Back to Security Advisories
High 2026-07-14

Maven:3.9 Security Update — AlmaLinux 9 (ALSA-2026:38500)

AlmaLinux 9

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in …

Affected Versions

3.9

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in …

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in …

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in …

Type:
security

Severity:
important

Release date:
2026-07-14

Description:
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project’s build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 jansi-2.4.1-12.module_el9.6.0+148+fb6dc857.aarch64.rpm 06fde97877dd270f0ecf5b013d43984712428ad1ba5f5b5d8a393322896064f6
noarch sisu-0.9.0~M3-7.module_el9.6.0+148+fb6dc857.noarch.rpm 0068d3862eac581d1244a88f8aabd8da4bc2a149214df3e6332f6d1881756263
noarch maven-lib-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 013a955ca67a470521cf125f30fe0c80d6fc2f0cd4074e5467b9bc06e94a7920
noarch google-guice-5.1.0-23.module_el9.6.0+148+fb6dc857.noarch.rpm 125ab240f75159463d459a50b70127aa61a66ed6466c1b98e7e72a65156116b8
noarch apache-commons-io-2.16.1-9.module_el9.6.0+148+fb6dc857.noarch.rpm 16174a73cfc84903af6f4471c24018b74535c335cf5aa29d3a82dd0f88facbbc
noarch maven-openjdk11-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 193ca7922bdab1bebc00cfc84cdb04c583329734a296dae47377e44e46d9f861
noarch maven-resolver-1.9.22-6.module_el9.6.0+148+fb6dc857.noarch.rpm 206efd1b0da9d7053e07d3fa65d24886f20e2ddddbad3c6f2837145dbc559005
noarch plexus-containers-component-annotations-2.2.0-10.module_el9.6.0+148+fb6dc857.noarch.rpm 23f68d37cb57f3040a2f06ca0ad0b7425c4776bef698284bb5c32641e3d9b9ce
noarch maven-openjdk17-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 2fa08ecea399a1912665d3fb1703c05fe278656bb5eb2c35afd45a42555d2063
noarch plexus-sec-dispatcher-2.0-28.module_el9.6.0+148+fb6dc857.noarch.rpm 355f079b47dd677a1fa96c87b03ff84dc41d9fa1b1f5d216e09d5b64ebd01beb
noarch plexus-utils-3.5.1-17.module_el9.8.0+282+e62fc403.1.noarch.rpm 42ffb75bbd9b3e338c7d32e8d104f10f840c61eef11abca0bc8c1d3f585d9fce
noarch jcl-over-slf4j-1.7.36-9.module_el9.6.0+148+fb6dc857.noarch.rpm 44944cc4a43b396145ddfff53aee410c0ea976fa7fb408e461af66e2350c3d2a
noarch slf4j-1.7.36-9.module_el9.6.0+148+fb6dc857.noarch.rpm 451b9bbb1235ad094a6c78342fb8355ff77d4fd6b3669e64dc9f8b556a10047c
noarch plexus-classworlds-2.8.0-9.module_el9.6.0+148+fb6dc857.noarch.rpm 51d092c60f21d54c339c021d92cc8fef9003e664d4a24e6c7de8ce46112eb5ee
noarch apache-commons-cli-1.9.0-4.module_el9.6.0+148+fb6dc857.noarch.rpm 56cab142f75ee073a33918f63cb431f3f149d9759be85e2a291721a35b661a10
noarch maven-openjdk25-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 754addd6d3f04ab900c47775cfc8190a8da0985c86ebc0d8b3e1d6d2a98e9d8f
noarch plexus-interpolation-1.27-10.module_el9.6.0+148+fb6dc857.noarch.rpm 7ff65c99b5cfb055a1ba6ce4e965c70bd7e9e43550ce7df4fd3ab16c917ac172
noarch httpcomponents-core-4.4.16-21.module_el9.6.0+148+fb6dc857.noarch.rpm 8ab2f7de652b168e63235a2cdb1aa18bfdd65874de65b98131071fff64308595
noarch maven-unbound-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 98411993464cfc1be59b326861976a020c081b9ecb3e00020886626c0f5738cd
noarch apache-commons-codec-1.17.1-8.module_el9.6.0+148+fb6dc857.noarch.rpm 99d95463c03e6bf061ba1d4cee25e8001708017cd08afca31f787641bda5c216
noarch maven-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm 9dc575ec379acf23c42f2f24723564418f241254fd0ecc2609f7721d04615bbc
noarch plexus-cipher-2.0-25.module_el9.6.0+148+fb6dc857.noarch.rpm 9ee651942405bd06f4f0051fc30526737f6dae92e090ce141e202372281eeac6
noarch atinject-1.0.5-14.module_el9.6.0+148+fb6dc857.noarch.rpm a2970b4cf013e030528956075c7a5fd78763309f8a33b72e6aab2de9456b5d36
noarch maven-openjdk8-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm a5c21f9b7b9b729197addc6cf1f0acfbaf7a7e98b3b98d64e1ae4cd91276ebe1
noarch jakarta-annotations-1.3.5-38.module_el9.6.0+148+fb6dc857.noarch.rpm a5cd127cea4d1a3b7d5976617ccedcec1a881b8b993ee1d4b3a74c971c90daae
noarch guava-33.3.0-5.module_el9.6.0+148+fb6dc857.noarch.rpm ad3c8ee977ad4ba8691c734349c9b4f0099c2db54c387a97a4386b3dd390a494
noarch httpcomponents-client-4.5.14-21.module_el9.6.0+148+fb6dc857.noarch.rpm add1d5437455f933172e1a1e8d88d3d830a27744aec457792abf5e2c38281688
noarch jsr-305-3.0.2-36.module_el9.6.0+148+fb6dc857.noarch.rpm bde7485a59bd2cebcec0886b030996bbd471cd9d2a01e133886602602ab3ce3a
noarch maven-shared-utils-3.4.2-19.module_el9.6.0+148+fb6dc857.noarch.rpm c3fb1a2a3f787c705c7c5ea4b59d8603aa51215e2f4248e13fd79faef4b81552
noarch maven-wagon-3.5.3-17.module_el9.6.0+148+fb6dc857.noarch.rpm c637e1092cac547cd8b9bcae126bc7e2d5d138f8862aca9493ac13301804da08
noarch maven-openjdk21-3.9.9-13.module_el9.8.0+229+787fb9a7.noarch.rpm c6c41819a4134c9548a573ee36bf34df4d4b3276008fe9741b37e2751e159c1b
noarch aopalliance-1.0-51.module_el9.6.0+148+fb6dc857.noarch.rpm d8789fd27e9fcd05738d1310118583738d264ee4d5a84ece00c3e06a71ea6d7f
ppc64le jansi-2.4.1-12.module_el9.6.0+148+fb6dc857.ppc64le.rpm 77ba76736772511b7878fef5a19af9d9816883fdcbcd35e5c8dfc761e880b161
s390x jansi-2.4.1-12.module_el9.6.0+148+fb6dc857.s390x.rpm ac5242eaa56897862277e8078da6bca823a703e0aeef9ef4b76e7e5dc5732909
x86_64 jansi-2.4.1-12.module_el9.6.0+148+fb6dc857.x86_64.rpm 32cfff77103127edce3f33c6e08f16c517b90c6a872fd2a02ca96b3496df3ada

Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

More Information

Security Advisories

Latest Advisories

ConfigServer Security & Firewall (CSF) 16.30-1 — cPanel & WHM Update

2026-08-07

Sitejet Builder 4.12.0-1 — cPanel & WHM Update

2026-08-07

cPanel & WHM version 138

2026-08-07

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System