Linux · Oracle Linux · Security advisory · July 31, 2026

ELSA-2026-41948: Security update for 419 packages

ELSA-2026-41948, released July 31, 2026, fixes 1 CVE across 200 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0069
53rd percentile

Fixed package versions

ProductReleaseFixed in
ant-antlrol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-bcelol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-bsfol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-log4jol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-orool 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-regexpol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-resolverol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-apache-xalan2ol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-commons-loggingol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-commons-netol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-contribol 80:1.0-0.32.b3.module+el8.10.0+90622+accb6b48
ant-contrib-javadocol 80:1.0-0.32.b3.module+el8.10.0+90622+accb6b48
ant-javadocol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-javamailol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-jdependol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-jmfol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-jschol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-junitol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-manualol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-swingol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-testutilol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
ant-xzol 80:1.10.5-1.module+el8.10.0+90622+accb6b48
antlr-C++ol 80:2.7.7-56.module+el8.10.0+90622+accb6b48
antlr-javadocol 80:2.7.7-56.module+el8.10.0+90622+accb6b48
antlr-manualol 80:2.7.7-56.module+el8.10.0+90622+accb6b48
antlr-toolol 80:2.7.7-56.module+el8.10.0+90622+accb6b48
aopalliance-javadocol 80:1.0-17.module+el8.10.0+90622+accb6b48
apache-commons-beanutilsol 80:1.9.3-5.module+el8.10.0+90622+accb6b48
apache-commons-beanutils-javadocol 80:1.9.3-5.module+el8.10.0+90622+accb6b48
apache-commons-cli-javadocol 80:1.4-4.module+el8.10.0+90622+accb6b48
apache-commons-codec-javadocol 80:1.11-3.module+el8.10.0+90622+accb6b48
apache-commons-compress-javadocol 80:1.18-1.module+el8.10.0+90622+accb6b48
apache-commons-execol 80:1.3-8.module+el8.10.0+90622+accb6b48
apache-commons-exec-javadocol 80:1.3-8.module+el8.10.0+90622+accb6b48
apache-commons-io-javadocol 81:2.6-3.module+el8.10.0+90622+accb6b48
apache-commons-jxpath-javadocol 80:1.3-29.module+el8.10.0+90622+accb6b48
apache-commons-lang3-javadocol 80:3.7-3.module+el8.10.0+90622+accb6b48
apache-commons-logging-javadocol 80:1.2-13.module+el8.10.0+90622+accb6b48
apache-commons-net-javadocol 80:3.6-3.module+el8.10.0+90622+accb6b48
apache-commons-parentol 80:43-2.module+el8.10.0+90622+accb6b48
apache-ivyol 80:2.4.0-14.module+el8.10.0+90622+accb6b48
apache-ivy-javadocol 80:2.4.0-14.module+el8.10.0+90622+accb6b48
apache-parentol 80:19-2.module+el8.10.0+90622+accb6b48
apache-resource-bundlesol 80:2-20.module+el8.10.0+90622+accb6b48
aqute-bndol 80:3.5.0-4.module+el8.10.0+90622+accb6b48
aqute-bnd-javadocol 80:3.5.0-4.module+el8.10.0+90622+accb6b48
aqute-bndlibol 80:3.5.0-4.module+el8.10.0+90622+accb6b48
assertj-coreol 80:3.8.0-2.module+el8.10.0+90622+accb6b48
assertj-core-javadocol 80:3.8.0-2.module+el8.10.0+90622+accb6b48
atinject-javadocol 80:1-28.20100611svn86.module+el8.10.0+90622+accb6b48
atinject-tckol 80:1-28.20100611svn86.module+el8.10.0+90622+accb6b48
bcelol 80:6.2-2.module+el8.10.0+90622+accb6b48
bcel-javadocol 80:6.2-2.module+el8.10.0+90622+accb6b48
beust-jcommanderol 80:1.71-5.module+el8.10.0+90622+accb6b48
beust-jcommander-javadocol 80:1.71-5.module+el8.10.0+90622+accb6b48
bnd-maven-pluginol 80:3.5.0-4.module+el8.10.0+90622+accb6b48
bsfol 80:2.4.0-30.module+el8.10.0+90622+accb6b48
bsf-javadocol 80:2.4.0-30.module+el8.10.0+90622+accb6b48
bshol 80:2.0-13.b6.module+el8.10.0+90622+accb6b48
bsh-javadocol 80:2.0-13.b6.module+el8.10.0+90622+accb6b48
bsh-manualol 80:2.0-13.b6.module+el8.10.0+90622+accb6b48
byaccjol 80:1.15-17.module+el8.10.0+90622+accb6b48
cal10nol 80:0.8.1-7.module+el8.10.0+90622+accb6b48
cal10n-javadocol 80:0.8.1-7.module+el8.10.0+90622+accb6b48
cdi-api-javadocol 80:1.2-8.module+el8.10.0+90622+accb6b48
cglibol 80:3.2.4-7.module+el8.10.0+90622+accb6b48
cglib-javadocol 80:3.2.4-7.module+el8.10.0+90622+accb6b48
easymockol 80:3.5-4.module+el8.10.0+90622+accb6b48
easymock-javadocol 80:3.5-4.module+el8.10.0+90622+accb6b48
exec-maven-pluginol 80:1.6.0-3.module+el8.10.0+90622+accb6b48
exec-maven-plugin-javadocol 80:1.6.0-3.module+el8.10.0+90622+accb6b48
felix-osgi-compendiumol 80:1.4.0-26.module+el8.10.0+90622+accb6b48
felix-osgi-compendium-javadocol 80:1.4.0-26.module+el8.10.0+90622+accb6b48
felix-osgi-coreol 80:1.4.0-23.module+el8.10.0+90622+accb6b48
felix-osgi-core-javadocol 80:1.4.0-23.module+el8.10.0+90622+accb6b48
felix-osgi-foundationol 80:1.2.0-23.module+el8.10.0+90622+accb6b48
felix-osgi-foundation-javadocol 80:1.2.0-23.module+el8.10.0+90622+accb6b48
felix-parentol 80:4-5.module+el8.10.0+90622+accb6b48
felix-utilsol 80:1.10.4-2.module+el8.10.0+90622+accb6b48
felix-utils-javadocol 80:1.10.4-2.module+el8.10.0+90622+accb6b48
forge-parentol 80:38-11.module+el8.10.0+90622+accb6b48
fusesource-pomol 80:1.11-3.module+el8.10.0+90622+accb6b48
geronimo-annotation-javadocol 80:1.0-23.module+el8.10.0+90622+accb6b48
geronimo-jmsol 80:1.1.1-25.module+el8.10.0+90622+accb6b48
geronimo-jms-javadocol 80:1.1.1-25.module+el8.10.0+90622+accb6b48
geronimo-jpaol 80:1.1.1-21.module+el8.10.0+90622+accb6b48
geronimo-jpa-javadocol 80:1.1.1-21.module+el8.10.0+90622+accb6b48
geronimo-parent-pomsol 80:1.6-25.module+el8.10.0+90622+accb6b48
glassfish-annotation-api-javadocol 80:1.2-13.module+el8.10.0+90622+accb6b48
glassfish-el-javadocol 80:3.0.1-0.7.b08.module+el8.10.0+90622+accb6b48
glassfish-jsp-api-javadocol 80:2.3.2-0.9.b01.module+el8.10.0+90622+accb6b48
glassfish-legalol 80:1.1-11.module+el8.10.0+90622+accb6b48
glassfish-master-pomol 80:8-11.module+el8.10.0+90622+accb6b48
glassfish-servlet-api-javadocol 80:3.1.0-14.module+el8.10.0+90622+accb6b48
google-guice-javadocol 80:4.1-11.module+el8.10.0+90622+accb6b48
guava20-javadocol 80:20.0-8.module+el8.10.0+90622+accb6b48
guava20-testlibol 80:20.0-8.module+el8.10.0+90622+accb6b48
guice-assistedinjectol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-bomol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-extensionsol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-grapherol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-jmxol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-jndiol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-multibindingsol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-parentol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-servletol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-testlibol 80:4.1-11.module+el8.10.0+90622+accb6b48
guice-throwingprovidersol 80:4.1-11.module+el8.10.0+90622+accb6b48
hamcrest-demool 80:1.3-23.module+el8.10.0+90622+accb6b48
hamcrest-javadocol 80:1.3-23.module+el8.10.0+90622+accb6b48
hawtjniol 80:1.16-2.module+el8.10.0+90622+accb6b48
hawtjni-javadocol 80:1.16-2.module+el8.10.0+90622+accb6b48
httpcomponents-client-cacheol 80:4.5.5-4.module+el8.10.0+90622+accb6b48
httpcomponents-client-javadocol 80:4.5.5-4.module+el8.10.0+90622+accb6b48
httpcomponents-core-javadocol 80:4.4.10-4.module+el8.10.0+90622+accb6b48
httpcomponents-projectol 80:9-2.module+el8.10.0+90622+accb6b48
isorelaxol 81:0-0.23.release20050331.module+el8.10.0+90622+accb6b48
isorelax-javadocol 81:0-0.23.release20050331.module+el8.10.0+90622+accb6b48
ivy-localol 80:5.3.0-2.module+el8.10.0+90622+accb6b48
jakarta-orool 80:2.0.8-23.module+el8.10.0+90622+accb6b48
jakarta-oro-javadocol 80:2.0.8-23.module+el8.10.0+90622+accb6b48
jansi-javadocol 80:1.17.1-1.module+el8.10.0+90622+accb6b48
jansi-native-javadocol 80:1.7-7.module+el8.10.0+90622+accb6b48
java_cupol 81:0.11b-8.module+el8.10.0+90622+accb6b48
java_cup-javadocol 81:0.11b-8.module+el8.10.0+90622+accb6b48
java_cup-manualol 81:0.11b-8.module+el8.10.0+90622+accb6b48
javaccol 80:7.0.2-6.module+el8.10.0+90622+accb6b48
javacc-demool 80:7.0.2-6.module+el8.10.0+90622+accb6b48
javacc-javadocol 80:7.0.2-6.module+el8.10.0+90622+accb6b48
javacc-manualol 80:7.0.2-6.module+el8.10.0+90622+accb6b48
javacc-maven-pluginol 80:2.6-25.module+el8.10.0+90622+accb6b48
javacc-maven-plugin-javadocol 80:2.6-25.module+el8.10.0+90622+accb6b48
javamailol 80:1.5.2-7.module+el8.10.0+90622+accb6b48
javamail-javadocol 80:1.5.2-7.module+el8.10.0+90622+accb6b48
javapackages-localol 80:5.3.0-2.module+el8.10.0+90622+accb6b48
jaxenol 80:1.1.6-18.module+el8.10.0+90622+accb6b48
jaxen-demool 80:1.1.6-18.module+el8.10.0+90622+accb6b48
jaxen-javadocol 80:1.1.6-18.module+el8.10.0+90622+accb6b48
jboss-interceptors-1.2-api-javadocol 80:1.0.0-8.module+el8.10.0+90622+accb6b48
jboss-parentol 80:20-4.module+el8.10.0+90622+accb6b48
jdependol 80:2.9.1-18.module+el8.10.0+90622+accb6b48
jdepend-demool 80:2.9.1-18.module+el8.10.0+90622+accb6b48
jdepend-javadocol 80:2.9.1-18.module+el8.10.0+90622+accb6b48
jdependencyol 80:1.2-2.module+el8.10.0+90622+accb6b48
jdependency-javadocol 80:1.2-2.module+el8.10.0+90622+accb6b48
jdomol 80:1.1.3-17.module+el8.10.0+90622+accb6b48
jdom-demool 80:1.1.3-17.module+el8.10.0+90622+accb6b48
jdom-javadocol 80:1.1.3-17.module+el8.10.0+90622+accb6b48
jdom2ol 80:2.0.6-12.module+el8.10.0+90622+accb6b48
jdom2-javadocol 80:2.0.6-12.module+el8.10.0+90622+accb6b48
jflexol 80:1.6.1-12.module+el8.10.0+90622+accb6b48
jflex-javadocol 80:1.6.1-12.module+el8.10.0+90622+accb6b48
jline-javadocol 80:2.14.6-2.module+el8.10.0+90622+accb6b48
jsch-javadocol 80:0.1.54-6.module+el8.10.0+90622+accb6b48
jsoup-javadocol 80:1.11.3-3.module+el8.10.0+90622+accb6b48
jsr-305-javadocol 80:0-0.22.20130910svn.module+el8.10.0+90622+accb6b48
jtidyol 82:1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48
jtidy-javadocol 82:1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48
jul-to-slf4jol 80:1.7.25-4.module+el8.10.0+90622+accb6b48
junit-javadocol 81:4.12-9.module+el8.10.0+90622+accb6b48
junit-manualol 81:4.12-9.module+el8.10.0+90622+accb6b48
jvnet-parentol 80:4-10.module+el8.10.0+90622+accb6b48
jzlib-demool 80:1.1.3-8.module+el8.10.0+90622+accb6b48
jzlib-javadocol 80:1.1.3-8.module+el8.10.0+90622+accb6b48
log4j-over-slf4jol 80:1.7.25-4.module+el8.10.0+90622+accb6b48
maven-antrun-pluginol 80:1.8-6.module+el8.10.0+90622+accb6b48
maven-antrun-plugin-javadocol 80:1.8-6.module+el8.10.0+90622+accb6b48
maven-archiverol 80:3.2.0-2.module+el8.10.0+90622+accb6b48
maven-archiver-javadocol 80:3.2.0-2.module+el8.10.0+90622+accb6b48
maven-artifactol 80:2.2.1-59.module+el8.10.0+90622+accb6b48
maven-artifact-managerol 80:2.2.1-59.module+el8.10.0+90622+accb6b48
maven-artifact-resolverol 81:1.0-18.module+el8.10.0+90622+accb6b48
maven-artifact-resolver-javadocol 81:1.0-18.module+el8.10.0+90622+accb6b48
maven-artifact-transferol 81:0.9.0-4.module+el8.10.0+90622+accb6b48
maven-artifact-transfer-javadocol 81:0.9.0-4.module+el8.10.0+90622+accb6b48
maven-assembly-pluginol 80:3.1.0-3.module+el8.10.0+90622+accb6b48
maven-assembly-plugin-javadocol 80:3.1.0-3.module+el8.10.0+90622+accb6b48
maven-cal10n-pluginol 80:0.8.1-7.module+el8.10.0+90622+accb6b48
maven-clean-pluginol 80:3.0.0-5.module+el8.10.0+90622+accb6b48
maven-clean-plugin-javadocol 80:3.0.0-5.module+el8.10.0+90622+accb6b48
maven-common-artifact-filtersol 80:3.0.1-4.module+el8.10.0+90622+accb6b48
maven-common-artifact-filters-javadocol 80:3.0.1-4.module+el8.10.0+90622+accb6b48
maven-compiler-pluginol 80:3.7.0-2.module+el8.10.0+90622+accb6b48
maven-compiler-plugin-javadocol 80:3.7.0-2.module+el8.10.0+90622+accb6b48
maven-dependency-analyzerol 80:1.8-2.module+el8.10.0+90622+accb6b48
maven-dependency-analyzer-javadocol 80:1.8-2.module+el8.10.0+90622+accb6b48
maven-dependency-pluginol 80:3.0.2-2.module+el8.10.0+90622+accb6b48
maven-dependency-plugin-javadocol 80:3.0.2-2.module+el8.10.0+90622+accb6b48
maven-dependency-treeol 80:3.0-5.module+el8.10.0+90622+accb6b48
maven-dependency-tree-javadocol 80:3.0-5.module+el8.10.0+90622+accb6b48
maven-doxiaol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-coreol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-javadocol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-logging-apiol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-module-aptol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-module-confluenceol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-module-docbook-simpleol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-module-fmlol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-module-latexol 80:1.7-8.module+el8.10.0+90622+accb6b48
maven-doxia-module-rtfol 80:1.7-8.module+el8.10.0+90622+accb6b48

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code8.8 0.0069 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.