHSA-2025:9318 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | apache-commons-beanutils | 1.9.4-9.el9_4.1 | RHSA-2025:9696 |
| RHEL 7 ELS | apache-commons-beanutils +1 | 1.8.3-15.el7_9.1 | RHSA-2025:10814 |
| Red Hat Ocp Tools 4 | jenkins | 2.516.2.1756731431-3.el9 | RHSA-2025:15817, RHSA-2025:15816, RHSA-2025:15815 |
| Red Hat Ocp Tools 4 | jenkins-2-plugins | 4.12.1756902839-1.el8 | RHSA-2025:15817, RHSA-2025:15816, RHSA-2025:15815 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-apache-commons-beanutils | 1.11.0-1.redhat_00001.1.el7eap | RHSA-2025:16668, RHSA-2025:16667 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-hibernate-validator +1 | 5.3.6-1.SP1_redhat_00001.1.ep7.el7 | RHSA-2025:16668 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-hornetq +3 | 2.4.11-1.Final_redhat_00001.1.el7eap | RHSA-2025:16668, RHSA-2025:16667 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jboss-server-migration +21 | 1.7.2-19.Final_redhat_00020.1.el7eap | RHSA-2025:16667 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-undertow | 1.4.18-17.SP15_redhat_00001.1.ep7.el7 | RHSA-2025:16668, RHSA-2025:16667 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly +1 | 7.1.12-2.GA_redhat_00002.1.ep7.el7 | RHSA-2025:16668, RHSA-2025:16667 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly-javadocs +2 | 7.3.15-5.GA_redhat_00003.1.el7eap | RHSA-2025:16667 |
| Red Hat JBoss EAP 8 | eap8-activemq-artemis +14 | 2.33.0-3.redhat_00017.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-beanutils | 1.11.0-1.redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-apache-cxf +3 | 4.0.6-2.redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-apache-mime4j +2 | 0.8.12-1.redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-eap-product-conf-parent +1 | 800.8.0-1.GA_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-elytron-web | 4.0.3-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-fastinfoset | 2.1.1-1.redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-hal-console | 3.6.24-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-hibernate +2 | 6.2.36-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-httpcomponents-asyncclient | 4.1.5-4.redhat_00006.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-jboss-remoting | 5.0.31-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-jbossws-cxf | 7.3.3-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-narayana +8 | 6.0.6-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-neethi | 3.2.1-1.redhat_00002.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-reactivex-rxjava2 | 2.2.21-3.redhat_00002.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-slf4j +1 | 2.0.17-1.redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-velocity +1 | 2.3.0-4.redhat_00010.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-wildfly +4 | 8.0.8-4.GA_redhat_00006.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 8 | eap8-wildfly-elytron +1 | 2.2.11-1.Final_redhat_00001.1.el8eap | RHSA-2025:10453, RHSA-2025:10452 |
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 2.16.0-21.redhat_00055.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-apache-commons-beanutils | 1.11.0-1.redhat_00001.1.el7eap | RHSA-2025:9115 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.5.10-1.redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-artemis-native +1 | 1:1.0.2-5.redhat_00004.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.9.6-1.Final_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-glassfish-jsf | 2.3.14-9.SP10_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.3.27-1.Final_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-hibernate-validator +1 | 6.0.23-3.SP2_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.5.21-1.Final_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +2 | 1.10.0-42.Final_redhat_00042.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-jbossws-cxf | 5.4.15-1.Final_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-wildfly +4 | 7.4.23-3.GA_redhat_00002.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron +1 | 1.15.26-1.Final_redhat_00001.1.el7eap | RHSA-2025:10926, RHSA-2025:10925, RHSA-2025:10924 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk17 | 7.4.23-3.GA_redhat_00002.1.el8eap | RHSA-2025:10926, RHSA-2025:10925 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | apache-commons-beanutils +1 | 1.9.4-21.el10_0 | ALSA-2025:9166 |
| AlmaLinux 9 | apache-commons-beanutils | 1.9.4-10.el9_6 | ALSA-2025:9114 |
| AlmaLinux 8 | ant +21 | 1.10.5-1.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | ant-contrib +1 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | antlr-C++ +3 | 2.7.7-56.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | aopalliance +1 | 1.0-17.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-beanutils +1 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-cli +1 | 1.4-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-collections +2 | 3.2.2-10.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-compress +1 | 1.18-1.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-exec +1 | 1.3-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-io +1 | 1:2.6-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-jxpath +1 | 1.3-29.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-lang +1 | 2.6-21.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-lang3 +1 | 3.7-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-logging +3 | 1.2-13.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-net +1 | 3.6-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-commons-parent | 43-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-ivy +1 | 2.4.0-14.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-parent | 19-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | apache-resource-bundles | 2-20.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | aqute-bnd +3 | 3.5.0-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | assertj-core +1 | 3.8.0-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | atinject +2 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | bcel +1 | 6.2-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | beust-jcommander +1 | 1.71-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | bsf +1 | 2.4.0-30.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | bsh +2 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | byaccj | 1.15-17.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | cal10n +2 | 0.8.1-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | cdi-api +1 | 1.2-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | cglib +1 | 3.2.4-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | easymock +1 | 3.5-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | exec-maven-plugin +1 | 1.6.0-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | felix-osgi-compendium +1 | 1.4.0-26.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | felix-osgi-core +1 | 1.4.0-23.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | felix-osgi-foundation +1 | 1.2.0-23.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | felix-parent | 4-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | felix-utils +1 | 1.10.4-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | forge-parent | 38-11.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | fusesource-pom +2 | 1.11-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | geronimo-annotation +1 | 1.0-23.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | geronimo-jms +1 | 1.1.1-25.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | geronimo-jpa +1 | 1.1.1-21.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | geronimo-parent-poms | 1.6-25.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | glassfish-el +2 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | glassfish-jsp-api +1 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | glassfish-legal +2 | 1.1-11.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | glassfish-master-pom | 8-11.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | glassfish-servlet-api +1 | 3.1.0-14.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | guava20 +2 | 20.0-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | guice-bom +12 | 4.1-11.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | hamcrest +3 | 1.3-23.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | hawtjni +3 | 1.16-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | httpcomponents-client +2 | 4.5.5-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | httpcomponents-core +1 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 | ALSA-2025:9318 |
| AlmaLinux 8 | httpcomponents-project | 9-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | isorelax +1 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | ivy-local +2 | 5.3.0-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jakarta-commons-httpclient +3 | 1:3.1-28.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jakarta-oro +1 | 2.0.8-23.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jansi +1 | 1.17.1-1.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jansi-native +1 | 1.7-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | java_cup +2 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | javacc +3 | 7.0.2-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | javacc-maven-plugin +1 | 2.6-25.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | javamail +1 | 1.5.2-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | javapackages-tools +1 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 | ALSA-2025:9318 |
| AlmaLinux 8 | javassist +1 | 3.18.1-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jaxen +2 | 1.1.6-18.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jboss-interceptors-1.2-api +1 | 1.0.0-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jboss-parent | 20-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jdepend +2 | 2.9.1-18.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jdependency +1 | 1.2-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jdom +2 | 1.1.3-17.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jdom2 +1 | 2.0.6-12.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jflex +1 | 1.6.1-12.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jline +1 | 2.14.6-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jsch +1 | 0.1.54-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jsoup +1 | 1.11.3-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jsr-305 +1 | 0-0.22.20130910svn.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jtidy +1 | 2:1.0-0.28.20100930svn1125.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jul-to-slf4j +2 | 1.7.25-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | junit +2 | 1:4.12-9.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jvnet-parent | 4-10.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | jzlib +2 | 1.1.3-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | log4j12 +1 | 1.2.17-22.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven +2 | 1:3.5.4-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-antrun-plugin +1 | 1.8-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-archiver +1 | 3.2.0-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-artifact-resolver +1 | 1:1.0-18.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-artifact-transfer +1 | 1:0.9.0-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-clean-plugin +1 | 3.0.0-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-compiler-plugin +1 | 3.7.0-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-dependency-analyzer +1 | 1.8-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-dependency-plugin +1 | 3.0.2-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-dependency-tree +1 | 3.0-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-doxia +16 | 1.7-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-doxia-sitetools +1 | 1.7.5-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-enforcer +4 | 1.4.1-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-filtering +1 | 3.1.1-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-install-plugin +1 | 2.5.2-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-invoker +1 | 2.2-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-invoker-plugin +1 | 1.10-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-model +10 | 2.2.1-59.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-parent | 27-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-plugin-build-helper +1 | 1.9.1-8.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-plugin-bundle +1 | 3.5.0-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-plugins-pom | 28-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-remote-resources-plugin +1 | 1.5-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-reporting-api +1 | 1:3.0-14.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-reporting-impl +1 | 3.0.0-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-resolver +11 | 1:1.1.1-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-script +14 | 3.5.1-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-shade-plugin +5 | 3.1.0-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-shared | 22-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-shared-incremental +1 | 1.1-14.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-shared-io +3 | 1:3.0.0-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-shared-utils +1 | 3.2.1-0.1.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-source-plugin +3 | 3.0.1-4.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-surefire +7 | 2.22.0-3.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-test-tools +4 | 3.3.0-12.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-verifier +1 | 1.6-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | maven-wagon +10 | 3.1.0-1.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | mockito +1 | 1.10.19-17.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | modello +1 | 1.9.1-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | mojo-parent | 40-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | munge-maven-plugin +1 | 1.0-11.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | objectweb-asm +1 | 6.2-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | objectweb-pom | 1.5-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | objenesis +1 | 2.6-2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | os-maven-plugin +1 | 1.2.3-9.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | osgi-annotation +1 | 6.0.0-7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | osgi-compendium +1 | 6.0.0-5.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | osgi-core +1 | 6.0.0-6.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | plexus-ant-factory +1 | 1.0-0.20.a2.2.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | plexus-archiver +1 | 3.6.0-1.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
| AlmaLinux 8 | plexus-bsh-factory | 1.0-0.19.a7.module_el8.0.0+6004+2fc32706 | ALSA-2025:9318 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | apache-commons-beanutils | 1.9.4-21.el10_0 | RLSA-2025:9166 |
| Rocky Linux 9 | apache-commons-beanutils | 1.9.4-10.el9_6 | RLSA-2025:9114 |
| Rocky Linux 8 | ant | 1.10.5-1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | ant-contrib | 1.0-0.32.b3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | antlr | 2.7.7-56.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | aopalliance | 1.0-17.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-beanutils | 1.9.3-5.module+el8.10.0+2003+8aeac9cb | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-cli | 1.4-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-compress | 1.18-1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-exec | 1.3-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-io | 1:2.6-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-jxpath | 1.3-29.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-lang3 | 3.7-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-logging +1 | 1.2-13.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-commons-parent | 43-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-ivy | 2.4.0-14.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-parent | 19-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | apache-resource-bundles | 2-20.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | aqute-bnd | 3.5.0-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | assertj-core | 3.8.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | atinject | 1-28.20100611svn86.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | bcel | 6.2-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | beust-jcommander | 1.71-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | bsf | 2.4.0-30.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | bsh | 2.0-13.b6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | byaccj | 1.15-17.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | cal10n | 0.8.1-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | cdi-api | 1.2-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | cglib | 3.2.4-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | easymock | 3.5-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | exec-maven-plugin | 1.6.0-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | felix-osgi-compendium | 1.4.0-26.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | felix-osgi-core | 1.4.0-23.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | felix-osgi-foundation | 1.2.0-23.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | felix-parent | 4-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | felix-utils | 1.10.4-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | forge-parent | 38-11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | fusesource-pom +1 | 1.11-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | geronimo-annotation | 1.0-23.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | geronimo-jms | 1.1.1-25.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | geronimo-jpa | 1.1.1-21.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | geronimo-parent-poms | 1.6-25.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | glassfish-el | 3.0.1-0.7.b08.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | glassfish-jsp-api | 2.3.2-0.9.b01.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | glassfish-legal +1 | 1.1-11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | glassfish-master-pom | 8-11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | glassfish-servlet-api | 3.1.0-14.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | google-guice | 4.1-11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | guava20 | 20.0-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | hamcrest | 1.3-23.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | hawtjni | 1.16-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | httpcomponents-client | 4.5.5-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | httpcomponents-core | 4.4.10-4.module+el8.10.0+2003+8aeac9cb | RLSA-2025:9318 |
| Rocky Linux 8 | httpcomponents-project | 9-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | isorelax | 1:0-0.23.release20050331.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jakarta-oro | 2.0.8-23.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jansi | 1.17.1-1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jansi-native | 1.7-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | java_cup | 1:0.11b-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | javacc | 7.0.2-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | javacc-maven-plugin | 2.6-25.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | javamail | 1.5.2-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | javapackages-tools | 5.3.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | javassist | 3.18.1-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jaxen | 1.1.6-18.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jboss-interceptors-1.2-api | 1.0.0-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jboss-parent | 20-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jdepend | 2.9.1-18.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jdependency | 1.2-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jdom | 1.1.3-17.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jdom2 | 2.0.6-12.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jflex | 1.6.1-12.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jline | 2.14.6-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jsch | 0.1.54-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jsoup | 1.11.3-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jsr-305 | 0-0.22.20130910svn.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jtidy | 2:1.0-0.28.20100930svn1125.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | junit | 1:4.12-9.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jvnet-parent | 4-10.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | jzlib | 1.1.3-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | log4j12 | 1.2.17-22.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven | 1:3.5.4-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-antrun-plugin | 1.8-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-archiver | 3.2.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-artifact-resolver | 1:1.0-18.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-artifact-transfer | 1:0.9.0-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-clean-plugin | 3.0.0-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-compiler-plugin | 3.7.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-dependency-plugin | 3.0.2-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-dependency-tree | 3.0-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-doxia | 1.7-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-doxia-sitetools | 1.7.5-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-enforcer | 1.4.1-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-filtering | 3.1.1-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-install-plugin | 2.5.2-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-invoker | 2.2-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-invoker-plugin | 1.10-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-parent | 27-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-plugin-build-helper | 1.9.1-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-plugin-bundle | 3.5.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-plugin-testing | 3.3.0-12.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-plugin-tools | 3.5.1-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-plugins-pom | 28-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-remote-resources-plugin | 1.5-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-reporting-api | 1:3.0-14.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-reporting-impl | 3.0.0-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-resolver | 1:1.1.1-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-shared | 22-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-shared-incremental | 1.1-14.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-shared-io +1 | 1:3.0.0-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-shared-utils | 3.2.1-0.1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-source-plugin +1 | 3.0.1-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-surefire | 2.22.0-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven-wagon +1 | 3.1.0-1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | maven2 | 2.2.1-59.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | mockito | 1.10.19-17.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | modello | 1.9.1-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | mojo-parent | 40-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | munge-maven-plugin | 1.0-11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | objectweb-asm | 6.2-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | objectweb-pom | 1.5-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | objenesis | 2.6-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | os-maven-plugin | 1.2.3-9.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | osgi-annotation | 6.0.0-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | osgi-compendium | 6.0.0-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | osgi-core | 6.0.0-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-ant-factory | 1.0-0.20.a2.2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-archiver | 3.6.0-1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-bsh-factory | 1.0-0.19.a7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-build-api | 0.0.7-20.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-cipher | 1.7-14.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-classworlds | 2.5.2-9.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-cli +1 | 1.6-6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-compiler | 2.8.2-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-component-api | 1.0-0.24.alpha15.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-component-factories-pom | 1.0-0.15.alpha11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-components-pom | 1.3.1-10.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-containers | 1.7.1-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-i18n | 1.0-0.11.b10.4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-interactivity | 1.0-0.27.alpha6.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-interpolation | 1.22-9.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-io | 3.0.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-languages | 0.9.10-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-pom | 5.0-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-resources | 1.0-0.23.a7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-sec-dispatcher | 1.4-26.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-utils +3 | 3.1.0-3.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | plexus-velocity | 1.2-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | powermock | 1.6.5-9.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | qdox | 2.0-3.M9.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | regexp | 1:1.5-26.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | sisu | 1:0.3.3-7.module+el8.10.0+2003+8aeac9cb | RLSA-2025:9318 |
| Rocky Linux 8 | sisu-mojos | 0.3.1-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | slf4j | 1.7.25-4.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | sonatype-oss-parent | 7-14.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | sonatype-plugins-parent | 8-12.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | spec-version-maven-plugin | 1.2-11.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | spice-parent | 26-8.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | testng | 6.14.3-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | velocity | 1.7-24.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | weld-parent | 34-5.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xbean | 4.8-1.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xmlunit | 1.6-7.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xmvn | 3.0.0-21.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
| Rocky Linux 8 | xz-java +1 | 1.8-2.module+el8.3.0+74+855e3f5d | RLSA-2025:9318 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLES 15 SP6 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLES 15 SP5 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLES 15 SP4 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLES 15 SP3 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | apache-commons-beanutils | 1.11.0-7.3.1 | SUSE-SU-2025:02056-1 |
| SLES for SAP 15 SP5 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLES for SAP 15 SP4 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLES for SAP 15 SP3 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLE HPC 15 SP5 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLE HPC 15 SP4 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SLE HPC 15 SP3 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SUSE Manager Server 4.3 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
| SUSE Enterprise Storage 7.1 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache-commons-beanutils | 1.11.0-1.1 | openSUSE-SU-2025:15175-1 |
| openSUSE Leap 15.6 | apache-commons-beanutils | 1.11.0-150200.3.9.1 | SUSE-SU-2025:01815-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | apache-commons-beanutils +1 | 1.11.0-10.amzn2023.0.1 | ALAS2023-2025-999 |
| Amazon Linux 2023 | javapackages-bootstrap | 1.5.0^20220105.git9f283b7-3.amzn2023.0.6 | ALAS2023-2025-1027 |
| Amazon Linux 2 | apache-commons-beanutils +1 | 1.8.3-15.amzn2.0.1 | ALAS2-2025-2899 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | apache-commons-beanutils | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | apache-commons-beanutils +1 | 1.9.4-21.el10_0 | ELSA-2025-9166 |
| Oracle Linux 9 | apache-commons-beanutils | 1.9.4-10.el9_6 | ELSA-2025-9114 |
| Oracle Linux 8 | ant +21 | 1.10.5-1.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | ant-contrib +1 | 1.0-0.32.b3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | antlr-C++ +3 | 2.7.7-56.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | aopalliance +1 | 1.0-17.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-beanutils +1 | 1.9.3-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-cli +1 | 1.4-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-collections +2 | 3.2.2-10.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-compress +1 | 1.18-1.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-exec +1 | 1.3-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-io +1 | 1:2.6-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-jxpath +1 | 1.3-29.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-lang +1 | 2.6-21.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-lang3 +1 | 3.7-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-logging +3 | 1.2-13.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-net +1 | 3.6-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-commons-parent | 43-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-ivy +1 | 2.4.0-14.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-parent | 19-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | apache-resource-bundles | 2-20.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | aqute-bnd +3 | 3.5.0-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | assertj-core +1 | 3.8.0-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | atinject +2 | 1-28.20100611svn86.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | bcel +1 | 6.2-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | beust-jcommander +1 | 1.71-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | bsf +1 | 2.4.0-30.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | bsh +2 | 2.0-13.b6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | byaccj | 1.15-17.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | cal10n +2 | 0.8.1-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | cdi-api +1 | 1.2-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | cglib +1 | 3.2.4-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | easymock +1 | 3.5-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | exec-maven-plugin +1 | 1.6.0-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | felix-osgi-compendium +1 | 1.4.0-26.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | felix-osgi-core +1 | 1.4.0-23.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | felix-osgi-foundation +1 | 1.2.0-23.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | felix-parent | 4-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | felix-utils +1 | 1.10.4-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | forge-parent | 38-11.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | fusesource-pom +2 | 1.11-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | geronimo-annotation +1 | 1.0-23.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | geronimo-jms +1 | 1.1.1-25.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | geronimo-jpa +1 | 1.1.1-21.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | geronimo-parent-poms | 1.6-25.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | glassfish-el +2 | 3.0.1-0.7.b08.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | glassfish-jsp-api +1 | 2.3.2-0.9.b01.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | glassfish-legal +2 | 1.1-11.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | glassfish-master-pom | 8-11.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | glassfish-servlet-api +1 | 3.1.0-14.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | guava20 +2 | 20.0-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | guice-bom +12 | 4.1-11.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | hamcrest +3 | 1.3-23.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | hawtjni +3 | 1.16-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | httpcomponents-client +2 | 4.5.5-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | httpcomponents-core +1 | 4.4.10-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | httpcomponents-project | 9-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | isorelax +1 | 1:0-0.23.release20050331.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | ivy-local +4 | 5.3.0-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jakarta-commons-httpclient +3 | 1:3.1-28.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jakarta-oro +1 | 2.0.8-23.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jansi +1 | 1.17.1-1.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jansi-native +1 | 1.7-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | java_cup +2 | 1:0.11b-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | javacc +3 | 7.0.2-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | javacc-maven-plugin +1 | 2.6-25.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | javamail +1 | 1.5.2-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | javassist +1 | 3.18.1-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jaxen +2 | 1.1.6-18.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jboss-interceptors-1.2-api +1 | 1.0.0-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jboss-parent | 20-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jdepend +2 | 2.9.1-18.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jdependency +1 | 1.2-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jdom +2 | 1.1.3-17.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jdom2 +1 | 2.0.6-12.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jflex +1 | 1.6.1-12.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jline +1 | 2.14.6-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jsch +1 | 0.1.54-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jsoup +1 | 1.11.3-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jsr-305 +1 | 0-0.22.20130910svn.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jtidy +1 | 2:1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jul-to-slf4j +2 | 1.7.25-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | junit +2 | 1:4.12-9.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jvnet-parent | 4-10.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | jzlib +2 | 1.1.3-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | log4j12 +1 | 1.2.17-22.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven +2 | 1:3.5.4-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-antrun-plugin +1 | 1.8-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-archiver +1 | 3.2.0-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-artifact-resolver +1 | 1:1.0-18.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-artifact-transfer +1 | 1:0.9.0-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-clean-plugin +1 | 3.0.0-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-compiler-plugin +1 | 3.7.0-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-dependency-analyzer +1 | 1.8-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-dependency-plugin +1 | 3.0.2-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-dependency-tree +1 | 3.0-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-doxia +16 | 1.7-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-doxia-sitetools +1 | 1.7.5-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-enforcer +4 | 1.4.1-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-filtering +1 | 3.1.1-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-install-plugin +1 | 2.5.2-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-invoker +1 | 2.2-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-invoker-plugin +1 | 1.10-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-model +10 | 2.2.1-59.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-parent | 27-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-plugin-build-helper +1 | 1.9.1-8.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-plugin-bundle +1 | 3.5.0-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-plugins-pom | 28-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-remote-resources-plugin +1 | 1.5-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-reporting-api +1 | 1:3.0-14.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-reporting-impl +1 | 3.0.0-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-resolver +11 | 1:1.1.1-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-script +14 | 3.5.1-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-shade-plugin +5 | 3.1.0-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-shared | 22-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-shared-incremental +1 | 1.1-14.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-shared-io +3 | 1:3.0.0-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-shared-utils +1 | 3.2.1-0.1.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-source-plugin +3 | 3.0.1-4.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-surefire +7 | 2.22.0-3.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-test-tools +4 | 3.3.0-12.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-verifier +1 | 1.6-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | maven-wagon +10 | 3.1.0-1.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | mockito +1 | 1.10.19-17.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | modello +1 | 1.9.1-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | mojo-parent | 40-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | munge-maven-plugin +1 | 1.0-11.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | objectweb-asm +1 | 6.2-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | objectweb-pom | 1.5-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | objenesis +1 | 2.6-2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | os-maven-plugin +1 | 1.2.3-9.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | osgi-annotation +1 | 6.0.0-7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | osgi-compendium +1 | 6.0.0-5.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | osgi-core +1 | 6.0.0-6.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | plexus-ant-factory +1 | 1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | plexus-archiver +1 | 3.6.0-1.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | plexus-bsh-factory +1 | 1.0-0.19.a7.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | plexus-build-api +1 | 0.0.7-20.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | plexus-cipher +1 | 1.7-14.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 8 | plexus-classworlds | 2.5.2-9.module+el8.10.0+90622+accb6b48 | ELSA-2025-9318 |
| Oracle Linux 7 | apache-commons-beanutils +1 | 1.8.3-15.0.1.el7_9 | ELSA-2025-10814 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | akhq | 0.25.1-r4 | — |
| Wolfi rolling | apache-activemq-artemis +1 | 2.41.0-r4 | — |
| Wolfi rolling | apache-nifi +2 | 2.4.0-r1 | — |
| Wolfi rolling | apicurio-registry +2 | 3.0.8-r0 | — |
| Wolfi rolling | cassandra-reaper | 3.8.0-r5 | — |
| Wolfi rolling | celeborn-0.6 | 0.6.3-r7 | — |
| Wolfi rolling | confluent-common-docker +1 | 7.6.0-r13 | — |
| Wolfi rolling | druid | 37.0.0-r14 | — |
| Wolfi rolling | jenkins-2 +6 | 2.512-r1 | — |
| Wolfi rolling | jenkins-plugin-manager | 2.14.0-r0 | — |
| Wolfi rolling | kafka-strimzi-compat +12 | 0.46.0-r5 | — |
| Wolfi rolling | opensearch-2 | 2.19.4-r0 | — |
| Wolfi rolling | sonarqube | 25.11.0.114957-r0 | — |
| Wolfi rolling | sonarqube-10 | No fix yet | — |
| Wolfi rolling | spdx-tools-java | 2.0.1-r2 | — |
| Wolfi rolling | tez | 0.10.4-r9 | — |
| Wolfi rolling | trino +58 | 475-r6 | — |
| Wolfi rolling | wildfly +4 | 36.0.1-r4 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
h3raklez/CVE-2025-48734 ★ 0 · Mar 20, 2026
CVE-2025-48734 - Affects Apache Commons BeanUtils in versions prior to 1.11.0 (and the 2.x branch before 2.0.0-M2).
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | commons-beanutils:commons-beanutils | >= 1.0, < 1.11.0 | 1.11.0 | GHSA-wxr5-93ph-8wr9 |
| Maven | org.apache.commons:commons-beanutils2 | >= 2.0.0-M1, < 2.0.0-M2 | 2.0.0-M2 | GHSA-wxr5-93ph-8wr9 |
Advisories 50
- WID-SEC-2026-4090 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
- ALSA-2025:9114 Important: apache-commons-beanutils security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9166 Important: apache-commons-beanutils security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9318 Important: javapackages-tools:201801 security update AlmaLinux Security Advisories · Oct 29, 2026
- NCSC-2026-0444 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Oct 21, 2026
- NCSC-2026-0440 Kwetsbaarheden verholpen in Oracle Enterprise Manager NCSC-NL (Netherlands) · Oct 21, 2026
- WID-SEC-2026-4087 Oracle Enterprise Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2026
- RHSA-2025:16668 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.12 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:16667 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.15 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- WID-SEC-2025-1439 Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2025:9696 Red Hat Security Advisory: apache-commons-beanutils security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:9318 Red Hat Security Advisory: javapackages-tools:201801 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:9166 Red Hat Security Advisory: apache-commons-beanutils security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:9115 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:9114 Red Hat Security Advisory: apache-commons-beanutils security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15816 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15817 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15814 Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15815 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15812 Red Hat Security Advisory: Red Hat Product OCP Tools 4.19 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15813 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15810 Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:15811 Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:10926 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:10925 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:10924 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:10814 Red Hat Security Advisory: apache-commons-beanutils security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:10453 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:10452 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2025-1559 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2026-1229 Atlassian Bamboo, Bitbucket, Confluence, Jira: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 2, 2026
- WID-SEC-2025-1169 Apache Commons BeanUtils: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Aug 2, 2026
- USN-8322-1 commons-beanutils vulnerability Ubuntu Security Notices (USN) · May 27, 2026
- NCSC-2026-0126 Kwetsbaarheden verholpen in Oracle E-Business Suite NCSC-NL (Netherlands) · Apr 22, 2026
- WID-SEC-2026-1204 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 21, 2026
- WID-SEC-2026-1195 Oracle Commerce: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 21, 2026
- WID-SEC-2026-1192 Oracle E-Business Suite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 21, 2026
- openSUSE-SU-2025:15175-1 apache-commons-beanutils-1.11.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4229-1 commons-beanutils - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2026-0559 IBM Rational Build Forge: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 1, 2026
- SUSE-SU-2025:01815-1 Security update for apache-commons-beanutils SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02056-1 Security update for apache-commons-beanutils SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0159 Oracle E-Business Suite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 21, 2026
- NCSC-2026-0025 Kwetsbaarheden verholpen in Oracle Financial Services NCSC-NL (Netherlands) · Jan 21, 2026
- NCSC-2026-0024 Kwetsbaarheden verholpen in Oracle E-Business Suite NCSC-NL (Netherlands) · Jan 21, 2026
- NCSC-2026-0022 Kwetsbaarheden verholpen in Oracle Communications producten NCSC-NL (Netherlands) · Jan 21, 2026
- WID-SEC-2026-0175 Oracle Supply Chain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2026-0166 Oracle Retail Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2026-0163 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2026-0160 Oracle Construction and Engineering: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
References
- https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9 vendor-advisory