maven:3.9 security update

エラータID: AXSA:2026-1516:01

Release date: 
Wednesday, August 12, 2026 - 15:45
Subject: 
maven:3.9 security update
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

* org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Modularity name: "maven"
Stream name: "3.9"

Solution: 

Update packages.

CVEs: 
CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Additional Info: 

N/A

Download: 

SRPMS
  1. aopalliance-1.0-51.module+el9+1177+debad7ba.src.rpm
    MD5: 219608c84c15feff8c18ecfd7a1680b0
    SHA-256: dacd6b7f6008899fd34603e5335f8e8a4a36340c17e7845507da6df3b056df8c
    Size: 21.60 kB
  2. apache-commons-cli-1.9.0-4.module+el9+1177+debad7ba.src.rpm
    MD5: bc7c22325af6c3c387d4aaa056ff6190
    SHA-256: 0aee02945518af7891e6e6c69e5acd77920c91fcc306978dec9d84f56342990e
    Size: 194.06 kB
  3. apache-commons-codec-1.17.1-8.module+el9+1177+debad7ba.src.rpm
    MD5: 3ccf1fd2170e111e5c17216bcdea98f1
    SHA-256: 8ad259b9b4739e614d391b113c3a684aeda54ba767cafa1b7f3b013c8e273a21
    Size: 459.12 kB
  4. apache-commons-io-2.16.1-9.module+el9+1177+debad7ba.src.rpm
    MD5: b3cc3ed626a147d3b48126d222a84064
    SHA-256: a0a241e8cec75f1f98d7d6acd187496749dd1e317f51aaff4ab0a96e15903101
    Size: 631.23 kB
  5. atinject-1.0.5-14.module+el9+1177+debad7ba.src.rpm
    MD5: 3eca7f442d03f9c511b0466443187d5a
    SHA-256: 83703bc1188e1b0c679a17d2826277afd3b6494c1469e228f0491848f62700f0
    Size: 25.20 kB
  6. google-guice-5.1.0-23.module+el9+1177+debad7ba.src.rpm
    MD5: 1156329c4e28cc53ea2ce1a9749864b9
    SHA-256: 96ab3a2587536b36bf98beeaa2bb7c5326cfd9e0c6fb3627b1505e1b31b1260b
    Size: 443.75 kB
  7. guava-33.3.0-5.module+el9+1177+debad7ba.src.rpm
    MD5: a0c20b3f05a528df19c80d36bbb5d1da
    SHA-256: d1a1bea12851bb62cf69e59b014ad3c95187aecf6b4a33e70cd70e81c6715872
    Size: 5.33 MB
  8. httpcomponents-client-4.5.14-21.module+el9+1177+debad7ba.src.rpm
    MD5: e2231e6feb195a9a8f95bd1272c1b718
    SHA-256: ad1a02c8b9c2590de50610a3ef1150870a532a862a0e20fda6706a3098cc40fa
    Size: 1.41 MB
  9. httpcomponents-core-4.4.16-21.module+el9+1177+debad7ba.src.rpm
    MD5: 8d468632020d3970a6aaf3ffac58c939
    SHA-256: 237745fdab2b319c4c46f8471473af91b831f9e1640919f1c354799ab315b424
    Size: 1.11 MB
  10. jakarta-annotations-1.3.5-38.module+el9+1177+debad7ba.src.rpm
    MD5: bad9e2835659c0cc937b3237c4fa82b6
    SHA-256: 992a3620d6b1c7d12304c9740ba324c9826d5aeadb076e6952bfb7d290e9c955
    Size: 81.49 kB
  11. jansi-2.4.1-12.module+el9+1177+debad7ba.src.rpm
    MD5: 9fbebc70c295b12c3897a3845818c14c
    SHA-256: 0b02e38364b8948bcdb3c1c6e704d54a4213673cd14cace3a96cd12925fbb6a4
    Size: 102.99 kB
  12. jsr-305-3.0.2-36.module+el9+1177+debad7ba.src.rpm
    MD5: 924279252cf2976be233f783707245f5
    SHA-256: f4f156e36ad4ebc913e3658390fd02703260567e69777d4b388f700708d307c3
    Size: 180.79 kB
  13. maven-resolver-1.9.22-6.module+el9+1177+debad7ba.src.rpm
    MD5: 384132ec931e233bb223db5f0f17891e
    SHA-256: 00bdf0d742fcedc207c9d5d6aa77ce0c0105405b260a1bde7d56f186e4a50383
    Size: 1.15 MB
  14. maven-shared-utils-3.4.2-19.module+el9+1177+debad7ba.src.rpm
    MD5: 917cb2023c806012ee9d8afb9785b5db
    SHA-256: 69aaf8c2738e52c9f35e1eb5c4f0b3989b1c81f41a093b417b3eaa29aefd0151
    Size: 219.23 kB
  15. maven-3.9.9-13.module+el9+1177+debad7ba.src.rpm
    MD5: 581cc8327369e47036bfed36620ed62c
    SHA-256: 1fea3b776026cee2a118f293274949ac0d1055b35246dc6568bfbf27f6215ccc
    Size: 2.61 MB
  16. maven-wagon-3.5.3-17.module+el9+1177+debad7ba.src.rpm
    MD5: f1060973bb09f02cf1ded9f89df54db2
    SHA-256: 16c32c5b80a3831bd1b7ad5f0f1f2456c1c8ca6bf654cbb2c1194ae888a83c75
    Size: 483.59 kB
  17. plexus-cipher-2.0-25.module+el9+1177+debad7ba.src.rpm
    MD5: 456fe1fe21df69116e14f60c784684ce
    SHA-256: 96e4296cbf22d3cba91d0b9e1d4953046be232b0ff8bd10facbaa3b090a3915e
    Size: 26.63 kB
  18. plexus-classworlds-2.8.0-9.module+el9+1177+debad7ba.src.rpm
    MD5: d19f5111f756ef83b8585d2159f2c8b1
    SHA-256: 4d65af3b0092d882b54a9ee2f29bf0ceec92546ca3598eea00ae1c881fd2ca21
    Size: 69.48 kB
  19. plexus-containers-2.2.0-10.module+el9+1177+debad7ba.src.rpm
    MD5: eed10e6d4747b57e490f519ab40a049d
    SHA-256: 03e54c4186011e55a3ee892f5e8a6f4bbae63aeb36ed3d509999be754fc1f9bf
    Size: 89.13 kB
  20. plexus-interpolation-1.27-10.module+el9+1177+debad7ba.src.rpm
    MD5: 78ec0d963052cdb54ded89b0977ac7f3
    SHA-256: 3411c87428da68ccccb0e3d19fd4c7de28f67aa8f3b607fcf85ae3765cccd1c8
    Size: 70.42 kB
  21. plexus-sec-dispatcher-2.0-28.module+el9+1177+debad7ba.src.rpm
    MD5: 2087d3a900148ed32dead7157a852f7a
    SHA-256: fae3445a637b9aa8facfd49608304cd1d92c5704ee8d2b45bbde0bab9e39ff1c
    Size: 22.94 kB
  22. plexus-utils-3.5.1-17.module+el9+1177+debad7ba.1.src.rpm
    MD5: 584c7d9753243d26907f63fef321428c
    SHA-256: ab2cc19ee03ab45a8fdf63ced0e56b58c40d792af15802da8afdb862745c7981
    Size: 475.87 kB
  23. sisu-0.9.0~M3-7.module+el9+1177+debad7ba.src.rpm
    MD5: 8b59359cb896d817dd344eba4fa2acdb
    SHA-256: 383ad24a7f341ccf110ca1f5d9496b1a2ec21eb35914bc3fa79d865ad51de636
    Size: 3.60 MB
  24. slf4j-1.7.36-9.module+el9+1177+debad7ba.src.rpm
    MD5: f3ae54ee56db6159a76750eda4d1ebe3
    SHA-256: c8c25d6cb376f41e43130fa336eae58f38941af4a481e5ff31076e0e0f85d0e5
    Size: 2.19 MB

Asianux Server 9 for x86_64
  1. aopalliance-1.0-51.module+el9+1177+debad7ba.noarch.rpm
    MD5: 4697bb9df04b43623423247622e88210
    SHA-256: 31ae28475281385c7b4a79300b475905a483d793acde231e25000a65878ea001
    Size: 14.79 kB
  2. apache-commons-cli-1.9.0-4.module+el9+1177+debad7ba.noarch.rpm
    MD5: a00537ef7fa3a034c25d109193fa0976
    SHA-256: 8ad62edaf853e63c532d7e552241f559d37bd6919d17d10cda445d1dc59a14ca
    Size: 91.76 kB
  3. apache-commons-codec-1.17.1-8.module+el9+1177+debad7ba.noarch.rpm
    MD5: 3f204fbdd04a13d65a9cdee2175505f6
    SHA-256: 79b7b57b17057e6a42c0c07e5cbcb97e25669d1ff47f815eae08da3459f3c4ae
    Size: 313.05 kB
  4. apache-commons-io-2.16.1-9.module+el9+1177+debad7ba.noarch.rpm
    MD5: 7c8848efa06fa4ef8097cdb2c4be8040
    SHA-256: ce9215eb7a893ac48df69f1fe672c93d6675d098e9bdd34f6d6696f5e4b36e07
    Size: 478.06 kB
  5. atinject-1.0.5-14.module+el9+1177+debad7ba.noarch.rpm
    MD5: e5e5c73e91ea7dee6f7cce64c927b231
    SHA-256: 42ff41081b48c6b05140b50fe5b63e3c74c224b41d724afa9c068fde9d07cf4e
    Size: 22.46 kB
  6. google-guice-5.1.0-23.module+el9+1177+debad7ba.noarch.rpm
    MD5: 18b27c03e721b31d7be482eca256a3fd
    SHA-256: d1a50f6637b66ec4df23be22876609e72816d9467874bfc5ed7fd41727a5ed11
    Size: 606.79 kB
  7. guava-33.3.0-5.module+el9+1177+debad7ba.noarch.rpm
    MD5: 19812ba3d7816c8ee84fe7d8f67f558c
    SHA-256: 5ab6ccf9820d8ffd7c4cf24eeb162b918283119e0f15bf4548bcd4e4a18c801c
    Size: 2.53 MB
  8. httpcomponents-client-4.5.14-21.module+el9+1177+debad7ba.noarch.rpm
    MD5: 32a9d1f1e08b7280dfbe2a9503257d27
    SHA-256: 3ee880042e73403d813375fdf9138c2778afc2cfd02403eeab871d82f0cf5374
    Size: 662.85 kB
  9. httpcomponents-core-4.4.16-21.module+el9+1177+debad7ba.noarch.rpm
    MD5: 22200d03c8611f207fa3f9f564fd072c
    SHA-256: 9b43e9ad1c35d93a7da076065b282c31c914fbedde466d82326384395629d358
    Size: 639.13 kB
  10. jakarta-annotations-1.3.5-38.module+el9+1177+debad7ba.noarch.rpm
    MD5: b95860d23be23672e58c5fe118f8ea5b
    SHA-256: b3141cfd7bf1bf70d91fec03de7955b3bfdbdbce65255248c0cf266a6431c517
    Size: 44.75 kB
  11. jansi-2.4.1-12.module+el9+1177+debad7ba.x86_64.rpm
    MD5: 068fa2db0e4aac82cbf0dcebe14a6eec
    SHA-256: 91e56d320b8da433f9a7dde4a9757b2fe06d20c1564d2ef719d8ed7daeba3d11
    Size: 116.41 kB
  12. jcl-over-slf4j-1.7.36-9.module+el9+1177+debad7ba.noarch.rpm
    MD5: f170acb87c5fd9b6d3db937c1696db7d
    SHA-256: c323da3e99e7d0a5e70fbd4ba74ffce43bd60bb2072685060fce1fc84a6f3a54
    Size: 23.62 kB
  13. jsr-305-3.0.2-36.module+el9+1177+debad7ba.noarch.rpm
    MD5: f24bbafb1f5d0e2c94fcc6b376353501
    SHA-256: a8a08e0b23b159e743715bfad11abd4b1f86a7ede5507308dedae9427b2a4005
    Size: 41.09 kB
  14. maven-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: b187a94ca2708db59c1ed2805d64f0a6
    SHA-256: 1710c7bb530c6b8e03dcaa933e6df5c9ff9d3bb9091b804af19d57c1754981ca
    Size: 17.54 kB
  15. maven-lib-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: fdeb4cd37dd2a6e831ac53bda7ae064e
    SHA-256: c918f4c6bab46d6c0f0b93d783d97dd52c13df96b4484fdc1ab5643420916240
    Size: 1.59 MB
  16. maven-openjdk11-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: 3bebe7b633ab6c4c245b88b03e8a19dd
    SHA-256: 43b0ebb9b3c778c23fd01db545268e17ea70c999c915c34988691ea0a862e1d7
    Size: 8.71 kB
  17. maven-openjdk17-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: 58c07480492dfe265d1a95d5f8608be3
    SHA-256: 9f3e3f000a2621cfa09c8eec1857564c925567c37b9c9e612d441e3179324fab
    Size: 8.71 kB
  18. maven-openjdk21-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: 53f49d04f4bd82b98ceda8a8e97e6739
    SHA-256: fba885f0ba0156bda6c25118770fdf0e5903572c7d3c48d1f306fd16052e66b7
    Size: 8.71 kB
  19. maven-openjdk25-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: 3c7c422e8ce3d4bb760d2547bc5942f9
    SHA-256: 60a33ccf1aafe8212e4743a6f82724e52af373a8a9d7213ed1cc1106d5990b4e
    Size: 8.71 kB
  20. maven-openjdk8-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: 9c3c3773d1f21816bca27ddb405934da
    SHA-256: 62b9a92d49b473f56c7d2b65ca7534d6a3010bad164707b40cdbc55638638a51
    Size: 8.72 kB
  21. maven-resolver-1.9.22-6.module+el9+1177+debad7ba.noarch.rpm
    MD5: 18f5c1e1b37aa6eb92b2340081c56fa1
    SHA-256: 9b6f7b15491966e25522087ef6ed845e8950a76d2cc6ca952cd7deea496cccab
    Size: 755.26 kB
  22. maven-shared-utils-3.4.2-19.module+el9+1177+debad7ba.noarch.rpm
    MD5: 83757aa62087c9adf8506297edaaf634
    SHA-256: 00cd549f843b93207ed8d0a75136d81ade58b08523f92ce296935a6cd45d55e9
    Size: 148.30 kB
  23. maven-unbound-3.9.9-13.module+el9+1177+debad7ba.noarch.rpm
    MD5: f8e71515bb03aae28a634a177cda9b36
    SHA-256: c53c1823a71ff6465a24ee4e1491d7f973c4b7aa8cd9eaed16e0e6f88a0dc60e
    Size: 8.64 kB
  24. maven-wagon-3.5.3-17.module+el9+1177+debad7ba.noarch.rpm
    MD5: 1125320116937aa9d2b4a3493ec64d8f
    SHA-256: 89b281e3c6526500b0780c8d453765144c6bc9ba82bcc5c093e47a05bdca37dd
    Size: 111.72 kB
  25. plexus-cipher-2.0-25.module+el9+1177+debad7ba.noarch.rpm
    MD5: 3835605e2f2b28050a427636068e9601
    SHA-256: e0bf16c359e546cd30015baf3e8db14e49f40de860627613e259e7bcc30682eb
    Size: 25.26 kB
  26. plexus-classworlds-2.8.0-9.module+el9+1177+debad7ba.noarch.rpm
    MD5: aa8d4bf22362241c6b7d26c549a9af97
    SHA-256: c8c7797ebc45f44f4287e270ad3c0a947347c30143660867f9ae9afc81c9fa2a
    Size: 60.60 kB
  27. plexus-containers-component-annotations-2.2.0-10.module+el9+1177+debad7ba.noarch.rpm
    MD5: 0f2b7694e81d48e669412a69b5118222
    SHA-256: 9fee2f9ec7b5ed5712dee1635c5ae2cd51279fbbfd4d8e4a5664aca406e4140d
    Size: 16.83 kB
  28. plexus-interpolation-1.27-10.module+el9+1177+debad7ba.noarch.rpm
    MD5: 479b4109af2c4076b9cdcad6efd8c2da
    SHA-256: e089e09e541f52e09d7adf0a05e4f5e008228bdb353af4c845818f36ff2a95b0
    Size: 79.74 kB
  29. plexus-sec-dispatcher-2.0-28.module+el9+1177+debad7ba.noarch.rpm
    MD5: c3a22477977ba0af533b863f90b67be0
    SHA-256: 7c7c945663a422447fb755bfa4521119b39989cc5507466bbbeaaa7fec730b62
    Size: 33.20 kB
  30. plexus-utils-3.5.1-17.module+el9+1177+debad7ba.1.noarch.rpm
    MD5: c766e70726eed87ad420f8c80c02e85c
    SHA-256: 90b2bb60e2841a3267e1ab1cd4a2cbf152001092518444fabe2c938327c8e95f
    Size: 261.78 kB
  31. sisu-0.9.0~M3-7.module+el9+1177+debad7ba.noarch.rpm
    MD5: 20df5a5cc46ed25bdb6d7bf246dee7ba
    SHA-256: a177a1bbfff91455c8c175532ebe44fcb178c8ef821e9d211e334c84aed5720d
    Size: 580.92 kB
  32. slf4j-1.7.36-9.module+el9+1177+debad7ba.noarch.rpm
    MD5: 8257313f7b74f549da0c170a88e92171
    SHA-256: de815986fabb011e43e2fdce2688c71f58064974d82b5e9b6a2bf20598e4f24f
    Size: 67.61 kB