Most recent entries from all

ALSA-2022:4797 — Important: maven:3.6 security update

Affected: AlmaLinux:8: aopalliance, AlmaLinux:8: apache-commons-cli, AlmaLinux:8: apache-commons-codec, AlmaLinux:8: apache-commons-io, AlmaLinux:8: apache-commons-lang3, AlmaLinux:8: atinject, AlmaLinux:8: cdi-api, AlmaLinux:8: geronimo-annotation, AlmaLinux:8: google-guice, AlmaLinux:8: guava and 22 more

The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven.

Security Fix(es):

* maven-shared-utils: Command injection via Commandline class (CVE-2022-29599)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-03775

Withdrawn: BELL-CVE-2022-29599 — CVE-2022-29599 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0861 — De multiples vulnérabilités ont été découvertes dans Oracle WebLogic. Certaines d'entre elles permettent à un attaquant…

certfr-2023-avi-0861

cnvd-2022-53585

EUVD-2026-16151

fkie_cve-2022-29599

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

GHSA-rhgr-952r-6p8q — Command injection in Apache Maven maven-shared-utils

Affected: Maven: org.apache.maven.shared:maven-shared-utils

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

gsd-2022-29599

OESA-2022-1684 — maven-shared-utils security update

Affected: openEuler:20.03-LTS-SP1: maven-shared-utils, openEuler:20.03-LTS-SP3: maven-shared-utils, openEuler:22.03-LTS: maven-shared-utils

This package can be the functional replacement of plexus-utils in Maven. At the same time, the package has many hightlights, such as: a lot of methods got cleaned up, generics got added and a lot of unused code dropped.

Security Fix(es):

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.(CVE-2022-29599)

openSUSE-SU-2024:12027-1 — maven-shared-utils-3.3.3-1.1 on GA media

maven-shared-utils-3.3.3-1.1 on GA media

RHSA-2022:1541 — Red Hat Security Advisory: maven-shared-utils security update

maven-shared-utils: Command injection via Commandline class

UBUNTU-CVE-2022-29599

Affected: Ubuntu:Pro:14.04:LTS: maven-shared-utils, Ubuntu:Pro:16.04:LTS: maven-shared-utils, Ubuntu:Pro:18.04:LTS: maven-shared-utils, Ubuntu:20.04:LTS: maven-shared-utils, Ubuntu:22.04:LTS: maven-shared-utils

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

WID-SEC-W-2022-0007 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.