Linux · 
Red Hat · Security advisory · July 18, 2026
Red Hat · Security advisory · July 18, 2026RHSA-2026:41948: Security update for 510 packages
RHSA-2026:41948, released July 18, 2026, fixes 1 CVE across 200 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0069
53rd percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ant | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-antlr | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-bcel | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-bsf | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-log4j | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-oro | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-regexp | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-resolver | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-apache-xalan2 | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-commons-logging | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-commons-net | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-contrib | RHEL 8 | 0:1.0-0.32.b3.module+el8.10.0+23274+27840b45 |
| ant-contrib-javadoc | RHEL 8 | 0:1.0-0.32.b3.module+el8.10.0+23274+27840b45 |
| ant-javadoc | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-javamail | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-jdepend | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-jmf | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-jsch | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-junit | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-lib | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-manual | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-swing | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-testutil | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| ant-xz | RHEL 8 | 0:1.10.5-1.module+el8.10.0+23274+27840b45 |
| antlr-C++ | RHEL 8 | 0:2.7.7-56.module+el8.10.0+23274+27840b45 |
| antlr-javadoc | RHEL 8 | 0:2.7.7-56.module+el8.10.0+23274+27840b45 |
| antlr-manual | RHEL 8 | 0:2.7.7-56.module+el8.10.0+23274+27840b45 |
| antlr-tool | RHEL 8 | 0:2.7.7-56.module+el8.10.0+23274+27840b45 |
| aopalliance | RHEL 8 | 0:1.0-17.module+el8.10.0+23274+27840b45 |
| aopalliance-javadoc | RHEL 8 | 0:1.0-17.module+el8.10.0+23274+27840b45 |
| apache-commons-beanutils | RHEL 8 | 0:1.9.3-5.module+el8.10.0+23274+27840b45 |
| apache-commons-beanutils-javadoc | RHEL 8 | 0:1.9.3-5.module+el8.10.0+23274+27840b45 |
| apache-commons-cli | RHEL 8 | 0:1.4-4.module+el8.10.0+23274+27840b45 |
| apache-commons-cli-javadoc | RHEL 8 | 0:1.4-4.module+el8.10.0+23274+27840b45 |
| apache-commons-codec | RHEL 8 | 0:1.11-3.module+el8.10.0+23274+27840b45 |
| apache-commons-codec-javadoc | RHEL 8 | 0:1.11-3.module+el8.10.0+23274+27840b45 |
| apache-commons-collections | RHEL 8 | 0:3.2.2-10.module+el8.10.0+23274+27840b45 |
| apache-commons-collections-javadoc | RHEL 8 | 0:3.2.2-10.module+el8.10.0+23274+27840b45 |
| apache-commons-collections-testframework | RHEL 8 | 0:3.2.2-10.module+el8.10.0+23274+27840b45 |
| apache-commons-compress | RHEL 8 | 0:1.18-1.module+el8.10.0+23274+27840b45 |
| apache-commons-compress-javadoc | RHEL 8 | 0:1.18-1.module+el8.10.0+23274+27840b45 |
| apache-commons-exec | RHEL 8 | 0:1.3-8.module+el8.10.0+23274+27840b45 |
| apache-commons-exec-javadoc | RHEL 8 | 0:1.3-8.module+el8.10.0+23274+27840b45 |
| apache-commons-io | RHEL 8 | 1:2.6-3.module+el8.10.0+23274+27840b45 |
| apache-commons-io-javadoc | RHEL 8 | 1:2.6-3.module+el8.10.0+23274+27840b45 |
| apache-commons-jxpath | RHEL 8 | 0:1.3-29.module+el8.10.0+23274+27840b45 |
| apache-commons-jxpath-javadoc | RHEL 8 | 0:1.3-29.module+el8.10.0+23274+27840b45 |
| apache-commons-lang | RHEL 8 | 0:2.6-21.module+el8.10.0+23274+27840b45 |
| apache-commons-lang-javadoc | RHEL 8 | 0:2.6-21.module+el8.10.0+23274+27840b45 |
| apache-commons-lang3 | RHEL 8 | 0:3.7-3.module+el8.10.0+23274+27840b45 |
| apache-commons-lang3-javadoc | RHEL 8 | 0:3.7-3.module+el8.10.0+23274+27840b45 |
| apache-commons-logging | RHEL 8 | 0:1.2-13.module+el8.10.0+23274+27840b45 |
| apache-commons-logging-javadoc | RHEL 8 | 0:1.2-13.module+el8.10.0+23274+27840b45 |
| apache-commons-net | RHEL 8 | 0:3.6-3.module+el8.10.0+23274+27840b45 |
| apache-commons-net-javadoc | RHEL 8 | 0:3.6-3.module+el8.10.0+23274+27840b45 |
| apache-commons-parent | RHEL 8 | 0:43-2.module+el8.10.0+23274+27840b45 |
| apache-ivy | RHEL 8 | 0:2.4.0-14.module+el8.10.0+23274+27840b45 |
| apache-ivy-javadoc | RHEL 8 | 0:2.4.0-14.module+el8.10.0+23274+27840b45 |
| apache-parent | RHEL 8 | 0:19-2.module+el8.10.0+23274+27840b45 |
| apache-resource-bundles | RHEL 8 | 0:2-20.module+el8.10.0+23274+27840b45 |
| aqute-bnd | RHEL 8 | 0:3.5.0-4.module+el8.10.0+23274+27840b45 |
| aqute-bnd-javadoc | RHEL 8 | 0:3.5.0-4.module+el8.10.0+23274+27840b45 |
| aqute-bndlib | RHEL 8 | 0:3.5.0-4.module+el8.10.0+23274+27840b45 |
| assertj-core | RHEL 8 | 0:3.8.0-2.module+el8.10.0+23274+27840b45 |
| assertj-core-javadoc | RHEL 8 | 0:3.8.0-2.module+el8.10.0+23274+27840b45 |
| atinject | RHEL 8 | 0:1-28.20100611svn86.module+el8.10.0+23274+27840b45 |
| atinject-javadoc | RHEL 8 | 0:1-28.20100611svn86.module+el8.10.0+23274+27840b45 |
| atinject-tck | RHEL 8 | 0:1-28.20100611svn86.module+el8.10.0+23274+27840b45 |
| bcel | RHEL 8 | 0:6.2-2.module+el8.10.0+23274+27840b45 |
| bcel-javadoc | RHEL 8 | 0:6.2-2.module+el8.10.0+23274+27840b45 |
| beust-jcommander | RHEL 8 | 0:1.71-5.module+el8.10.0+23274+27840b45 |
| beust-jcommander-javadoc | RHEL 8 | 0:1.71-5.module+el8.10.0+23274+27840b45 |
| bnd-maven-plugin | RHEL 8 | 0:3.5.0-4.module+el8.10.0+23274+27840b45 |
| bsf | RHEL 8 | 0:2.4.0-30.module+el8.10.0+23274+27840b45 |
| bsf-javadoc | RHEL 8 | 0:2.4.0-30.module+el8.10.0+23274+27840b45 |
| bsh | RHEL 8 | 0:2.0-13.b6.module+el8.10.0+23274+27840b45 |
| bsh-javadoc | RHEL 8 | 0:2.0-13.b6.module+el8.10.0+23274+27840b45 |
| bsh-manual | RHEL 8 | 0:2.0-13.b6.module+el8.10.0+23274+27840b45 |
| byaccj | RHEL 8 | 0:1.15-17.module+el8.10.0+23274+27840b45 |
| cal10n | RHEL 8 | 0:0.8.1-7.module+el8.10.0+23274+27840b45 |
| cal10n-javadoc | RHEL 8 | 0:0.8.1-7.module+el8.10.0+23274+27840b45 |
| cdi-api | RHEL 8 | 0:1.2-8.module+el8.10.0+23274+27840b45 |
| cdi-api-javadoc | RHEL 8 | 0:1.2-8.module+el8.10.0+23274+27840b45 |
| cglib | RHEL 8 | 0:3.2.4-7.module+el8.10.0+23274+27840b45 |
| cglib-javadoc | RHEL 8 | 0:3.2.4-7.module+el8.10.0+23274+27840b45 |
| easymock | RHEL 8 | 0:3.5-4.module+el8.10.0+23274+27840b45 |
| easymock-javadoc | RHEL 8 | 0:3.5-4.module+el8.10.0+23274+27840b45 |
| exec-maven-plugin | RHEL 8 | 0:1.6.0-3.module+el8.10.0+23274+27840b45 |
| exec-maven-plugin-javadoc | RHEL 8 | 0:1.6.0-3.module+el8.10.0+23274+27840b45 |
| felix-osgi-compendium | RHEL 8 | 0:1.4.0-26.module+el8.10.0+23274+27840b45 |
| felix-osgi-compendium-javadoc | RHEL 8 | 0:1.4.0-26.module+el8.10.0+23274+27840b45 |
| felix-osgi-core | RHEL 8 | 0:1.4.0-23.module+el8.10.0+23274+27840b45 |
| felix-osgi-core-javadoc | RHEL 8 | 0:1.4.0-23.module+el8.10.0+23274+27840b45 |
| felix-osgi-foundation | RHEL 8 | 0:1.2.0-23.module+el8.10.0+23274+27840b45 |
| felix-osgi-foundation-javadoc | RHEL 8 | 0:1.2.0-23.module+el8.10.0+23274+27840b45 |
| felix-parent | RHEL 8 | 0:4-5.module+el8.10.0+23274+27840b45 |
| felix-utils | RHEL 8 | 0:1.10.4-2.module+el8.10.0+23274+27840b45 |
| felix-utils-javadoc | RHEL 8 | 0:1.10.4-2.module+el8.10.0+23274+27840b45 |
| forge-parent | RHEL 8 | 0:38-11.module+el8.10.0+23274+27840b45 |
| fusesource-pom | RHEL 8 | 0:1.11-3.module+el8.10.0+23274+27840b45 |
| geronimo-annotation | RHEL 8 | 0:1.0-23.module+el8.10.0+23274+27840b45 |
| geronimo-annotation-javadoc | RHEL 8 | 0:1.0-23.module+el8.10.0+23274+27840b45 |
| geronimo-jms | RHEL 8 | 0:1.1.1-25.module+el8.10.0+23274+27840b45 |
| geronimo-jms-javadoc | RHEL 8 | 0:1.1.1-25.module+el8.10.0+23274+27840b45 |
| geronimo-jpa | RHEL 8 | 0:1.1.1-21.module+el8.10.0+23274+27840b45 |
| geronimo-jpa-javadoc | RHEL 8 | 0:1.1.1-21.module+el8.10.0+23274+27840b45 |
| geronimo-parent-poms | RHEL 8 | 0:1.6-25.module+el8.10.0+23274+27840b45 |
| glassfish-annotation-api | RHEL 8 | 0:1.2-13.module+el8.10.0+23274+27840b45 |
| glassfish-annotation-api-javadoc | RHEL 8 | 0:1.2-13.module+el8.10.0+23274+27840b45 |
| glassfish-el | RHEL 8 | 0:3.0.1-0.7.b08.module+el8.10.0+23274+27840b45 |
| glassfish-el-api | RHEL 8 | 0:3.0.1-0.7.b08.module+el8.10.0+23274+27840b45 |
| glassfish-el-javadoc | RHEL 8 | 0:3.0.1-0.7.b08.module+el8.10.0+23274+27840b45 |
| glassfish-jsp-api | RHEL 8 | 0:2.3.2-0.9.b01.module+el8.10.0+23274+27840b45 |
| glassfish-jsp-api-javadoc | RHEL 8 | 0:2.3.2-0.9.b01.module+el8.10.0+23274+27840b45 |
| glassfish-legal | RHEL 8 | 0:1.1-11.module+el8.10.0+23274+27840b45 |
| glassfish-master-pom | RHEL 8 | 0:8-11.module+el8.10.0+23274+27840b45 |
| glassfish-servlet-api | RHEL 8 | 0:3.1.0-14.module+el8.10.0+23274+27840b45 |
| glassfish-servlet-api-javadoc | RHEL 8 | 0:3.1.0-14.module+el8.10.0+23274+27840b45 |
| google-guice | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| google-guice-javadoc | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guava20 | RHEL 8 | 0:20.0-8.module+el8.10.0+23274+27840b45 |
| guava20-javadoc | RHEL 8 | 0:20.0-8.module+el8.10.0+23274+27840b45 |
| guava20-testlib | RHEL 8 | 0:20.0-8.module+el8.10.0+23274+27840b45 |
| guice-assistedinject | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-bom | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-extensions | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-grapher | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-jmx | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-jndi | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-multibindings | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-parent | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-servlet | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-testlib | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| guice-throwingproviders | RHEL 8 | 0:4.1-11.module+el8.10.0+23274+27840b45 |
| hamcrest | RHEL 8 | 0:1.3-23.module+el8.10.0+23274+27840b45 |
| hamcrest-core | RHEL 8 | 0:1.3-23.module+el8.10.0+23274+27840b45 |
| hamcrest-demo | RHEL 8 | 0:1.3-23.module+el8.10.0+23274+27840b45 |
| hamcrest-javadoc | RHEL 8 | 0:1.3-23.module+el8.10.0+23274+27840b45 |
| hawtjni | RHEL 8 | 0:1.16-2.module+el8.10.0+23274+27840b45 |
| hawtjni-javadoc | RHEL 8 | 0:1.16-2.module+el8.10.0+23274+27840b45 |
| hawtjni-runtime | RHEL 8 | 0:1.16-2.module+el8.10.0+23274+27840b45 |
| httpcomponents-client | RHEL 8 | 0:4.5.5-4.module+el8.10.0+23274+27840b45 |
| httpcomponents-client-cache | RHEL 8 | 0:4.5.5-4.module+el8.10.0+23274+27840b45 |
| httpcomponents-client-javadoc | RHEL 8 | 0:4.5.5-4.module+el8.10.0+23274+27840b45 |
| httpcomponents-core | RHEL 8 | 0:4.4.10-4.module+el8.10.0+23274+27840b45 |
| httpcomponents-core-javadoc | RHEL 8 | 0:4.4.10-4.module+el8.10.0+23274+27840b45 |
| httpcomponents-project | RHEL 8 | 0:9-2.module+el8.10.0+23274+27840b45 |
| isorelax | RHEL 8 | 1:0-0.23.release20050331.module+el8.10.0+23274+27840b45 |
| isorelax-javadoc | RHEL 8 | 1:0-0.23.release20050331.module+el8.10.0+23274+27840b45 |
| ivy-local | RHEL 8 | 0:5.3.0-2.module+el8.10.0+23274+27840b45 |
| jakarta-commons-httpclient | RHEL 8 | 1:3.1-28.module+el8.10.0+23274+27840b45 |
| jakarta-commons-httpclient-demo | RHEL 8 | 1:3.1-28.module+el8.10.0+23274+27840b45 |
| jakarta-commons-httpclient-javadoc | RHEL 8 | 1:3.1-28.module+el8.10.0+23274+27840b45 |
| jakarta-commons-httpclient-manual | RHEL 8 | 1:3.1-28.module+el8.10.0+23274+27840b45 |
| jakarta-oro | RHEL 8 | 0:2.0.8-23.module+el8.10.0+23274+27840b45 |
| jakarta-oro-javadoc | RHEL 8 | 0:2.0.8-23.module+el8.10.0+23274+27840b45 |
| jansi | RHEL 8 | 0:1.17.1-1.module+el8.10.0+23274+27840b45 |
| jansi-javadoc | RHEL 8 | 0:1.17.1-1.module+el8.10.0+23274+27840b45 |
| jansi-native | RHEL 8 | 0:1.7-7.module+el8.10.0+23274+27840b45 |
| jansi-native-javadoc | RHEL 8 | 0:1.7-7.module+el8.10.0+23274+27840b45 |
| java_cup | RHEL 8 | 1:0.11b-8.module+el8.10.0+23274+27840b45 |
| java_cup-javadoc | RHEL 8 | 1:0.11b-8.module+el8.10.0+23274+27840b45 |
| java_cup-manual | RHEL 8 | 1:0.11b-8.module+el8.10.0+23274+27840b45 |
| javacc | RHEL 8 | 0:7.0.2-6.module+el8.10.0+23274+27840b45 |
| javacc-demo | RHEL 8 | 0:7.0.2-6.module+el8.10.0+23274+27840b45 |
| javacc-javadoc | RHEL 8 | 0:7.0.2-6.module+el8.10.0+23274+27840b45 |
| javacc-manual | RHEL 8 | 0:7.0.2-6.module+el8.10.0+23274+27840b45 |
| javacc-maven-plugin | RHEL 8 | 0:2.6-25.module+el8.10.0+23274+27840b45 |
| javacc-maven-plugin-javadoc | RHEL 8 | 0:2.6-25.module+el8.10.0+23274+27840b45 |
| javamail | RHEL 8 | 0:1.5.2-7.module+el8.10.0+23274+27840b45 |
| javamail-javadoc | RHEL 8 | 0:1.5.2-7.module+el8.10.0+23274+27840b45 |
| javapackages-filesystem | RHEL 8 | 0:5.3.0-2.module+el8.10.0+23274+27840b45 |
| javapackages-local | RHEL 8 | 0:5.3.0-2.module+el8.10.0+23274+27840b45 |
| javapackages-tools | RHEL 8 | 0:5.3.0-2.module+el8.10.0+23274+27840b45 |
| javassist | RHEL 8 | 0:3.18.1-8.module+el8.10.0+23274+27840b45 |
| javassist-javadoc | RHEL 8 | 0:3.18.1-8.module+el8.10.0+23274+27840b45 |
| jaxen | RHEL 8 | 0:1.1.6-18.module+el8.10.0+23274+27840b45 |
| jaxen-demo | RHEL 8 | 0:1.1.6-18.module+el8.10.0+23274+27840b45 |
| jaxen-javadoc | RHEL 8 | 0:1.1.6-18.module+el8.10.0+23274+27840b45 |
| jboss-interceptors-1.2-api | RHEL 8 | 0:1.0.0-8.module+el8.10.0+23274+27840b45 |
| jboss-interceptors-1.2-api-javadoc | RHEL 8 | 0:1.0.0-8.module+el8.10.0+23274+27840b45 |
| jboss-parent | RHEL 8 | 0:20-4.module+el8.10.0+23274+27840b45 |
| jcl-over-slf4j | RHEL 8 | 0:1.7.25-4.module+el8.10.0+23274+27840b45 |
| jdepend | RHEL 8 | 0:2.9.1-18.module+el8.10.0+23274+27840b45 |
| jdepend-demo | RHEL 8 | 0:2.9.1-18.module+el8.10.0+23274+27840b45 |
| jdepend-javadoc | RHEL 8 | 0:2.9.1-18.module+el8.10.0+23274+27840b45 |
| jdependency | RHEL 8 | 0:1.2-2.module+el8.10.0+23274+27840b45 |
| jdependency-javadoc | RHEL 8 | 0:1.2-2.module+el8.10.0+23274+27840b45 |
| jdom | RHEL 8 | 0:1.1.3-17.module+el8.10.0+23274+27840b45 |
| jdom-demo | RHEL 8 | 0:1.1.3-17.module+el8.10.0+23274+27840b45 |
| jdom-javadoc | RHEL 8 | 0:1.1.3-17.module+el8.10.0+23274+27840b45 |
| jdom2 | RHEL 8 | 0:2.0.6-12.module+el8.10.0+23274+27840b45 |
| jdom2-javadoc | RHEL 8 | 0:2.0.6-12.module+el8.10.0+23274+27840b45 |
| jflex | RHEL 8 | 0:1.6.1-12.module+el8.10.0+23274+27840b45 |
| jflex-javadoc | RHEL 8 | 0:1.6.1-12.module+el8.10.0+23274+27840b45 |
| jline | RHEL 8 | 0:2.14.6-2.module+el8.10.0+23274+27840b45 |
| jline-javadoc | RHEL 8 | 0:2.14.6-2.module+el8.10.0+23274+27840b45 |
| jsch | RHEL 8 | 0:0.1.54-6.module+el8.10.0+23274+27840b45 |
| jsch-javadoc | RHEL 8 | 0:0.1.54-6.module+el8.10.0+23274+27840b45 |
| jsoup | RHEL 8 | 0:1.11.3-3.module+el8.10.0+23274+27840b45 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2025-67030 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code | 8.8 | 0.0069 | None reported |
Showing 1 to 1 of 1
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.