[security - high] maven:3.8 security update

エラータID: AXSA:2026-1409:01

Release date: 
Friday, July 31, 2026 - 22:12
Subject: 
[security - high] maven:3.8 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Modularity name: "maven"
Stream name: "3.8"

Solution: 

Update packages.

CVEs: 
CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Additional Info: 

N/A

Download: 

SRPMS
  1. apache-commons-cli-1.5.0-5.module+el8+2016+35bde1bc.src.rpm
    MD5: c68d23c6c14d46665e6e16db86134b21
    SHA-256: 36f3d63b7b136cb8edd97be3753068b6e09eeabfd6908eb5d6ce5b8a13fa8512
    Size: 166.36 kB
  2. apache-commons-codec-1.15-8.module+el8+2016+35bde1bc.src.rpm
    MD5: f5e76222ff588c1a1a30f1bf31d1bdb5
    SHA-256: b84a27376b4562d87bd2e9b355224006f1ac4871fee066d2c31ed2d4019be319
    Size: 433.91 kB
  3. apache-commons-io-2.11.0-3.module+el8+2016+35bde1bc.src.rpm
    MD5: 6f7b22fd35f3f599a4870b3c8faa4e63
    SHA-256: 288385d000c68a3c5f13e3e42fdb7b451557a341b567dccf1920176fdc818df6
    Size: 502.95 kB
  4. apache-commons-lang3-3.12.0-8.module+el8+2016+35bde1bc.src.rpm
    MD5: d3b0b312bb514046086d9c931d527d25
    SHA-256: 614db09577ba220c0bf17cc8dd4886aa75b3f1fd837129102db825beecab5a54
    Size: 1.04 MB
  5. atinject-1.0.5-5.module+el8+2016+35bde1bc.src.rpm
    MD5: f00a213abf9d48ec2672218f8177da6f
    SHA-256: 33308329e54ee002be28227b672867de8f2d0d564eb52b905ca3a276169b8327
    Size: 29.46 kB
  6. cdi-api-2.0.2-7.module+el8+2016+35bde1bc.src.rpm
    MD5: 1a792b3ea651c71bd8e64a891e2f72fe
    SHA-256: ce88dd7d2170d05c498e4589e5db74c244c8dcddfaab9487573d1a02ae604784
    Size: 231.89 kB
  7. google-guice-4.2.3-10.module+el8+2016+35bde1bc.src.rpm
    MD5: 56e1baf799d327c0107f48b15161565c
    SHA-256: 8a160eaa74dc2985dc4562fc2728977f536072630c07cf85f7169dab90f3b982
    Size: 403.74 kB
  8. guava-31.0.1-5.module+el8+2016+35bde1bc.src.rpm
    MD5: 32ba94489954b5e212d1891bf0aabbfa
    SHA-256: afa5a2da93284a21eac016eb0407d9c95b902ed17e8c89df3d521935ead46fa6
    Size: 5.08 MB
  9. httpcomponents-client-4.5.13-6.module+el8+2016+35bde1bc.src.rpm
    MD5: a29c098d7075b36a67070635a4e8e184
    SHA-256: 3618eb00869f6f6fb94eb4a60afbc966b45479fa1274d48cb1194de40db8ec70
    Size: 826.62 kB
  10. httpcomponents-core-4.4.13-8.module+el8+2016+35bde1bc.src.rpm
    MD5: cc031ca1e1084e20319e06d18d36b454
    SHA-256: 0385ec2b34aa3ba82a10606bb87bf88db9f5125cb4b05d800c2f48f79fd4217c
    Size: 608.76 kB
  11. jakarta-annotations-1.3.5-15.module+el8+2016+35bde1bc.src.rpm
    MD5: 64361f9a0174f3a9d0f367c94ceece7f
    SHA-256: 337edbf8fd65fb23f3a4e01070d3aa5e1d5ed4d8f5a941bd9e0339fbf0d98ad3
    Size: 81.24 kB
  12. jansi-2.4.0-7.module+el8+2016+35bde1bc.src.rpm
    MD5: 1ec34792d30fdf39bef13f7cff3e2184
    SHA-256: 1762b4883dc95b6f07c235e24bee4cd3c603e82216ea6fb4f1dd208e56941deb
    Size: 217.58 kB
  13. jsr-305-3.0.2-7.module+el8+2016+35bde1bc.src.rpm
    MD5: 176c8aebe1cda6e8c3eb6195bc90a149
    SHA-256: 3a48b6a2c3ffa7edd957984372f0d47aa3df7e42cee66bcde68629d1e3395528
    Size: 177.51 kB
  14. maven-resolver-1.7.3-6.module+el8+2016+35bde1bc.src.rpm
    MD5: 8fc9b96674d4b127f8f29cb8423c6c77
    SHA-256: 1fa80195070dfea65d928ff397e9479e8b91e7775736af1eadadd175b984f16f
    Size: 0.99 MB
  15. maven-shared-utils-3.3.4-6.module+el8+2016+35bde1bc.src.rpm
    MD5: 9cb0226c32bb92578e61ec944194e26c
    SHA-256: e43e9bb5b52161d5815d5ec8eb9f306c0dcc91d88d7d245d303686810dce8e9d
    Size: 226.78 kB
  16. maven-3.8.5-6.module+el8+2016+35bde1bc.src.rpm
    MD5: a41812f5f09d6726b93d07f5df6528fd
    SHA-256: f326eb59c2dd0ab2af0fe1dedcfbe57dec496924f33dc4edd80d3c5135a600e2
    Size: 2.69 MB
  17. maven-wagon-3.5.1-3.module+el8+2016+35bde1bc.src.rpm
    MD5: a3fc3ae5d89b4ff601341c970d01b037
    SHA-256: 768acfa96e33c1ebd5ed1df058d9be47e7511db774b0209d961bb4557f365953
    Size: 488.75 kB
  18. plexus-cipher-2.0-3.module+el8+2016+35bde1bc.src.rpm
    MD5: 303cc96bee12c0338d9c046b1029d4ef
    SHA-256: 633533a4509a8bdfc81c2a002900827988cbb60ea988d66257acd6312fa1fdf4
    Size: 30.24 kB
  19. plexus-classworlds-2.6.0-13.module+el8+2016+35bde1bc.src.rpm
    MD5: 61f2314e38c73b7723005f74669cec57
    SHA-256: 5221de1fadc33520d9b7cb1fb3545a5c74fafaa3680ec49f9815fd1e326bf440
    Size: 72.19 kB
  20. plexus-containers-2.1.1-3.module+el8+2016+35bde1bc.src.rpm
    MD5: 026bb85971d06755c5ac7d06f0e35ccc
    SHA-256: a772c552c3b769ce6363264ee9edc76698cdfd940e70bce04f9f25bfda5fe63f
    Size: 363.78 kB
  21. plexus-interpolation-1.26-13.module+el8+2016+35bde1bc.src.rpm
    MD5: 9551148c67b17035e064266bc1b9375d
    SHA-256: 4ab535dd1799a9f4bc655450df1edb44c029c9769bc9e8f8f23487eb7de4cbb4
    Size: 74.86 kB
  22. plexus-sec-dispatcher-2.0-5.module+el8+2016+35bde1bc.src.rpm
    MD5: 4072e39956c5fd4bcec3bdff1a577c21
    SHA-256: 79b9000b5c512f844a80611b2bff4a45ba1803f9444d5c3c9826cadcd67e30fc
    Size: 26.05 kB
  23. plexus-utils-3.3.0-11.module+el8+2016+35bde1bc.1.src.rpm
    MD5: 5a80f7c5a70c13ccb2b9c3e96966d8fc
    SHA-256: 1d4b1b0ff9ea900277e936d7299adaca53d65e8f1fb86ce8efc3157a108e7353
    Size: 444.41 kB
  24. sisu-0.3.5-3.module+el8+2016+35bde1bc.src.rpm
    MD5: 5a1e92a649b66e63a67dcce8d498e02e
    SHA-256: 72b4b6d81fcf00b05ba76e50b0df69f14849ac6c9edb727f1c21a31d78cef71a
    Size: 695.62 kB
  25. slf4j-1.7.32-5.module+el8+2016+35bde1bc.src.rpm
    MD5: 829af8aadde4d56ef174814184ebddcb
    SHA-256: 212d9db560ec3a34efd2e56a4cd8a9bef60cfded6197c106b9ebf4611a1b9bbc
    Size: 2.20 MB

Asianux Server 8 for x86_64
  1. apache-commons-cli-1.5.0-5.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 042cac95ff92afdd743759b8b95d8015
    SHA-256: 566a55fb9b9e7a530fc6fb79f116e88e83e084d8f37600c4e07873e889c161fc
    Size: 79.86 kB
  2. apache-commons-codec-1.15-8.module+el8+2016+35bde1bc.noarch.rpm
    MD5: ba1d065eaf5dec3162592daba0dd2ef5
    SHA-256: 19ffcdd6b89fb1a4804aba9dc58b7fd4f61bf9bae8bf5e1f984beb168fa68611
    Size: 311.51 kB
  3. apache-commons-io-2.11.0-3.module+el8+2016+35bde1bc.noarch.rpm
    MD5: b790128c3b359c2e15449b862c853c43
    SHA-256: b539d6d127dad853b4ba3ed9d3c073bb5638b71bd1055a4de08502bd54c691b3
    Size: 330.33 kB
  4. apache-commons-lang3-3.12.0-8.module+el8+2016+35bde1bc.noarch.rpm
    MD5: def38b446e954eeaef4f258b8cfae127
    SHA-256: 50a416f6061a1b1beb36749ea099b8189427a2a5829b1c256d3a9bd48dac8028
    Size: 568.43 kB
  5. atinject-1.0.5-5.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 5eeeb7cb35a657d83900a14298185ee1
    SHA-256: 8b93405bf4f0e34b4d6ada8d19a2b1b0dfec453623d0413f088ddc60690e921a
    Size: 27.45 kB
  6. cdi-api-2.0.2-7.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 14e5aa04626f32f0001f980e19eb3cec
    SHA-256: c2bd59891aee682c78df9e8c9d7628271d4637370f0c218d9d654719b8953c62
    Size: 58.00 kB
  7. google-guice-4.2.3-10.module+el8+2016+35bde1bc.noarch.rpm
    MD5: d96e4021f570e0631f5a4e34eeefcafc
    SHA-256: dbf23aaea688aed4924443085df1edd35360b6c7f2516ad40c9c7efef6e04d0e
    Size: 485.63 kB
  8. guava-31.0.1-5.module+el8+2016+35bde1bc.noarch.rpm
    MD5: abe0d54fa7d2d2b1984fdc4d28b1afcd
    SHA-256: c0c00ae943b02f096c46a3aaad91fc4922884115ddc9091a5f312c2cee0c0d4c
    Size: 2.53 MB
  9. httpcomponents-client-4.5.13-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 51d9decb15b6cfced4fedf0da832ceaa
    SHA-256: 28ae72ce14d4fd39745f0f3e1cbf50ad2bd2079f295ea4c89aa9a629f77f7f93
    Size: 672.79 kB
  10. httpcomponents-core-4.4.13-8.module+el8+2016+35bde1bc.noarch.rpm
    MD5: dba40b94ed0b29a4627772dd59b505d3
    SHA-256: 66bfaef9149f602c4b17a83dff70c973a145736728ca85c405fb33c7107c368d
    Size: 646.22 kB
  11. jakarta-annotations-1.3.5-15.module+el8+2016+35bde1bc.noarch.rpm
    MD5: c1fe51cadfb9dc253b5cba4ad081065d
    SHA-256: 0063ea0a3a7eaddd97ce5df603ddc1a1727579bc57810855b350a8df0d91304e
    Size: 45.52 kB
  12. jansi-2.4.0-7.module+el8+2016+35bde1bc.x86_64.rpm
    MD5: f502c2ff807a2390a6b8dfdc607b3115
    SHA-256: 6456e0f8e390d230f33235272cb4b5af3fac7b04a4de53c3fcfd3b0b3708bf6d
    Size: 116.12 kB
  13. jansi-debugsource-2.4.0-7.module+el8+2016+35bde1bc.x86_64.rpm
    MD5: 78573040abb1e30f1898bea38ab4e0fc
    SHA-256: 9a86b08cc32643af136511db5a087bac675b4f5ea9d18745e20c1aa07b86c8e0
    Size: 29.28 kB
  14. jcl-over-slf4j-1.7.32-5.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 8c7fa1486831a4b9ef204418c1415a2a
    SHA-256: ae154dec3372b68eb9014d5a8c72b1b96c6288c65876d0dc73bdf68b04f2871e
    Size: 33.60 kB
  15. jsr-305-3.0.2-7.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 6f0a12e995bcfe11c6a7e0fe2646308c
    SHA-256: bdb3f2194d43d68be7d956ff2de16d458a9a711eaaee26f8ced28a4456cdba4f
    Size: 36.27 kB
  16. maven-3.8.5-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 2cc3ce7110533f0b3a052cfe662531bf
    SHA-256: 14778da28995a72194952547248170c7af6394c915b52b3d87e885b3f7f9593c
    Size: 36.89 kB
  17. maven-lib-3.8.5-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 5aee28dc13812abf444c08a84d70be70
    SHA-256: c6ac8dc2c4705b54a47cc288afd0a437c1d77d670a26e83f8a9834419cfaae57
    Size: 1.51 MB
  18. maven-openjdk11-3.8.5-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 72e1d03a42c1e3716dd98d44c9242fb2
    SHA-256: 75c0716f08e6de855113afe615c947a3c17c8a88f24899bdf3fd90995070180e
    Size: 28.18 kB
  19. maven-openjdk17-3.8.5-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 29ea0f04c023e9ddd0546dae8025e3ca
    SHA-256: 4d56f5d10bcb1caf8354277258070500d0c46378496943cb97b2fde4aeee1e88
    Size: 28.18 kB
  20. maven-openjdk21-3.8.5-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 92846545de20c11048babf7a9fbe1849
    SHA-256: dd92b8285e6d914cb6e230be155c058d662495fe5115cf923cbe777be49e83de
    Size: 28.18 kB
  21. maven-openjdk8-3.8.5-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: d9edcc828360bcb12ae7e1f1e9b191e1
    SHA-256: 56520df7d1445380b5f1a0f7a550beb1604ddd0a3a3dbcbebcd211ec22804736
    Size: 28.18 kB
  22. maven-resolver-1.7.3-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 5c780e669cefee8304a769c9b19d7239
    SHA-256: cdd4a77bd60407a32fc58d026dd315c4e879824501fbda227c0430d3337a9648
    Size: 568.66 kB
  23. maven-shared-utils-3.3.4-6.module+el8+2016+35bde1bc.noarch.rpm
    MD5: c8eeae7c197a858b7df241033c95e55b
    SHA-256: 71443490460728d22dade5685abcd6202fd8dd320d001a3226f55b6b8e91efd2
    Size: 155.92 kB
  24. maven-wagon-3.5.1-3.module+el8+2016+35bde1bc.noarch.rpm
    MD5: e6e97010b6febf8180acb699dea1dc79
    SHA-256: 0152e3d9862e7e2898148db3494a377dc30d2c2f64bf73fef1ef6d67ba890c3a
    Size: 116.76 kB
  25. plexus-cipher-2.0-3.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 0ab81dce0832ea87262202d89ce3d400
    SHA-256: 5361850cbdd450551b7e1d86607e79941cc369513b170e908add8cebbf04b3a9
    Size: 29.39 kB
  26. plexus-classworlds-2.6.0-13.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 3009a77048f9bbf20d2f8e8c69b8d3e1
    SHA-256: 480b5b118dfd2e7bae09d4e907208d5f04ce57d9acc03e89c91a336704df61f3
    Size: 65.66 kB
  27. plexus-containers-2.1.1-3.module+el8+2016+35bde1bc.noarch.rpm
    MD5: c3c9fa0b974035115869dbc067c3979a
    SHA-256: 7a1ac139c4cc42d0540fc3971a402d5ee189b6c5b9a4bb26b88cf21415f5aa19
    Size: 21.52 kB
  28. plexus-containers-component-annotations-2.1.1-3.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 3cafbbaf141c818115496a05aa99dbf1
    SHA-256: 96b5ba6ac3db2aa53da81afd16b8925f72fd5b28df5bdb3daf3b0c92f00513db
    Size: 24.60 kB
  29. plexus-interpolation-1.26-13.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 22ae17325fb39c4f3223f8d9e457c652
    SHA-256: ddadef2754654e360f15f6a381b59bbb8c67bada495fcf570f8881a56ac3bfbb
    Size: 84.07 kB
  30. plexus-sec-dispatcher-2.0-5.module+el8+2016+35bde1bc.noarch.rpm
    MD5: f9033e51495f0f2a2c6ce25684a49bd6
    SHA-256: 1f12368b87b39c79967f39ea4fc6ad9498f1572323baefa8cdc3366e6287b1b0
    Size: 36.95 kB
  31. plexus-utils-3.3.0-11.module+el8+2016+35bde1bc.1.noarch.rpm
    MD5: 1414b66be1b3cc00909894b1b72a0bf6
    SHA-256: 40a53a5116ac585481adf6b1387eec25e6ce5dccae5491e34af5f2d738fed3d3
    Size: 262.02 kB
  32. sisu-0.3.5-3.module+el8+2016+35bde1bc.noarch.rpm
    MD5: d60d78f69349dae754216d9422203ecb
    SHA-256: 057a388f15bc2fa6e7027d90452be2de34180047c27248289f96e014d9bab26c
    Size: 523.02 kB
  33. slf4j-1.7.32-5.module+el8+2016+35bde1bc.noarch.rpm
    MD5: 2814e2255cce02a2752addd13b4938bd
    SHA-256: be534cb190c9321c92046b665179a1d0d668f70a3845763e038ed8f6606ae3eb
    Size: 78.84 kB