Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

RedHat RHSA-2022-1861-01 Moderate: Maven 3.5 Security Fix

red hat
Calendar Grey May 10, 2022
Dist Redhat Esm H88
Debian Security Notice DSA-2022-1830-2 minor update for Git 2.30 mitigates vulnerabilities of low impact severity.
An update for the maven:3.5 module is now available for Red Hat Enterprise Linux 8

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.
Security Fix(es):
* apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory moderate Red Hat update apache-httpclient Maven

References

https://access.redhat.com/security/cve/CVE-2020-13956 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.6_release_notes/index

Package List

Red Hat Enterprise Linux AppStream (v. 8):
Source: aopalliance-1.0-17.module+el8+2452+b359bfcd.src.rpm apache-commons-cli-1.4-4.module+el8+2452+b359bfcd.src.rpm apache-commons-codec-1.11-3.module+el8+2452+b359bfcd.src.rpm apache-commons-io-2.6-3.module+el8+2452+b359bfcd.src.rpm apache-commons-lang3-3.7-3.module+el8+2452+b359bfcd.src.rpm apache-commons-logging-1.2-13.module+el8+2452+b359bfcd.src.rpm atinject-1-28.20100611svn86.module+el8+2452+b359bfcd.src.rpm cdi-api-1.2-8.module+el8+2452+b359bfcd.src.rpm geronimo-annotation-1.0-23.module+el8+2452+b359bfcd.src.rpm glassfish-el-3.0.1-0.7.b08.module+el8+2452+b359bfcd.src.rpm google-guice-4.1-11.module+el8+2452+b359bfcd.src.rpm guava20-20.0-8.module+el8+2452+b359bfcd.src.rpm hawtjni-1.16-2.module+el8+2452+b359bfcd.src.rpm httpcomponents-client-4.5.5-5.module+el8.6.0+13298+7b5243c0.src.rpm httpcomponents-core-4.4.10-3.module+el8+2452+b359bfcd.src.rpm jansi-1.17.1-1.module+el8+2452+b359bfcd.src.rpm jansi-native-1.7-7.module+el8+2452+b359bfcd.src.rpm jboss-interceptors-1.2-api-1.0.0-8.module+el8+2452+b359bfcd.src.rpm jsoup-1.11.3-3.module+el8+2452+b359bfcd.src.rpm maven-3.5.4-5.module+el8+2452+b359bfcd.src.rpm maven-resolver-1.1.1-2.module+el8+2452+b359bfcd.src.rpm

Read the Full Advisory


Advisory ID: RHSA-2022:1861-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:1861
Issue date: 2022-05-10

Topic

An update for the maven:3.5 module is now available for Red Hat EnterpriseLinux 8.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate Red Hat update apache-httpclient Maven

Relevant Releases Architectures

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

Bugs Fixed

1886587 - CVE-2020-13956 apache-httpclient: incorrect handling of malformed authority component in request URIs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.