Fedora: Security Advisory for maven-archiver (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: maven-archiver-3.6.1-6.fc40

The Maven Archiver is used by other Maven plugins to handle packaging...

com.sun.enterprise:hk2-maven (>=0.2, <=1.6.9), com.sun.enterprise:hk2-maven-plugin (>=0.2, <=1.6.9) +27 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-4)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.sun.enterprise:hk2-maven =0.2, =0.2, =0.0.1, =1.46, =3.2, =3.2, =3.2, =1.0-rc4,...

net.sourceforge.maven-taglib:maven-taglib-plugin (>=2.3, <=2.3.1), org.apache.maven.plugins:maven-assembly-plugin (2.1) +4 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-6)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - net.sourceforge.maven-taglib:maven-taglib-plugin =2.3, =2.0.5, =1.0-alpha-3,...

org.apache.maven:maven-archiver (2.0-alpha-1), org.apache.maven:maven-plugin-tools-api (2.0-alpha-1) +3 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0-alpha-1)

org.apache.maven:maven-core MAVEN version 2.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - org.apache.maven:maven-archiver 2.0-alpha-1 - org.apache.maven:maven-plugin-tools-api 2.0-alpha-1 -...