Linux · Red Hat · Security advisory · May 30, 2022

RHSA-2022:4798: Security update for 42 packages

RHSA-2022:4798, released May 30, 2022, fixes 1 CVE across 42 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0442
91st percentile

Fixed package versions

ProductReleaseFixed in
aopallianceRHEL 80:1.0-17.module+el8+2452+b359bfcd
apache-commons-cliRHEL 80:1.4-4.module+el8+2452+b359bfcd
apache-commons-codecRHEL 80:1.11-3.module+el8+2452+b359bfcd
apache-commons-ioRHEL 81:2.6-3.module+el8+2452+b359bfcd
apache-commons-lang3RHEL 80:3.7-3.module+el8+2452+b359bfcd
apache-commons-loggingRHEL 80:1.2-13.module+el8+2452+b359bfcd
atinjectRHEL 80:1-28.20100611svn86.module+el8+2452+b359bfcd
cdi-apiRHEL 80:1.2-8.module+el8+2452+b359bfcd
geronimo-annotationRHEL 80:1.0-23.module+el8+2452+b359bfcd
glassfish-el-apiRHEL 80:3.0.1-0.7.b08.module+el8+2452+b359bfcd
google-guiceRHEL 80:4.1-11.module+el8+2452+b359bfcd
guava20RHEL 80:20.0-8.module+el8+2452+b359bfcd
hawtjni-runtimeRHEL 80:1.16-2.module+el8+2452+b359bfcd
httpcomponents-clientRHEL 80:4.5.5-5.module+el8.6.0+13298+7b5243c0
httpcomponents-coreRHEL 80:4.4.10-3.module+el8+2452+b359bfcd
jansiRHEL 80:1.17.1-1.module+el8+2452+b359bfcd
jansi-nativeRHEL 80:1.7-7.module+el8+2452+b359bfcd
jboss-interceptors-1.2-apiRHEL 80:1.0.0-8.module+el8+2452+b359bfcd
jcl-over-slf4jRHEL 80:1.7.25-4.module+el8+2452+b359bfcd
jsoupRHEL 80:1.11.3-3.module+el8+2452+b359bfcd
mavenRHEL 81:3.5.4-5.module+el8+2452+b359bfcd
maven-libRHEL 81:3.5.4-5.module+el8+2452+b359bfcd
maven-resolver-apiRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-connector-basicRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-implRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-spiRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-transport-wagonRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-resolver-utilRHEL 81:1.1.1-2.module+el8+2452+b359bfcd
maven-shared-utilsRHEL 80:3.2.1-0.2.module+el8.6.0+15045+b1156105
maven-wagon-fileRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
maven-wagon-httpRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
maven-wagon-http-sharedRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
maven-wagon-provider-apiRHEL 80:3.1.0-1.module+el8+2452+b359bfcd
plexus-cipherRHEL 80:1.7-14.module+el8+2452+b359bfcd
plexus-classworldsRHEL 80:2.5.2-9.module+el8+2452+b359bfcd
plexus-containers-component-annotationsRHEL 80:1.7.1-8.module+el8+2452+b359bfcd
plexus-interpolationRHEL 80:1.22-9.module+el8+2452+b359bfcd
plexus-sec-dispatcherRHEL 80:1.4-26.module+el8+2452+b359bfcd
plexus-utilsRHEL 80:3.1.0-3.module+el8+2452+b359bfcd
sisu-injectRHEL 81:0.3.3-6.module+el8+2452+b359bfcd
sisu-plexusRHEL 81:0.3.3-6.module+el8+2452+b359bfcd
slf4jRHEL 80:1.7.25-4.module+el8+2452+b359bfcd

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-29599 libmaven-shared-utils-java: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings witho...9.8 0.0442 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.