CVE-2025-67030 — Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Description

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	plexus-utils2	No fix yet	—
Debian 13	plexus-utils2	No fix yet	—
Debian 12	plexus-utils2	No fix yet	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 26.10	plexus-utils2	No fix yet	—
Ubuntu 26.04 LTS	plexus-utils2	No fix yet	—
Ubuntu 24.04 LTS	plexus-utils2	No fix yet	—
Ubuntu 22.04 LTS	plexus-utils2	No fix yet	—
Ubuntu 20.04 LTS	plexus-utils2	No fix yet	—

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 18.04 LTS	plexus-utils +1	No fix yet	—
Ubuntu 16.04 LTS	plexus-utils +1	No fix yet	—
Ubuntu 14.04 LTS	plexus-utils +1	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 10	plexus-utils +1	3.5.1-9.el10_2	RHSA-2026:38514
RHEL 9	aopalliance	1.0-51.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	apache-commons-cli	1.9.0-4.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	apache-commons-codec	1.17.1-8.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	apache-commons-io	1:2.16.1-9.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	atinject	1.0.5-14.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	google-guice	5.1.0-23.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	guava	33.3.0-5.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	httpcomponents-client	4.5.14-21.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	httpcomponents-core	4.4.16-21.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	jakarta-annotations	1.3.5-38.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	jansi	2.4.1-12.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	jsr-305	3.0.2-36.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	maven +7	1:3.9.9-13.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	maven-resolver	1:1.9.22-6.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	maven-shared-utils	3.4.2-19.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	maven-wagon	3.5.3-17.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	plexus-cipher	2.0-25.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	plexus-classworlds	2.8.0-9.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	plexus-containers +1	2.2.0-10.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	plexus-interpolation	1.27-10.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	plexus-sec-dispatcher	2.0-28.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	plexus-utils	3.3.0-14.el9_8	RHSA-2026:38796, RHSA-2026:38500
RHEL 9	sisu	1:0.9.0~M3-7.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 9	slf4j +1	1.7.36-9.module+el9.8.0+24092+eb9f67d0	RHSA-2026:38500
RHEL 8	ant +21	1.10.5-1.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	ant-contrib +1	1.0-0.32.b3.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	antlr +4	2.7.7-56.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	aopalliance +1	1.0-17.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-beanutils +1	1.9.3-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-cli +1	1.4-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	apache-commons-collections +2	3.2.2-10.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-compress +1	1.18-1.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-exec +1	1.3-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-io +1	1:2.6-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	apache-commons-jxpath +1	1.3-29.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-lang +1	2.6-21.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-lang3 +1	3.7-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	apache-commons-logging +3	1.2-13.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-net +1	3.6-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-commons-parent	43-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-ivy +1	2.4.0-14.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-parent	19-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	apache-resource-bundles	2-20.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	aqute-bnd +3	3.5.0-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	assertj-core +1	3.8.0-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	atinject +2	1-28.20100611svn86.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	bcel +1	6.2-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	beust-jcommander +1	1.71-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	bsf +1	2.4.0-30.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	bsh +2	2.0-13.b6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	byaccj	1.15-17.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	cal10n +2	0.8.1-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	cdi-api +1	1.2-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	cglib +1	3.2.4-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	easymock +1	3.5-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	exec-maven-plugin +1	1.6.0-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	felix-osgi-compendium +1	1.4.0-26.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	felix-osgi-core +1	1.4.0-23.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	felix-osgi-foundation +1	1.2.0-23.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	felix-parent	4-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	felix-utils +1	1.10.4-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	forge-parent	38-11.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	fusesource-pom +2	1.11-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	geronimo-annotation +1	1.0-23.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	geronimo-jms +1	1.1.1-25.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	geronimo-jpa +1	1.1.1-21.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	geronimo-parent-poms	1.6-25.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	glassfish-el +2	3.0.1-0.7.b08.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	glassfish-jsp-api +1	2.3.2-0.9.b01.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	glassfish-legal +2	1.1-11.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	glassfish-master-pom	8-11.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	glassfish-servlet-api +1	3.1.0-14.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	guava	31.0.1-5.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	guava20 +2	20.0-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	guice-bom +12	4.1-11.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	hamcrest +3	1.3-23.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	hawtjni +3	1.16-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	httpcomponents-client +2	4.5.5-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	httpcomponents-core +1	4.4.10-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	httpcomponents-project	9-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	isorelax +1	1:0-0.23.release20050331.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	ivy-local +4	5.3.0-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jakarta-annotations	1.3.5-15.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	jakarta-commons-httpclient +3	1:3.1-28.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jakarta-oro +1	2.0.8-23.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jansi +1	1.17.1-1.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	jansi-native +1	1.7-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	java_cup +2	1:0.11b-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	javacc +3	7.0.2-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	javacc-maven-plugin +1	2.6-25.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	javamail +1	1.5.2-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	javassist +1	3.18.1-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jaxen +2	1.1.6-18.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jboss-interceptors-1.2-api +1	1.0.0-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jboss-parent	20-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jdepend +2	2.9.1-18.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jdependency +1	1.2-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jdom +2	1.1.3-17.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jdom2 +1	2.0.6-12.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jflex +1	1.6.1-12.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jline +1	2.14.6-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jsch +1	0.1.54-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jsoup +1	1.11.3-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jsr-305 +1	0-0.22.20130910svn.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	jtidy +1	2:1.0-0.28.20100930svn1125.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jul-to-slf4j +2	1.7.25-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	junit +2	1:4.12-9.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jvnet-parent	4-10.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	jzlib +2	1.1.3-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	log4j12 +1	1.2.17-22.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven +2	1:3.5.4-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	maven-antrun-plugin +1	1.8-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-archiver +1	3.2.0-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-artifact-resolver +1	1:1.0-18.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-artifact-transfer +1	1:0.9.0-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-clean-plugin +1	3.0.0-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-compiler-plugin +1	3.7.0-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-dependency-analyzer +1	1.8-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-dependency-plugin +1	3.0.2-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-dependency-tree +1	3.0-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-doxia +16	1.7-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-doxia-sitetools +1	1.7.5-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-enforcer +4	1.4.1-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-filtering +1	3.1.1-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-install-plugin +1	2.5.2-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-invoker +1	2.2-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-invoker-plugin +1	1.10-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-openjdk8 +3	1:3.8.5-6.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	maven-parent	27-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-plugin-build-helper +1	1.9.1-8.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-plugin-bundle +1	3.5.0-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-plugins-pom	28-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-remote-resources-plugin +1	1.5-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-reporting-api +1	1:3.0-14.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-reporting-impl +1	3.0.0-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-resolver +11	1:1.1.1-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	maven-script +14	3.5.1-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-shade-plugin +5	3.1.0-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-shared	22-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-shared-incremental +1	1.1-14.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-shared-io +3	1:3.0.0-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-shared-utils +1	3.2.1-0.1.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	maven-source-plugin +3	3.0.1-4.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-surefire +7	2.22.0-3.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-test-tools +4	3.3.0-12.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-verifier +1	1.6-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	maven-wagon +10	3.1.0-1.module+el8.10.0+23274+27840b45	RHSA-2026:41948, RHSA-2026:40841
RHEL 8	maven2 +11	2.2.1-59.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	mockito +1	1.10.19-17.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	modello +1	1.9.1-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	mojo-parent	40-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	munge-maven-plugin +1	1.0-11.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	objectweb-asm +1	6.2-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	objectweb-pom	1.5-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	objenesis +1	2.6-2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	os-maven-plugin +1	1.2.3-9.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	osgi-annotation +1	6.0.0-7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	osgi-compendium +1	6.0.0-5.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	osgi-core +1	6.0.0-6.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	plexus-ant-factory +1	1.0-0.20.a2.2.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	plexus-archiver +1	3.6.0-1.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	plexus-bsh-factory +1	1.0-0.19.a7.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	plexus-build-api	0.0.7-20.module+el8.10.0+23274+27840b45	RHSA-2026:41948
RHEL 8	plexus-cipher	2.0-3.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	plexus-classworlds	2.6.0-13.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	plexus-containers +1	2.1.1-3.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	plexus-interpolation	1.26-13.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	plexus-sec-dispatcher	2.0-5.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	plexus-utils	3.3.0-11.module+el8.10.0+24366+080b405b.1	RHSA-2026:40841
RHEL 8	sisu	1:0.3.5-3.module+el8.10.0+21301+657f54a3	RHSA-2026:40841
RHEL 8	slf4j	1.7.32-5.module+el8.10.0+21301+657f54a3	RHSA-2026:40841

Show 7 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 10.0 EUS	plexus-utils +1	3.5.1-8.el10_0.1	RHSA-2026:35991
RHEL 9.6 EUS	aopalliance	1.0-51.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	apache-commons-cli	1.9.0-4.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	apache-commons-codec	1.17.1-8.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	apache-commons-io	1:2.16.1-9.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	atinject	1.0.5-14.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	google-guice	5.1.0-23.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	guava	33.3.0-5.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	httpcomponents-client	4.5.14-21.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	httpcomponents-core	4.4.16-21.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	jakarta-annotations	1.3.5-38.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	jansi	2.4.1-12.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	jsr-305	3.0.2-36.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	maven +6	1:3.9.9-12.module+el9.6.0+24382+3f72e30c	RHSA-2026:36012
RHEL 9.6 EUS	maven-resolver	1:1.9.22-6.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	maven-shared-utils	3.4.2-19.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	maven-wagon	3.5.3-17.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	plexus-cipher	2.0-25.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	plexus-classworlds	2.8.0-9.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	plexus-containers +1	2.2.0-10.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	plexus-interpolation	1.27-10.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	plexus-sec-dispatcher	2.0-28.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	plexus-utils	3.3.0-13.el9_6.1	RHSA-2026:36012, RHSA-2026:35997
RHEL 9.6 EUS	sisu	1:0.9.0~M3-7.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.6 EUS	slf4j +1	1.7.36-9.module+el9.6.0+22733+e520f63c	RHSA-2026:36012
RHEL 9.4 E4S	plexus-utils	3.3.0-10.el9_4.2	RHSA-2026:35992
RHEL 9.2 E4S	plexus-utils	3.3.0-10.el9_2.2	RHSA-2026:35990
RHEL 8.8 TUS	apache-commons-cli	1.5.0-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	apache-commons-codec	1.15-7.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	apache-commons-io	1:2.11.0-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	apache-commons-lang3	3.12.0-7.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	atinject	1.0.5-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	cdi-api	2.0.2-6.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	google-guice	4.2.3-9.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	guava	31.0.1-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	httpcomponents-client	4.5.13-5.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	httpcomponents-core	4.4.13-7.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	jakarta-annotations	1.3.5-14.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	jansi	2.4.0-6.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	jsr-305	3.0.2-6.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	maven +4	1:3.8.5-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	maven-resolver	1:1.7.3-5.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	maven-shared-utils	3.3.4-5.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	maven-wagon	3.5.1-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	plexus-cipher	2.0-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	plexus-classworlds	2.6.0-12.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	plexus-containers +1	2.1.1-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	plexus-interpolation	1.26-12.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	plexus-sec-dispatcher	2.0-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	plexus-utils	3.3.0-10.module+el8.8.0+24386+48baf958.1	RHSA-2026:35996
RHEL 8.8 TUS	sisu	1:0.3.5-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 TUS	slf4j +1	1.7.32-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	apache-commons-cli	1.5.0-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	apache-commons-codec	1.15-7.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	apache-commons-io	1:2.11.0-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	apache-commons-lang3	3.12.0-7.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	atinject	1.0.5-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	cdi-api	2.0.2-6.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	google-guice	4.2.3-9.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	guava	31.0.1-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	httpcomponents-client	4.5.13-5.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	httpcomponents-core	4.4.13-7.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	jakarta-annotations	1.3.5-14.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	jansi	2.4.0-6.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	jsr-305	3.0.2-6.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	maven +4	1:3.8.5-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	maven-resolver	1:1.7.3-5.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	maven-shared-utils	3.3.4-5.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	maven-wagon	3.5.1-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	plexus-cipher	2.0-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	plexus-classworlds	2.6.0-12.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	plexus-containers +1	2.1.1-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	plexus-interpolation	1.26-12.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	plexus-sec-dispatcher	2.0-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	plexus-utils	3.3.0-10.module+el8.8.0+24386+48baf958.1	RHSA-2026:35996
RHEL 8.8 E4S	sisu	1:0.3.5-2.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
RHEL 8.8 E4S	slf4j +1	1.7.32-4.module+el8.8.0+18044+0a924b8f	RHSA-2026:35996
Red Hat JBoss EAP 8	eap8-activemq-artemis +14	2.40.0-6.redhat_00012.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-angus +1	2.0.5-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-angus-activation	2.0.3-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-bouncycastle +5	1.84.0-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-eap-product-conf-parent +1	801.6.0-1.GA_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-guava +1	33.0.0-3.jre_redhat_00004.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-guava-failureaccess	1.0.3-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-hal-console	3.7.19-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-hibernate +2	6.6.48-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-hibernate-search +6	7.2.6-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-jakarta-activation	2.1.4-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-jboss-logging	3.6.2-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-jboss-metadata +5	16.1.0-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-jctools +1	4.0.6-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-netty +14	4.1.132-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-plexus-utils	3.6.1-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-reactivex-rxjava	3.1.12-1.redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-reactivex-rxjava2	2.2.21-5.redhat_00003.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly +3	8.1.6-5.GA_redhat_00007.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly-client-config	1.0.1-4.Final_redhat_00002.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly-http-client +4	2.1.4-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly-javadocs	8.1.1-10.GA_redhat_00017.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly-openssl +1	2.3.0-1.Final_redhat_00001.1.el8eap	RHSA-2026:18055, RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly-openssl-el8-x86_64	2.3.0-1.Final.redhat.00001.1.el8eap	RHSA-2026:18054
Red Hat JBoss EAP 8	eap8-wildfly-openssl-el9-x86_64	2.3.0-1.Final_redhat_00001.1.el9eap	RHSA-2026:18055
Red Hat JBoss EAP 8	eap8-yasson	3.0.4-5.redhat_00007.1.el8eap	RHSA-2026:18055, RHSA-2026:18054

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 10	plexus-utils +1	3.5.1-9.el10_2	ALSA-2026:38514
AlmaLinux 9	aopalliance	1.0-51.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	apache-commons-cli	1.9.0-4.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	apache-commons-codec	1.17.1-8.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	apache-commons-io	1:2.16.1-9.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	atinject	1.0.5-14.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	google-guice	5.1.0-23.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	guava	33.3.0-5.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	httpcomponents-client	4.5.14-21.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	httpcomponents-core	4.4.16-21.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	jakarta-annotations	1.3.5-38.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	jansi	2.4.1-12.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	jsr-305	3.0.2-36.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	maven +7	1:3.9.9-13.module_el9.8.0+229+787fb9a7	ALSA-2026:38500
AlmaLinux 9	maven-resolver	1:1.9.22-6.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	maven-shared-utils	3.4.2-19.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	maven-wagon	3.5.3-17.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	plexus-cipher	2.0-25.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	plexus-classworlds	2.8.0-9.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	plexus-containers-component-annotations	2.2.0-10.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	plexus-interpolation	1.27-10.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	plexus-sec-dispatcher	2.0-28.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	plexus-utils	3.3.0-14.el9_8	ALSA-2026:38796, ALSA-2026:38500
AlmaLinux 9	sisu	1:0.9.0~M3-7.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 9	slf4j +1	1.7.36-9.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux 8	ant +21	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	ant-contrib +1	1.0-0.32.b3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	antlr-C++ +3	2.7.7-56.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	aopalliance +1	1.0-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-beanutils +1	1.9.3-5.module_el8.10.0+4020+7deec6e4	ALSA-2026:41948
AlmaLinux 8	apache-commons-cli +1	1.4-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	apache-commons-collections +2	3.2.2-10.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-compress +1	1.18-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-exec +1	1.3-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-io +1	1:2.6-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	apache-commons-jxpath +1	1.3-29.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-lang +1	2.6-21.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-lang3 +1	3.7-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	apache-commons-logging +3	1.2-13.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-net +1	3.6-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-commons-parent	43-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-ivy +1	2.4.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-parent	19-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	apache-resource-bundles	2-20.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	aqute-bnd +3	3.5.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	assertj-core +1	3.8.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	atinject +2	1-28.20100611svn86.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	bcel +1	6.2-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	beust-jcommander +1	1.71-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	bsf +1	2.4.0-30.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	bsh +2	2.0-13.b6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	byaccj	1.15-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	cal10n +2	0.8.1-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	cdi-api +1	1.2-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	cglib +1	3.2.4-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	easymock +1	3.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	exec-maven-plugin +1	1.6.0-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	felix-osgi-compendium +1	1.4.0-26.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	felix-osgi-core +1	1.4.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	felix-osgi-foundation +1	1.2.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	felix-parent	4-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	felix-utils +1	1.10.4-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	forge-parent	38-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	fusesource-pom +2	1.11-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	geronimo-annotation +1	1.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	geronimo-jms +1	1.1.1-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	geronimo-jpa +1	1.1.1-21.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	geronimo-parent-poms	1.6-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	glassfish-el +2	3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	glassfish-jsp-api +1	2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	glassfish-legal +2	1.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	glassfish-master-pom	8-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	glassfish-servlet-api +1	3.1.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	guava	31.0.1-5.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	guava20 +2	20.0-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	guice-bom +12	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	hamcrest +3	1.3-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	hawtjni +3	1.16-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	httpcomponents-client +2	4.5.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	httpcomponents-core +1	4.4.10-4.module_el8.10.0+4020+7deec6e4	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	httpcomponents-project	9-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	isorelax +1	1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	ivy-local +2	5.3.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jakarta-annotations	1.3.5-15.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	jakarta-commons-httpclient +3	1:3.1-28.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jakarta-oro +1	2.0.8-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jansi +1	1.17.1-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	jansi-native +1	1.7-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	java_cup +2	1:0.11b-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	javacc +3	7.0.2-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	javacc-maven-plugin +1	2.6-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	javamail +1	1.5.2-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	javapackages-tools +1	5.3.0-2.module_el8.6.0+3333+6f2999f0	ALSA-2026:41948
AlmaLinux 8	javassist +1	3.18.1-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jaxen +2	1.1.6-18.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jboss-interceptors-1.2-api +1	1.0.0-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jboss-parent	20-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jdepend +2	2.9.1-18.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jdependency +1	1.2-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jdom +2	1.1.3-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jdom2 +1	2.0.6-12.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jflex +1	1.6.1-12.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jline +1	2.14.6-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jsch +1	0.1.54-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jsoup +1	1.11.3-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jsr-305 +1	0-0.22.20130910svn.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	jtidy +1	2:1.0-0.28.20100930svn1125.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jul-to-slf4j +2	1.7.25-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	junit +2	1:4.12-9.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jvnet-parent	4-10.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	jzlib +2	1.1.3-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	log4j12 +1	1.2.17-22.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven +2	1:3.5.4-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	maven-antrun-plugin +1	1.8-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-archiver +1	3.2.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-artifact-resolver +1	1:1.0-18.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-artifact-transfer +1	1:0.9.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-clean-plugin +1	3.0.0-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-compiler-plugin +1	3.7.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-dependency-analyzer +1	1.8-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-dependency-plugin +1	3.0.2-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-dependency-tree +1	3.0-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-doxia +16	1.7-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-doxia-sitetools +1	1.7.5-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-enforcer +4	1.4.1-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-filtering +1	3.1.1-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-install-plugin +1	2.5.2-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-invoker +1	2.2-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-invoker-plugin +1	1.10-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-model +10	2.2.1-59.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-openjdk8 +3	1:3.8.5-6.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	maven-parent	27-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-plugin-build-helper +1	1.9.1-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-plugin-bundle +1	3.5.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-plugins-pom	28-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-remote-resources-plugin +1	1.5-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-reporting-api +1	1:3.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-reporting-impl +1	3.0.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-resolver +11	1:1.1.1-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	maven-script +14	3.5.1-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-shade-plugin +5	3.1.0-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-shared	22-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-shared-incremental +1	1.1-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-shared-io +3	1:3.0.0-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-shared-utils +1	3.2.1-0.1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	maven-source-plugin +3	3.0.1-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-surefire +7	2.22.0-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-test-tools +4	3.3.0-12.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-verifier +1	1.6-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	maven-wagon +10	3.1.0-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948, ALSA-2026:40841
AlmaLinux 8	mockito +1	1.10.19-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	modello +1	1.9.1-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	mojo-parent	40-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	munge-maven-plugin +1	1.0-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	objectweb-asm +1	6.2-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	objectweb-pom	1.5-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	objenesis +1	2.6-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	os-maven-plugin +1	1.2.3-9.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	osgi-annotation +1	6.0.0-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	osgi-compendium +1	6.0.0-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	osgi-core +1	6.0.0-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	plexus-ant-factory +1	1.0-0.20.a2.2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	plexus-archiver +1	3.6.0-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	plexus-bsh-factory	1.0-0.19.a7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux 8	plexus-cipher	2.0-3.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	plexus-classworlds	2.6.0-13.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	plexus-containers-component-annotations	2.1.1-3.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	plexus-interpolation	1.26-13.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	plexus-sec-dispatcher	2.0-5.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	plexus-utils	3.3.0-11.module_el8.10.0+4229+5e0a6206.1	ALSA-2026:40841
AlmaLinux 8	sisu	1:0.3.5-3.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux 8	slf4j	1.7.32-5.module_el8.10.0+3805+55513176	ALSA-2026:40841

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 10	plexus-utils	3.5.1-9.el10_2	RLSA-2026:38514
Rocky Linux 9	aopalliance	1.0-51.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	apache-commons-cli	1.9.0-4.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	apache-commons-codec	1.17.1-8.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	apache-commons-io	1:2.16.1-9.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	atinject	1.0.5-14.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	google-guice	5.1.0-23.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	guava	33.3.0-5.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	httpcomponents-client	4.5.14-21.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	httpcomponents-core	4.4.16-21.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	jakarta-annotations	1.3.5-38.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	jansi	2.4.1-12.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	jsr-305	3.0.2-36.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	maven	1:3.9.9-13.module+el9.8.0+40095+a2161487	RLSA-2026:38500
Rocky Linux 9	maven-resolver	1:1.9.22-6.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	maven-shared-utils	3.4.2-19.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	maven-wagon	3.5.3-17.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	plexus-cipher	2.0-25.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	plexus-classworlds	2.8.0-9.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	plexus-containers	2.2.0-10.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	plexus-interpolation	1.27-10.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	plexus-sec-dispatcher	2.0-28.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	plexus-utils	3.3.0-14.el9_8	RLSA-2026:38796, RLSA-2026:38500
Rocky Linux 9	sisu	1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 9	slf4j	1.7.36-9.module+el9.7.0+40002+8e3c44a9	RLSA-2026:38500
Rocky Linux 8	ant	1.10.5-1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	ant-contrib	1.0-0.32.b3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	antlr	2.7.7-56.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	aopalliance	1.0-17.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-beanutils	1.9.3-5.module+el8.10.0+2003+8aeac9cb	RLSA-2026:41948
Rocky Linux 8	apache-commons-cli	1.4-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	apache-commons-collections	3.2.2-10.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-compress	1.18-1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-exec	1.3-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-io	1:2.6-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	apache-commons-jxpath	1.3-29.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-lang	2.6-21.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-lang3	3.7-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	apache-commons-logging +1	1.2-13.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-net	3.6-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-commons-parent	43-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-ivy	2.4.0-14.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-parent	19-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	apache-resource-bundles	2-20.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	aqute-bnd	3.5.0-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	assertj-core	3.8.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	atinject	1-28.20100611svn86.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	bcel	6.2-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	beust-jcommander	1.71-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	bsf	2.4.0-30.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	bsh	2.0-13.b6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	byaccj	1.15-17.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	cal10n	0.8.1-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	cdi-api	1.2-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	cglib	3.2.4-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	easymock	3.5-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	exec-maven-plugin	1.6.0-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	felix-osgi-compendium	1.4.0-26.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	felix-osgi-core	1.4.0-23.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	felix-osgi-foundation	1.2.0-23.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	felix-parent	4-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	felix-utils	1.10.4-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	forge-parent	38-11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	fusesource-pom +1	1.11-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	geronimo-annotation	1.0-23.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	geronimo-jms	1.1.1-25.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	geronimo-jpa	1.1.1-21.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	geronimo-parent-poms	1.6-25.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	glassfish-el	3.0.1-0.7.b08.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	glassfish-jsp-api	2.3.2-0.9.b01.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	glassfish-legal +1	1.1-11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	glassfish-master-pom	8-11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	glassfish-servlet-api	3.1.0-14.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	google-guice	4.1-11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	guava	31.0.1-5.module+el8.10.0+1811+d28a527b	RLSA-2026:40841
Rocky Linux 8	guava20	20.0-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	hamcrest	1.3-23.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	hawtjni	1.16-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	httpcomponents-client	4.5.5-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	httpcomponents-core	4.4.10-4.module+el8.10.0+2003+8aeac9cb	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	httpcomponents-project	9-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	isorelax	1:0-0.23.release20050331.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jakarta-annotations	1.3.5-15.module+el8.10.0+1811+d28a527b	RLSA-2026:40841
Rocky Linux 8	jakarta-commons-httpclient	1:3.1-28.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jakarta-oro	2.0.8-23.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jansi	1.17.1-1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	jansi-native	1.7-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	java_cup	1:0.11b-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	javacc	7.0.2-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	javacc-maven-plugin	2.6-25.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	javamail	1.5.2-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	javapackages-tools	5.3.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	javassist	3.18.1-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jaxen	1.1.6-18.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jboss-interceptors-1.2-api	1.0.0-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jboss-parent	20-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jdepend	2.9.1-18.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jdependency	1.2-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jdom	1.1.3-17.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jdom2	2.0.6-12.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jflex	1.6.1-12.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jline	2.14.6-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jsch	0.1.54-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jsoup	1.11.3-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jsr-305	0-0.22.20130910svn.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	jtidy	2:1.0-0.28.20100930svn1125.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	junit	1:4.12-9.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jvnet-parent	4-10.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	jzlib	1.1.3-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	log4j12	1.2.17-22.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven	1:3.5.4-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	maven-antrun-plugin	1.8-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-archiver	3.2.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-artifact-resolver	1:1.0-18.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-artifact-transfer	1:0.9.0-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-clean-plugin	3.0.0-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-compiler-plugin	3.7.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-dependency-plugin	3.0.2-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-dependency-tree	3.0-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-doxia	1.7-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-doxia-sitetools	1.7.5-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-enforcer	1.4.1-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-filtering	3.1.1-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-install-plugin	2.5.2-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-invoker	2.2-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-invoker-plugin	1.10-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-parent	27-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-plugin-build-helper	1.9.1-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-plugin-bundle	3.5.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-plugin-testing	3.3.0-12.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-plugin-tools	3.5.1-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-plugins-pom	28-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-remote-resources-plugin	1.5-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-reporting-api	1:3.0-14.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-reporting-impl	3.0.0-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-resolver	1:1.1.1-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	maven-shared	22-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-shared-incremental	1.1-14.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-shared-io +1	1:3.0.0-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-shared-utils	3.2.1-0.1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	maven-source-plugin +1	3.0.1-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-surefire	2.22.0-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	maven-wagon +1	3.1.0-1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	maven2	2.2.1-59.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	mockito	1.10.19-17.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	modello	1.9.1-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	mojo-parent	40-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	munge-maven-plugin	1.0-11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	objectweb-asm	6.2-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	objectweb-pom	1.5-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	objenesis	2.6-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	os-maven-plugin	1.2.3-9.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	osgi-annotation	6.0.0-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	osgi-compendium	6.0.0-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	osgi-core	6.0.0-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-ant-factory	1.0-0.20.a2.2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-archiver	3.6.0-1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-bsh-factory	1.0-0.19.a7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-build-api	0.0.7-20.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-cipher	1.7-14.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	plexus-classworlds	2.5.2-9.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	plexus-cli +1	1.6-6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-compiler	2.8.2-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-component-api	1.0-0.24.alpha15.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-component-factories-pom	1.0-0.15.alpha11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-components-pom	1.3.1-10.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-containers	1.7.1-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	plexus-i18n	1.0-0.11.b10.4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-interactivity	1.0-0.27.alpha6.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-interpolation	1.22-9.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	plexus-io	3.0.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-languages	0.9.10-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-pom	5.0-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-resources	1.0-0.23.a7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	plexus-sec-dispatcher	1.4-26.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	plexus-utils +3	3.1.0-3.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	plexus-velocity	1.2-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	powermock	1.6.5-9.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	qdox	2.0-3.M9.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	regexp	1:1.5-26.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	sisu	1:0.3.3-7.module+el8.10.0+2003+8aeac9cb	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	sisu-mojos	0.3.1-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	slf4j	1.7.25-4.module+el8.3.0+74+855e3f5d	RLSA-2026:41948, RLSA-2026:40841
Rocky Linux 8	sonatype-oss-parent	7-14.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	sonatype-plugins-parent	8-12.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	spec-version-maven-plugin	1.2-11.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	spice-parent	26-8.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	testng	6.14.3-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	velocity	1.7-24.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	weld-parent	34-5.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xalan-j2	2.7.1-38.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xbean	4.8-1.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xerces-j2	2.11.0-34.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xml-commons-apis	1.4.01-25.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xml-commons-resolver	1.2-26.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xmlunit	1.6-7.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xmvn	3.0.0-21.module+el8.3.0+74+855e3f5d	RLSA-2026:41948
Rocky Linux 8	xz-java +1	1.8-2.module+el8.3.0+74+855e3f5d	RLSA-2026:41948

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP7	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLES 15 SP6	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLES 15 SP5	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLES 15 SP4	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1

Show 7 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 16.0	plexus-utils	4.0.2-160000.3.1	SUSE-SU-2026:21194-1
SLES for SAP 15 SP6	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLES for SAP 15 SP5	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLES for SAP 15 SP4	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLES 16.0	plexus-utils	4.0.2-160000.3.1	SUSE-SU-2026:21194-1
SLE HPC 15 SP5	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1
SLE HPC 15 SP4	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	plexus-utils	4.0.2-2.1	openSUSE-SU-2026:10439-1
openSUSE Leap 16.0	plexus-utils	4.0.2-160000.3.1	openSUSE-SU-2026:20535-1
openSUSE Leap 15.6	plexus-utils	4.0.2-150200.3.14.1	SUSE-SU-2026:1396-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	javapackages-bootstrap	1.5.0^20220105.git9f283b7-3.amzn2023.0.9	ALAS2023-2026-1581
Amazon Linux 2023	maven3.9 +6	1:3.9.14-3.amzn2023.0.1	ALAS2023-2026-1602
Amazon Linux 2023	plexus-utils +1	3.3.0-9.amzn2023.0.5	ALAS2023-2026-1545
Amazon Linux 2	plexus-utils +1	3.0.9-9.amzn2.0.1	ALAS2-2026-3233

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	plexus-utils	3.3.0-5	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 10	plexus-utils +1	3.5.1-9.el10_2	ELSA-2026-38514
Oracle Linux 9	aopalliance	1.0-51.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	apache-commons-cli	1.9.0-4.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	apache-commons-codec	1.17.1-8.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	apache-commons-io	1:2.16.1-9.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	atinject	1.0.5-14.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	google-guice	5.1.0-23.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	guava	33.3.0-5.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	httpcomponents-client	4.5.14-21.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	httpcomponents-core	4.4.16-21.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	jakarta-annotations	1.3.5-38.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	jansi	2.4.1-12.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	jsr-305	3.0.2-36.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	maven +7	1:3.9.9-13.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	maven-resolver	1:1.9.22-6.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	maven-shared-utils	3.4.2-19.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	maven-wagon	3.5.3-17.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	plexus-cipher	2.0-25.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	plexus-classworlds	2.8.0-9.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	plexus-containers-component-annotations	2.2.0-10.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	plexus-interpolation	1.27-10.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	plexus-sec-dispatcher	2.0-28.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	plexus-utils	3.3.0-14.el9_8	ELSA-2026-38796, ELSA-2026-38500
Oracle Linux 9	sisu	1:0.9.0~M3-7.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 9	slf4j +1	1.7.36-9.module+el9.8.0+90959+95248a69	ELSA-2026-38500
Oracle Linux 8	ant-contrib +1	1.0-0.32.b3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	ant-xz +19	1.10.5-1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	antlr-C++ +2	2.7.7-56.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	aopalliance-javadoc	1.0-17.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-beanutils +1	1.9.3-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-cli	1.5.0-5.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	apache-commons-cli-javadoc	1.4-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-codec	1.15-8.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	apache-commons-compress-javadoc	1.18-1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-exec-javadoc	1.3-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-io	1:2.11.0-3.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	apache-commons-io-javadoc	1:2.6-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-jxpath-javadoc	1.3-29.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-lang3	3.12.0-8.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	apache-commons-logging-javadoc +1	1.2-13.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-net-javadoc	3.6-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-commons-parent	43-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-ivy +1	2.4.0-14.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-parent	19-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	apache-resource-bundles	2-20.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	aqute-bnd +3	3.5.0-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	assertj-core	3.8.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	atinject	1.0.5-5.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	atinject-tck +1	1-28.20100611svn86.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	bcel +1	6.2-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	beust-jcommander +1	1.71-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	bsf +1	2.4.0-30.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	bsh +2	2.0-13.b6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	byaccj	1.15-17.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	cal10n-javadoc +1	0.8.1-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	cdi-api	2.0.2-7.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	cdi-api-javadoc	1.2-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	cglib +1	3.2.4-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	easymock +1	3.5-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	exec-maven-plugin +1	1.6.0-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	felix-osgi-compendium +1	1.4.0-26.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	felix-osgi-core +1	1.4.0-23.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	felix-osgi-foundation +1	1.2.0-23.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	felix-parent	4-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	felix-utils-javadoc	1.10.4-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	forge-parent	38-11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	fusesource-pom +1	1.11-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	geronimo-annotation-javadoc	1.0-23.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	geronimo-jms	1.1.1-25.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	geronimo-jpa +1	1.1.1-21.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	geronimo-parent-poms	1.6-25.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	glassfish-el-javadoc	3.0.1-0.7.b08.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	glassfish-jsp-api-javadoc	2.3.2-0.9.b01.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	glassfish-legal +2	1.1-11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	glassfish-master-pom	8-11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	glassfish-servlet-api-javadoc	3.1.0-14.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	google-guice	4.2.3-10.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	guava	31.0.1-5.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	guava20-javadoc +1	20.0-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	guice-bom +11	4.1-11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	hamcrest-demo +1	1.3-23.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	hawtjni +2	1.16-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	httpcomponents-client	4.5.13-6.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	httpcomponents-client-cache +1	4.5.5-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	httpcomponents-core	4.4.13-8.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	httpcomponents-core-javadoc	4.4.10-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	isorelax +1	1:0-0.23.release20050331.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	ivy-local +3	5.3.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jakarta-annotations	1.3.5-15.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	jakarta-oro +1	2.0.8-23.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jansi	2.4.0-7.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	jansi-javadoc	1.17.1-1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jansi-native-javadoc	1.7-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	java_cup +2	1:0.11b-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	javacc +3	7.0.2-6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	javacc-maven-plugin +1	2.6-25.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	javamail +1	1.5.2-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jaxen +2	1.1.6-18.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jboss-interceptors-1.2-api-javadoc	1.0.0-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jboss-parent	20-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jdepend +2	2.9.1-18.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jdependency +1	1.2-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jdom +2	1.1.3-17.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jdom2 +1	2.0.6-12.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jflex +1	1.6.1-12.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jsch-javadoc	0.1.54-6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jsoup-javadoc	1.11.3-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jsr-305	3.0.2-7.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	jsr-305-javadoc	0-0.22.20130910svn.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jtidy +1	2:1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	junit-manual +1	1:4.12-9.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jvnet-parent	4-10.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	jzlib-demo +1	1.1.3-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven +5	1:3.8.5-6.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	maven-antrun-plugin	1.8-6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-archiver +1	3.2.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-artifact-resolver +1	1:1.0-18.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-artifact-transfer +1	1:0.9.0-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-clean-plugin +1	3.0.0-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-compiler-plugin +1	3.7.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-dependency-plugin +1	3.0.2-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-dependency-tree +1	3.0-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-doxia +16	1.7-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-doxia-sitetools +1	1.7.5-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-enforcer +4	1.4.1-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-filtering +1	3.1.1-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-install-plugin +1	2.5.2-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-invoker +1	2.2-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-invoker-plugin +1	1.10-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-javadoc	1:3.5.4-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-model +10	2.2.1-59.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-parent	27-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-plugin-build-helper +1	1.9.1-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-plugin-bundle +1	3.5.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-plugins-pom	28-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-remote-resources-plugin +1	1.5-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-reporting-api +1	1:3.0-14.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-reporting-impl +1	3.0.0-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-resolver	1:1.7.3-6.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	maven-resolver-javadoc +4	1:1.1.1-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-script +11	3.5.1-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-shade-plugin +5	3.1.0-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-shared	22-6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-shared-incremental +1	1.1-14.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-shared-io +3	1:3.0.0-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-shared-utils	3.3.4-6.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	maven-shared-utils-javadoc	3.2.1-0.1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-source-plugin +3	3.0.1-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-surefire +7	2.22.0-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-test-tools +4	3.3.0-12.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	maven-wagon	3.5.1-3.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	maven-wagon-ftp +5	3.1.0-1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	mockito +1	1.10.19-17.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	modello +1	1.9.1-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	munge-maven-plugin +1	1.0-11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	objectweb-asm-javadoc	6.2-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	objenesis +1	2.6-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	os-maven-plugin +1	1.2.3-9.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	osgi-annotation +1	6.0.0-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	osgi-compendium	6.0.0-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	osgi-core +1	6.0.0-6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-ant-factory +1	1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-archiver +1	3.6.0-1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-bsh-factory +1	1.0-0.19.a7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-build-api +1	0.0.7-20.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-cipher	2.0-3.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	plexus-cipher-javadoc	1.7-14.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-classworlds	2.6.0-13.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	plexus-classworlds-javadoc	2.5.2-9.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-cli +2	1.6-6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-compiler +3	2.8.2-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-component-api	1.0-0.24.alpha15.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-component-factories-pom	1.0-0.15.alpha11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-components-pom	1.3.1-10.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-containers +4	1.7.1-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-containers-component-annotations	2.1.1-3.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	plexus-i18n +1	1.0-0.11.b10.4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-interactivity +3	1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-interpolation	1.26-13.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	plexus-interpolation-javadoc	1.22-9.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-io +1	3.0.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-languages +1	0.9.10-3.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-pom	5.0-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-resources +1	1.0-0.23.a7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-sec-dispatcher	2.0-5.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	plexus-sec-dispatcher-javadoc	1.4-26.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	plexus-utils	3.3.0-11.module+el8.10.0+90966+8bcb551f.1	ELSA-2026-40841
Oracle Linux 8	plexus-velocity +1	1.2-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	powermock-core +8	1.6.5-9.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	qdox +1	2.0-3.M9.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	regexp +1	1:1.5-26.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	sisu	1:0.3.5-3.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	sisu-javadoc	1:0.3.3-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	sisu-mojos +1	0.3.1-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	slf4j +1	1.7.32-5.module+el8.10.0+90966+8bcb551f	ELSA-2026-40841
Oracle Linux 8	slf4j-ext +7	1.7.25-4.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	sonatype-oss-parent	7-14.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	sonatype-plugins-parent	8-12.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	spec-version-maven-plugin +1	1.2-11.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	spice-parent	26-8.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	testng +1	6.14.3-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	weld-parent	34-5.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	xalan-j2-demo +3	2.7.1-38.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	xbean +1	4.8-1.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	xmlunit +1	1.6-7.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	xmvn +13	3.0.0-21.module+el8.10.0+90622+accb6b48	ELSA-2026-41948
Oracle Linux 8	xz-java-javadoc +2	1.8-2.module+el8.10.0+90622+accb6b48	ELSA-2026-41948

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	akhq	0.27.0-r1	—
Wolfi rolling	confluent-kafka	8.4.0.11-r0	—
Wolfi rolling	dependency-track +1	4.14.0-r5	—
Wolfi rolling	druid	37.0.0-r0	—
Wolfi rolling	gradle-8	8.14.4-r3	—
Wolfi rolling	gradle-9	9.4.1-r1	—
Wolfi rolling	gradle-stage0	8.0.1-r4	—
Wolfi rolling	kafka-4.1	4.1.2-r3	—
Wolfi rolling	kafka-4.2	4.2.0-r6	—
Wolfi rolling	maven-3.9	3.9.14-r2	—
Wolfi rolling	maven-stage0	3.9.12-r4	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.codehaus.plexus:plexus-utils	>= 4.0.0, < 4.0.3	4.0.3	GHSA-6fmv-xxpf-w3cw
Maven	org.codehaus.plexus:plexus-utils	< 3.6.1	3.6.1	GHSA-6fmv-xxpf-w3cw

Advisories 41

ALSA-2026:38796 Important: plexus-utils security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:38514 Important: plexus-utils security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:38500 Important: maven:3.9 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:41948 Important: javapackages-tools:201801 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:40841 Important: maven:3.8 security update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2026:41948 Red Hat Security Advisory: javapackages-tools:201801 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:40841 Red Hat Security Advisory: maven:3.8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:38796 Red Hat Security Advisory: plexus-utils security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:38514 Red Hat Security Advisory: plexus-utils security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:38500 Red Hat Security Advisory: maven:3.9 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:36012 Red Hat Security Advisory: maven:3.9 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:35996 Red Hat Security Advisory: maven:3.8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:35997 Red Hat Security Advisory: plexus-utils security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:35991 Red Hat Security Advisory: plexus-utils security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:35992 Red Hat Security Advisory: plexus-utils security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:35990 Red Hat Security Advisory: plexus-utils security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:18055 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:18054 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
WID-SEC-2026-2444 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 7, 2026
WID-SEC-2026-2451 Oracle Siebel CRM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 2, 2026
WID-SEC-2026-2300 Red Hat Enterprise Linux (plexus-utils): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten BSI CERT-Bund (WID) · Aug 25, 2026
ELSA-2026-41948 Important: javapackages-tools:201801 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 31, 2026
RLSA-2026:38796 Important: plexus-utils security update Rocky Linux Security Advisories · Jul 29, 2026
RLSA-2026:41948 Important: javapackages-tools:201801 security update Rocky Linux Security Advisories · Jul 20, 2026
ELSA-2026-40841 Important: maven:3.8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 20, 2026
ELSA-2026-38796 Important: plexus-utils security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 20, 2026
WID-SEC-2026-1608 Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 19, 2026
RLSA-2026:40841 Important: maven:3.8 security update Rocky Linux Security Advisories · Jul 16, 2026
ELSA-2026-38514 Important: plexus-utils security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
ELSA-2026-38500 Important: maven:3.9 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 15, 2026
WID-SEC-2026-1429 IBM App Connect Enterprise: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jul 14, 2026
RLSA-2026:38514 Important: plexus-utils security update Rocky Linux Security Advisories · Jul 14, 2026
RLSA-2026:38500 Important: maven:3.9 security update Rocky Linux Security Advisories · Jul 13, 2026
ALAS2023-2026-1602 Important: maven3.9 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 30, 2026
openSUSE-SU-2026:20535-1 Security update for plexus-utils SUSE / openSUSE Security Updates · Apr 22, 2026
SUSE-SU-2026:21194-1 Security update for plexus-utils SUSE / openSUSE Security Updates · Apr 22, 2026
SUSE-SU-2026:1396-1 Security update for plexus-utils SUSE / openSUSE Security Updates · Apr 17, 2026
ALAS2-2026-3233 Important: plexus-utils security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 13, 2026
ALAS2023-2026-1545 Important: plexus-utils security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 13, 2026
ALAS2023-2026-1581 Important: javapackages-bootstrap security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 13, 2026
openSUSE-SU-2026:10439-1 plexus-utils-4.0.2-2.1 on GA media SUSE / openSUSE Security Updates · Mar 27, 2026

EUVD	v3.1	8.8
CISA-ADP	v3.1	8.8
redhat-SADP	v3.1	8.3

Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Description

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Amazon Linux

Azure Linux

Oracle Linux

Wolfi

Affected packages

Advisories 41

References