alsa-2022:4797
Vulnerability from osv_almalinux
Published
2022-05-30 11:39
Modified
2022-05-30 11:39
Summary
Important: maven:3.6 security update
Details
The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven.
Security Fix(es):
- maven-shared-utils: Command injection via Commandline class (CVE-2022-29599)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "aopalliance"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0-20.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "apache-commons-cli"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4-7.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "apache-commons-codec"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.13-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "apache-commons-io"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.6-6.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "apache-commons-lang3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.9-4.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "atinject"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1-31.20100611svn86.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "cdi-api"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.1-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "geronimo-annotation"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0-26.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "google-guice"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.2.2-4.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "guava"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "28.1-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "httpcomponents-client"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.10-4.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "httpcomponents-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.12-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "jansi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18-4.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "jcl-over-slf4j"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.28-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "jsoup"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.1-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "jsr-305"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0-0.25.20130910svn.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.6.2-7.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-lib"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.6.2-7.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-openjdk11"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.6.2-7.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-openjdk17"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.6.2-7.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-openjdk8"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.6.2-7.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-resolver"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.1-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-shared-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.1-0.5.module_el8.6.0+2903+d6ca2362"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "maven-wagon"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.3.4-2.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "plexus-cipher"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7-17.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "plexus-classworlds"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0-4.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "plexus-containers-component-annotations"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.1.0-2.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "plexus-interpolation"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.26-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "plexus-sec-dispatcher"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4-29.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "plexus-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.3.0-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "sisu"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.3.4-2.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "slf4j"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.28-3.module_el8.6.0+2786+d7c38b21"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven.\n\nSecurity Fix(es):\n\n* maven-shared-utils: Command injection via Commandline class (CVE-2022-29599)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "ALSA-2022:4797",
"modified": "2022-05-30T11:39:17Z",
"published": "2022-05-30T11:39:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2022-4797.html"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2022-29599"
}
],
"related": [
"CVE-2022-29599"
],
"summary": "Important: maven:3.6 security update"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…