[Apollo] Advisories Statistics light light Login

RLSA-2026:38500

Security Mirrored from RHSA-2026:38500
Issued at: 2026-07-13
Updated at: 2026-07-14

Synopsis

Important: maven:3.9 security update



Description

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2451409

CVEs

CVE-2025-67030

Affected packages

Rocky Linux 9 x86_64 - AppStream

aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.noarch.rpm aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.src.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.noarch.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.src.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.noarch.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.src.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.noarch.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.src.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.noarch.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.src.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.src.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.x86_64.rpm jcl-over-slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.src.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.src.rpm maven-lib-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk11-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk17-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk21-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk25-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk8-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.src.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.src.rpm maven-unbound-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-component-annotations-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.src.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.noarch.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.src.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.src.rpm

Rocky Linux 9 aarch64 - AppStream

aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.noarch.rpm aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.src.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.noarch.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.src.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.noarch.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.src.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.noarch.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.src.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.noarch.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.src.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.aarch64.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.src.rpm jcl-over-slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.src.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.src.rpm maven-lib-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk11-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk17-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk21-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk25-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk8-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.src.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.src.rpm maven-unbound-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-component-annotations-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.src.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.noarch.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.src.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.src.rpm

Rocky Linux 9 s390x - AppStream

aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.noarch.rpm aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.src.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.noarch.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.src.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.noarch.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.src.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.noarch.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.src.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.noarch.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.src.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.s390x.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.src.rpm jcl-over-slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.src.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.src.rpm maven-lib-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk11-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk17-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk21-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk25-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk8-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.src.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.src.rpm maven-unbound-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-component-annotations-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.src.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.noarch.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.src.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.src.rpm

Rocky Linux 9 ppc64le - AppStream

aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.noarch.rpm aopalliance-0:1.0-51.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-cli-0:1.9.0-4.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-codec-0:1.17.1-8.module+el9.7.0+40002+8e3c44a9.src.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm apache-commons-io-1:2.16.1-9.module+el9.7.0+40002+8e3c44a9.src.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.noarch.rpm atinject-0:1.0.5-14.module+el9.7.0+40002+8e3c44a9.src.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.noarch.rpm google-guice-0:5.1.0-23.module+el9.7.0+40002+8e3c44a9.src.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.noarch.rpm guava-0:33.3.0-5.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-client-0:4.5.14-21.module+el9.7.0+40002+8e3c44a9.src.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.noarch.rpm httpcomponents-core-0:4.4.16-21.module+el9.7.0+40002+8e3c44a9.src.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.noarch.rpm jakarta-annotations-0:1.3.5-38.module+el9.7.0+40002+8e3c44a9.src.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.ppc64le.rpm jansi-0:2.4.1-12.module+el9.7.0+40002+8e3c44a9.src.rpm jcl-over-slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.noarch.rpm jsr-305-0:3.0.2-36.module+el9.7.0+40002+8e3c44a9.src.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-1:3.9.9-13.module+el9.8.0+40095+a2161487.src.rpm maven-lib-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk11-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk17-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk21-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk25-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-openjdk8-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-resolver-1:1.9.22-6.module+el9.7.0+40002+8e3c44a9.src.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-shared-utils-0:3.4.2-19.module+el9.7.0+40002+8e3c44a9.src.rpm maven-unbound-1:3.9.9-13.module+el9.8.0+40095+a2161487.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm maven-wagon-0:3.5.3-17.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-cipher-0:2.0-25.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-classworlds-0:2.8.0-9.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-containers-component-annotations-0:2.2.0-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-interpolation-0:1.27-10.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-sec-dispatcher-0:2.0-28.module+el9.7.0+40002+8e3c44a9.src.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.noarch.rpm plexus-utils-0:3.5.1-17.module+el9.7.0+40002+8e3c44a9.src.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.noarch.rpm sisu-1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9.src.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.noarch.rpm slf4j-0:1.7.36-9.module+el9.7.0+40002+8e3c44a9.src.rpm