Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: High Severity Type Confusion Issues in directory-maven-plugin

fedora
Calendar Grey March 7, 2024
Dist Fedora Esm H88
Debian Security Alert DEBIAN-2024-456c7bc2df outlines revisions addressing critical vulnerabilities in file-handler-toolkit.
Change for system JDK from 17 to 21

Summary

The Directory Plugin for Maven is used to discover various project-related

paths, such as the execution root directory, the directory for a specific

project in the current build session, or the highest project base directory

(closest to the filesystem root directory) available in the projects loaded

from disk (not resolved from a remote repository). The plugin will then reflect

this value to the console, and also inject it into each project's properties

using the value of the property plugin parameter.

Update Information:

Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639

Topics%20covered

Topics Covered

security advisory high severity Fedora type confusion system JDK directory-maven-plugin

Change Log

* Sat Mar 2 2024 Jiri Vanek - 0.3.1-15 - Rebuilt for java-21-openjdk as system jdk * Thu Feb 29 2024 Andrew Bauer - 0.3.1-14 - bump java source/target to 1.8, fixes 2266639 - patch pom.xml, fixes bz 2261062 * Tue Feb 27 2024 Jiri Vanek - 0.3.1-13 - Rebuilt for java-21-openjdk as system jdk * Wed Jan 24 2024 Fedora Release Engineering - 0.3.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering - 0.3.1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2123726 - consoleImageViewer crashes at start https://bugzilla.redhat.com/show_bug.cgi?id=2123726 [ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40 https://bugzilla.redhat.com/show_bug.cgi?id=2261062 [ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk https://bugzilla.redhat.com/show_bug.cgi?id=2266639 [ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266934 [ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266937 [ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta https://bugzilla.redhat.com/show_bug.cgi?id=2267486

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: directory-maven-plugin
Product: Fedora 40
Version: 0.3.1
Release: 15.fc40
URL: https://github.com/jdcasey/directory-maven-plugin
Summary: Establish locations for files in multi-module builds

Topics%20covered

Topics Covered

security advisory high severity Fedora type confusion system JDK directory-maven-plugin

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here