RHSA-2022:4798HighCVSS 9.8

Red Hat Security Advisory: maven:3.5 security update

Published
May 30, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-29599 →

📋 Description

CVE-2022-29599 — maven-shared-utils: Command injection via Commandline class

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • aopalliance-0:1.0-17.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aopalliance-0:1.0-17.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • aopalliance-0:1.0-17.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • aopalliance-0:1.0-17.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aopalliance-0:1.0-17.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • aopalliance-0:1.0-17.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • apache-commons-lang3-0:3.7-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-lang3-0:3.7-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • apache-commons-lang3-0:3.7-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)