Linux · Red Hat · Security advisory · May 10, 2022

RHSA-2022:1861: Security update for 42 packages

RHSA-2022:1861, released May 10, 2022, fixes 1 CVE across 42 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
5.3
Base score, 0 to 10
Highest EPSS
0.0903
95th percentile

Fixed package versions

ProductReleaseFixed in
aopallianceRHEL 80:1.0-17.module+el8+2452+b359bfcd
apache-commons-cliRHEL 80:1.4-4.module+el8+2452+b359bfcd
apache-commons-codecRHEL 80:1.11-3.module+el8+2452+b359bfcd
apache-commons-ioRHEL 81:2.6-3.module+el8+2452+b359bfcd
apache-commons-lang3RHEL 80:3.7-3.module+el8+2452+b359bfcd
apache-commons-loggingRHEL 80:1.2-13.module+el8+2452+b359bfcd
atinjectRHEL 80:1-28.20100611svn86.module+el8+2452+b359bfcd
cdi-apiRHEL 80:1.2-8.module+el8+2452+b359bfcd
geronimo-annotationRHEL 80:1.0-23.module+el8+2452+b359bfcd
glassfish-el-apiRHEL 80:3.0.1-0.7.b08.module+el8+2452+b359bfcd
google-guiceRHEL 80:4.1-11.module+el8+2452+b359bfcd
guava20RHEL 80:20.0-8.module+el8+2452+b359bfcd
hawtjni-runtimeRHEL 80:1.16-2.module+el8+2452+b359bfcd
httpcomponents-clientRHEL 80:4.5.5-5.module+el8.6.0+13298+7b5243c0
httpcomponents-coreRHEL 80:4.4.10-3.module+el8+2452+b359bfcd
jansiRHEL 80:1.17.1-1.module+el8+2452+b359bfcd
jansi-nativeRHEL 80:1.7-7.module+el8+2452+b359bfcd
jboss-interceptors-1.2-apiRHEL 80:1.0.0-8.module+el8+2452+b359bfcd
jcl-over-slf4jRHEL 80:1.7.25-4.module+el8+2452+b359bfcd
jsoupRHEL 80:1.11.3-3.module+el8+2452+b359bfcd
mavenRHEL 81:3.5.4-5.module+el8+2452+b359bfcd
maven-libRHEL 81:3.5.4-5.module+el8+2452+b359bfcd
maven-resolver-apiRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-connector-basicRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-implRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-spiRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-transport-wagonRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-utilRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-shared-utilsRHEL 80:3.2.1-0.1.module+el8+2452+b359bfcd
maven-wagon-fileRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
maven-wagon-httpRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
maven-wagon-http-sharedRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
maven-wagon-provider-apiRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
plexus-cipherRHEL 80:1.7-14.module+el8+2452+b359bfcd
plexus-classworldsRHEL 80:2.5.2-9.module+el8+2452+b359bfcd
plexus-containers-component-annotationsRHEL 80:1.7.1-8.module+el8+2452+b359bfcd
plexus-interpolationRHEL 80:1.22-9.module+el8+2452+b359bfcd
plexus-sec-dispatcherRHEL 80:1.4-26.module+el8+2452+b359bfcd
plexus-utilsRHEL 80:3.1.0-3.module+el8+2452+b359bfcd
sisu-injectRHEL 81:0.3.3-6.module+el8+2452+b359bfcd
sisu-plexusRHEL 81:0.3.3-6.module+el8+2452+b359bfcd
slf4jRHEL 80:1.7.25-4.module+el8+2452+b359bfcd

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2020-13956 httpcomponents-client: This update for httpcomponents-client, httpcomponents-core fixes the following issues: httpcomponents-client: - Up...5.3 0.0903 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.