maven:3.5 security update

2022-06-0100:00:00

linux.oracle.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

maven-shared-utils
[3.2.1-0.2]

Fix commandline injection vulnerability
Resolves: CVE-2022-29599

OSVersionArchitecturePackageVersionFilename
oracle linux8srcaopalliance< 1.0-17.moduleaopalliance-1.0-17.module+el8+5161+5cac467c.src.rpm
oracle linux8srcapache-commons-cli< 1.4-4.moduleapache-commons-cli-1.4-4.module+el8+5161+5cac467c.src.rpm
oracle linux8srcapache-commons-codec< 1.11-3.moduleapache-commons-codec-1.11-3.module+el8+5161+5cac467c.src.rpm
oracle linux8srcapache-commons-io< 2.6-3.moduleapache-commons-io-2.6-3.module+el8+5161+5cac467c.src.rpm
oracle linux8srcapache-commons-lang3< 3.7-3.moduleapache-commons-lang3-3.7-3.module+el8+5161+5cac467c.src.rpm
oracle linux8srcapache-commons-logging< 1.2-13.moduleapache-commons-logging-1.2-13.module+el8+5161+5cac467c.src.rpm
oracle linux8srcatinject< 1-28.20100611svn86.moduleatinject-1-28.20100611svn86.module+el8+5161+5cac467c.src.rpm
oracle linux8srccdi-api< 1.2-8.modulecdi-api-1.2-8.module+el8+5161+5cac467c.src.rpm
oracle linux8srcgeronimo-annotation< 1.0-23.modulegeronimo-annotation-1.0-23.module+el8+5161+5cac467c.src.rpm
oracle linux8srcglassfish-el< 3.0.1-0.7.b08.moduleglassfish-el-3.0.1-0.7.b08.module+el8+5161+5cac467c.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	aopalliance	< 1.0-17.module	aopalliance-1.0-17.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	apache-commons-cli	< 1.4-4.module	apache-commons-cli-1.4-4.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	apache-commons-codec	< 1.11-3.module	apache-commons-codec-1.11-3.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	apache-commons-io	< 2.6-3.module	apache-commons-io-2.6-3.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	apache-commons-lang3	< 3.7-3.module	apache-commons-lang3-3.7-3.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	apache-commons-logging	< 1.2-13.module	apache-commons-logging-1.2-13.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	atinject	< 1-28.20100611svn86.module	atinject-1-28.20100611svn86.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	cdi-api	< 1.2-8.module	cdi-api-1.2-8.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	geronimo-annotation	< 1.0-23.module	geronimo-annotation-1.0-23.module+el8+5161+5cac467c.src.rpm
oracle linux	8	src	glassfish-el	< 3.0.1-0.7.b08.module	glassfish-el-3.0.1-0.7.b08.module+el8+5161+5cac467c.src.rpm