RHSA-2022:4797HighCVSS 9.8

Red Hat Security Advisory: maven:3.6 security update

Published
May 30, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-29599 →

📋 Description

CVE-2022-29599 — maven-shared-utils: Command injection via Commandline class

🎯 Affected products178

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • aopalliance-0:1.0-20.module+el8.2.0+5557+11a14461.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • aopalliance-0:1.0-20.module+el8.2.0+5557+11a14461.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • aopalliance-0:1.0-20.module+el8.3.0+6804+157bd82e.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • aopalliance-0:1.0-20.module+el8.3.0+6804+157bd82e.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • aopalliance-0:1.0-20.module+el8.6.0+13337+afcb49ec.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aopalliance-0:1.0-20.module+el8.6.0+13337+afcb49ec.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-cli-0:1.4-7.module+el8.2.0+5557+11a14461.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-cli-0:1.4-7.module+el8.2.0+5557+11a14461.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-cli-0:1.4-7.module+el8.3.0+6804+157bd82e.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-cli-0:1.4-7.module+el8.3.0+6804+157bd82e.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-cli-0:1.4-7.module+el8.6.0+13337+afcb49ec.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-cli-0:1.4-7.module+el8.6.0+13337+afcb49ec.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-codec-0:1.13-3.module+el8.2.0+5557+11a14461.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-codec-0:1.13-3.module+el8.2.0+5557+11a14461.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-codec-0:1.13-3.module+el8.3.0+6804+157bd82e.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-codec-0:1.13-3.module+el8.3.0+6804+157bd82e.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-codec-0:1.13-3.module+el8.6.0+13337+afcb49ec.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-codec-0:1.13-3.module+el8.6.0+13337+afcb49ec.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-io-1:2.6-6.module+el8.2.0+5557+11a14461.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-io-1:2.6-6.module+el8.2.0+5557+11a14461.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-io-1:2.6-6.module+el8.3.0+6804+157bd82e.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-io-1:2.6-6.module+el8.3.0+6804+157bd82e.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-io-1:2.6-6.module+el8.6.0+13337+afcb49ec.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-io-1:2.6-6.module+el8.6.0+13337+afcb49ec.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-lang3-0:3.9-4.module+el8.2.0+5557+11a14461.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-lang3-0:3.9-4.module+el8.2.0+5557+11a14461.src (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-lang3-0:3.9-4.module+el8.3.0+6804+157bd82e.noarch (maven:3.6) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • +148 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)