Linux · 
AlmaLinux · Security advisory · July 20, 2026
AlmaLinux · Security advisory · July 20, 2026ALSA-2026:41948: Security update for 510 packages
ALSA-2026:41948, released July 20, 2026, fixes 1 CVE across 200 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0069
53rd percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ant | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-antlr | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-bcel | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-bsf | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-log4j | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-oro | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-regexp | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-resolver | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-apache-xalan2 | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-commons-logging | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-commons-net | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-contrib | almalinux 8 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
| ant-contrib-javadoc | almalinux 8 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
| ant-javadoc | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-javamail | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-jdepend | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-jmf | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-jsch | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-junit | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-lib | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-manual | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-swing | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-testutil | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| ant-xz | almalinux 8 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| antlr-C++ | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| antlr-javadoc | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| antlr-manual | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| antlr-tool | almalinux 8 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| aopalliance | almalinux 8 | 1.0-17.module_el8.0.0+6004+2fc32706 |
| aopalliance-javadoc | almalinux 8 | 1.0-17.module_el8.0.0+6004+2fc32706 |
| apache-commons-beanutils | almalinux 8 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
| apache-commons-beanutils-javadoc | almalinux 8 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
| apache-commons-cli | almalinux 8 | 1.4-4.module_el8.0.0+6004+2fc32706 |
| apache-commons-cli-javadoc | almalinux 8 | 1.4-4.module_el8.0.0+6004+2fc32706 |
| apache-commons-codec | almalinux 8 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-codec-javadoc | almalinux 8 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-collections | almalinux 8 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| apache-commons-collections-javadoc | almalinux 8 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| apache-commons-collections-testframework | almalinux 8 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| apache-commons-compress | almalinux 8 | 1.18-1.module_el8.0.0+6004+2fc32706 |
| apache-commons-compress-javadoc | almalinux 8 | 1.18-1.module_el8.0.0+6004+2fc32706 |
| apache-commons-exec | almalinux 8 | 1.3-8.module_el8.0.0+6004+2fc32706 |
| apache-commons-exec-javadoc | almalinux 8 | 1.3-8.module_el8.0.0+6004+2fc32706 |
| apache-commons-io | almalinux 8 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-io-javadoc | almalinux 8 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-jxpath | almalinux 8 | 1.3-29.module_el8.0.0+6004+2fc32706 |
| apache-commons-jxpath-javadoc | almalinux 8 | 1.3-29.module_el8.0.0+6004+2fc32706 |
| apache-commons-lang | almalinux 8 | 2.6-21.module_el8.0.0+6004+2fc32706 |
| apache-commons-lang-javadoc | almalinux 8 | 2.6-21.module_el8.0.0+6004+2fc32706 |
| apache-commons-lang3 | almalinux 8 | 3.7-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-lang3-javadoc | almalinux 8 | 3.7-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-logging | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| apache-commons-logging-javadoc | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| apache-commons-net | almalinux 8 | 3.6-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-net-javadoc | almalinux 8 | 3.6-3.module_el8.0.0+6004+2fc32706 |
| apache-commons-parent | almalinux 8 | 43-2.module_el8.0.0+6004+2fc32706 |
| apache-ivy | almalinux 8 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
| apache-ivy-javadoc | almalinux 8 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
| apache-parent | almalinux 8 | 19-2.module_el8.0.0+6004+2fc32706 |
| apache-resource-bundles | almalinux 8 | 2-20.module_el8.0.0+6004+2fc32706 |
| aqute-bnd | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| aqute-bnd-javadoc | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| aqute-bndlib | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| assertj-core | almalinux 8 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
| assertj-core-javadoc | almalinux 8 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
| atinject | almalinux 8 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| atinject-javadoc | almalinux 8 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| atinject-tck | almalinux 8 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| bcel | almalinux 8 | 6.2-2.module_el8.0.0+6004+2fc32706 |
| bcel-javadoc | almalinux 8 | 6.2-2.module_el8.0.0+6004+2fc32706 |
| beust-jcommander | almalinux 8 | 1.71-5.module_el8.0.0+6004+2fc32706 |
| beust-jcommander-javadoc | almalinux 8 | 1.71-5.module_el8.0.0+6004+2fc32706 |
| bnd-maven-plugin | almalinux 8 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| bsf | almalinux 8 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
| bsf-javadoc | almalinux 8 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
| bsh | almalinux 8 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| bsh-javadoc | almalinux 8 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| bsh-manual | almalinux 8 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| byaccj | almalinux 8 | 1.15-17.module_el8.0.0+6004+2fc32706 |
| cal10n | almalinux 8 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
| cal10n-javadoc | almalinux 8 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
| cdi-api | almalinux 8 | 1.2-8.module_el8.0.0+6004+2fc32706 |
| cdi-api-javadoc | almalinux 8 | 1.2-8.module_el8.0.0+6004+2fc32706 |
| cglib | almalinux 8 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
| cglib-javadoc | almalinux 8 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
| easymock | almalinux 8 | 3.5-4.module_el8.0.0+6004+2fc32706 |
| easymock-javadoc | almalinux 8 | 3.5-4.module_el8.0.0+6004+2fc32706 |
| exec-maven-plugin | almalinux 8 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
| exec-maven-plugin-javadoc | almalinux 8 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
| felix-osgi-compendium | almalinux 8 | 1.4.0-26.module_el8.0.0+6004+2fc32706 |
| felix-osgi-compendium-javadoc | almalinux 8 | 1.4.0-26.module_el8.0.0+6004+2fc32706 |
| felix-osgi-core | almalinux 8 | 1.4.0-23.module_el8.0.0+6004+2fc32706 |
| felix-osgi-core-javadoc | almalinux 8 | 1.4.0-23.module_el8.0.0+6004+2fc32706 |
| felix-osgi-foundation | almalinux 8 | 1.2.0-23.module_el8.0.0+6004+2fc32706 |
| felix-osgi-foundation-javadoc | almalinux 8 | 1.2.0-23.module_el8.0.0+6004+2fc32706 |
| felix-parent | almalinux 8 | 4-5.module_el8.0.0+6004+2fc32706 |
| felix-utils | almalinux 8 | 1.10.4-2.module_el8.0.0+6004+2fc32706 |
| felix-utils-javadoc | almalinux 8 | 1.10.4-2.module_el8.0.0+6004+2fc32706 |
| forge-parent | almalinux 8 | 38-11.module_el8.0.0+6004+2fc32706 |
| fusesource-pom | almalinux 8 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| geronimo-annotation | almalinux 8 | 1.0-23.module_el8.0.0+6004+2fc32706 |
| geronimo-annotation-javadoc | almalinux 8 | 1.0-23.module_el8.0.0+6004+2fc32706 |
| geronimo-jms | almalinux 8 | 1.1.1-25.module_el8.0.0+6004+2fc32706 |
| geronimo-jms-javadoc | almalinux 8 | 1.1.1-25.module_el8.0.0+6004+2fc32706 |
| geronimo-jpa | almalinux 8 | 1.1.1-21.module_el8.0.0+6004+2fc32706 |
| geronimo-jpa-javadoc | almalinux 8 | 1.1.1-21.module_el8.0.0+6004+2fc32706 |
| geronimo-parent-poms | almalinux 8 | 1.6-25.module_el8.0.0+6004+2fc32706 |
| glassfish-annotation-api | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| glassfish-annotation-api-javadoc | almalinux 8 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| glassfish-el | almalinux 8 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| glassfish-el-api | almalinux 8 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| glassfish-el-javadoc | almalinux 8 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| glassfish-jsp-api | almalinux 8 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 |
| glassfish-jsp-api-javadoc | almalinux 8 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 |
| glassfish-legal | almalinux 8 | 1.1-11.module_el8.0.0+6004+2fc32706 |
| glassfish-master-pom | almalinux 8 | 8-11.module_el8.0.0+6004+2fc32706 |
| glassfish-servlet-api | almalinux 8 | 3.1.0-14.module_el8.0.0+6004+2fc32706 |
| glassfish-servlet-api-javadoc | almalinux 8 | 3.1.0-14.module_el8.0.0+6004+2fc32706 |
| google-guice | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| google-guice-javadoc | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guava20 | almalinux 8 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| guava20-javadoc | almalinux 8 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| guava20-testlib | almalinux 8 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| guice-assistedinject | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-bom | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-extensions | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-grapher | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-jmx | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-jndi | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-multibindings | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-parent | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-servlet | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-testlib | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| guice-throwingproviders | almalinux 8 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| hamcrest | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| hamcrest-core | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| hamcrest-demo | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| hamcrest-javadoc | almalinux 8 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| hawtjni | almalinux 8 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| hawtjni-javadoc | almalinux 8 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| hawtjni-runtime | almalinux 8 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| httpcomponents-client | almalinux 8 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| httpcomponents-client-cache | almalinux 8 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| httpcomponents-client-javadoc | almalinux 8 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| httpcomponents-core | almalinux 8 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 |
| httpcomponents-core-javadoc | almalinux 8 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 |
| httpcomponents-project | almalinux 8 | 9-2.module_el8.0.0+6004+2fc32706 |
| isorelax | almalinux 8 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 |
| isorelax-javadoc | almalinux 8 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 |
| ivy-local | almalinux 8 | 5.3.0-2.module_el8.0.0+6004+2fc32706 |
| jakarta-commons-httpclient | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| jakarta-commons-httpclient-demo | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| jakarta-commons-httpclient-javadoc | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| jakarta-commons-httpclient-manual | almalinux 8 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| jakarta-oro | almalinux 8 | 2.0.8-23.module_el8.0.0+6004+2fc32706 |
| jakarta-oro-javadoc | almalinux 8 | 2.0.8-23.module_el8.0.0+6004+2fc32706 |
| jansi | almalinux 8 | 1.17.1-1.module_el8.0.0+6004+2fc32706 |
| jansi-javadoc | almalinux 8 | 1.17.1-1.module_el8.0.0+6004+2fc32706 |
| jansi-native | almalinux 8 | 1.7-7.module_el8.0.0+6004+2fc32706 |
| jansi-native-javadoc | almalinux 8 | 1.7-7.module_el8.0.0+6004+2fc32706 |
| java_cup | almalinux 8 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| java_cup-javadoc | almalinux 8 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| java_cup-manual | almalinux 8 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| javacc | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| javacc-demo | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| javacc-javadoc | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| javacc-manual | almalinux 8 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| javacc-maven-plugin | almalinux 8 | 2.6-25.module_el8.0.0+6004+2fc32706 |
| javacc-maven-plugin-javadoc | almalinux 8 | 2.6-25.module_el8.0.0+6004+2fc32706 |
| javamail | almalinux 8 | 1.5.2-7.module_el8.0.0+6004+2fc32706 |
| javamail-javadoc | almalinux 8 | 1.5.2-7.module_el8.0.0+6004+2fc32706 |
| javapackages-filesystem | almalinux 8 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 |
| javapackages-local | almalinux 8 | 5.3.0-2.module_el8.0.0+6004+2fc32706 |
| javapackages-tools | almalinux 8 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 |
| javassist | almalinux 8 | 3.18.1-8.module_el8.0.0+6004+2fc32706 |
| javassist-javadoc | almalinux 8 | 3.18.1-8.module_el8.0.0+6004+2fc32706 |
| jaxen | almalinux 8 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| jaxen-demo | almalinux 8 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| jaxen-javadoc | almalinux 8 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| jboss-interceptors-1.2-api | almalinux 8 | 1.0.0-8.module_el8.0.0+6004+2fc32706 |
| jboss-interceptors-1.2-api-javadoc | almalinux 8 | 1.0.0-8.module_el8.0.0+6004+2fc32706 |
| jboss-parent | almalinux 8 | 20-4.module_el8.0.0+6004+2fc32706 |
| jcl-over-slf4j | almalinux 8 | 1.7.25-4.module_el8.0.0+6004+2fc32706 |
| jdepend | almalinux 8 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| jdepend-demo | almalinux 8 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| jdepend-javadoc | almalinux 8 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| jdependency | almalinux 8 | 1.2-2.module_el8.0.0+6004+2fc32706 |
| jdependency-javadoc | almalinux 8 | 1.2-2.module_el8.0.0+6004+2fc32706 |
| jdom | almalinux 8 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| jdom-demo | almalinux 8 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| jdom-javadoc | almalinux 8 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| jdom2 | almalinux 8 | 2.0.6-12.module_el8.0.0+6004+2fc32706 |
| jdom2-javadoc | almalinux 8 | 2.0.6-12.module_el8.0.0+6004+2fc32706 |
| jflex | almalinux 8 | 1.6.1-12.module_el8.0.0+6004+2fc32706 |
| jflex-javadoc | almalinux 8 | 1.6.1-12.module_el8.0.0+6004+2fc32706 |
| jline | almalinux 8 | 2.14.6-2.module_el8.0.0+6004+2fc32706 |
| jline-javadoc | almalinux 8 | 2.14.6-2.module_el8.0.0+6004+2fc32706 |
| jsch | almalinux 8 | 0.1.54-6.module_el8.0.0+6004+2fc32706 |
| jsch-javadoc | almalinux 8 | 0.1.54-6.module_el8.0.0+6004+2fc32706 |
| jsoup | almalinux 8 | 1.11.3-3.module_el8.0.0+6004+2fc32706 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2025-67030 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code | 8.8 | 0.0069 | None reported |
Showing 1 to 1 of 1
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.