{"cves":["CVE-2025-67030"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"aopalliance\n[0:1.0-49]\n- Update javapackages test plan to f42\n\n[0:1.0-40]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[0:1.0-39]\n- Rebuilt for java-21-openjdk as system jdk\n\n[0:1.0-38]\n- bump of release for for java-21-openjdk as system jdk\n\n[0:1.0-37]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[0:1.0-36]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[0:1.0-35]\n- Rebuild to regenerate auto-Requires on java\n\n[0:1.0-34]\n- Convert License tag to SPDX format\n\n[0:1.0-33]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\n[0:1.0-32]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild\n\napache-commons-cli\n[1.9.0-3]\n- Update javapackages test plan to f42\n\n[1.9.0-2]\n- Use %autosetup -C\n\n[1.9.0-1]\n- Update to upstream version 1.9.0\n- Resolves: rhbz#2305042\n\n[1.8.0-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1.8.0-1]\n- Update to upstream version 1.8.0\n\n[1.6.0-5]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1.6.0-4]\n- bump of release for for java-21-openjdk as system jdk\n\n[1.6.0-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.6.0-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.6.0-1]\n- Update to upstream version 1.6.0\n\napache-commons-codec\n[1.17.1-7]\n- Update javapackages test plan to f42\n\n[1.17.1-6]\n- Use %autosetup -C\n\n[1.17.1-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1.17.1-1]\n- Update to upstream version 1.17.1\n\n[1.16.1-1]\n- Update to upstream version 1.16.1\n\n[1.16.0-7]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1.16.0-6]\n- bump of release for for java-21-openjdk as system jdk\n\n[1.16.0-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.16.0-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.16.0-3]\n- Rebuild to regenerate auto-Requires on java\n\napache-commons-io\n[1:2.16.1-7]\n- Update javapackages test plan to f42\n\n[1:2.16.1-6]\n- Use %autosetup -C\n\n[1:2.16.1-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1:2.16.1-1]\n- Update to upstream version 2.16.1\n\n[1:2.13.0-8]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1:2.13.0-7]\n- bump of release for for java-21-openjdk as system jdk\n\n[1:2.13.0-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1:2.13.0-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1:2.13.0-4]\n- Rebuild to regenerate auto-Requires on java\n\n[1:2.13.0-3]\n- Rebuild\n\natinject\n[1.0.5-14]\n- Sync with Fedora\n\n[1.0.5-13]\n- Bump release for October 2024 mass rebuild:\n  Resolves: RHEL-64018\n\n[1.0.5-12]\n- Bump release for Aug 2024 java mass rebuild\n\n[1.0.5-11]\n- Bump release for June 2024 mass rebuild\n\n[1.0.5-10]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.0.5-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.0.5-8]\n- Rebuild to regenerate auto-Requires on java\n\n[1.0.5-7]\n- Convert License tag to SPDX format\n\n[1.0.5-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\n[1.0.5-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild\n\ngoogle-guice\n[5.1.0-20]\n- Update javapackages test plan to f42\n\n[5.1.0-13]\n- Drop unneeded Obsoletes\n\n[5.1.0-12]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[5.1.0-11]\n- Rebuilt for java-21-openjdk as system jdk\n\n[5.1.0-10]\n- bump of release for for java-21-openjdk as system jdk\n\n[5.1.0-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[5.1.0-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[5.1.0-7]\n- Rebuild to regenerate auto-Requires on java\n\n[5.1.0-6]\n- Convert License tag to SPDX format\n\n[5.1.0-5]\n- Build with Jurand instead of deprecated javapackages-extra\n\nguava\n[33.3.0-3]\n- Update javapackages test plan to f42\n\n[33.3.0-1]\n- Update to upstream version 33.3.0\n\n[33.2.1-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[33.2.1-1]\n- Update to upstream version 33.2.1\n\n[32.1.3-5]\n- Rebuilt for java-21-openjdk as system jdk\n\n[32.1.3-4]\n- bump of release for for java-21-openjdk as system jdk\n\n[32.1.3-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[32.1.3-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[32.1.3-1]\n- Update to upstream version 32.1.3\n\n[31.1-8]\n- Rebuild to regenerate auto-Requires on java\n\nhttpcomponents-client\n[4.5.14-18]\n- Update javapackages test plan to f42\n\n[4.5.14-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[4.5.14-8]\n- Rebuilt for java-21-openjdk as system jdk\n\n[4.5.14-7]\n- bump of release for for java-21-openjdk as system jdk\n\n[4.5.14-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[4.5.14-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[4.5.14-4]\n- Port to Mockito 5\n\n[4.5.14-3]\n- Rebuild to regenerate auto-Requires on java\n\n[4.5.14-2]\n- Convert License tag to SPDX format\n\n[4.5.14-1]\n- Update to upstream version 4.5.14\n\nhttpcomponents-core\n[4.4.16-18]\n- Disable tests failing without networking\n\n[4.4.16-17]\n- Update javapackages test plan to f42\n\n[4.4.16-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[4.4.16-8]\n- Rebuilt for java-21-openjdk as system jdk\n\n[4.4.16-7]\n- Port to OpenJDK 21\n\n[4.4.16-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[4.4.16-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[4.4.16-4]\n- Port to Mockito 5\n\n[4.4.16-3]\n- Rebuild to regenerate auto-Requires on java\n\n[4.4.16-2]\n- Convert License tag to SPDX format\n\njakarta-annotations\n[1.3.5-36]\n- Update javapackages test plan to f42\n\n[1.3.5-24]\n- Switch to new GitHub repository\n\n[1.3.5-23]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1.3.5-22]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1.3.5-21]\n- bump of release for for java-21-openjdk as system jdk\n\n[1.3.5-20]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.3.5-19]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.3.5-18]\n- Rebuild to regenerate auto-Requires on java\n\n[1.3.5-17]\n- Convert License tag to SPDX format\n\n[1.3.5-16]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\njansi\n[2.4.1-9]\n- Update javapackages test plan to f42\n\n[2.4.1-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[2.4.1-3]\n- Rebuilt for java-21-openjdk as system jdk\n\n[2.4.1-2]\n- bump of release for for java-21-openjdk as system jdk\n\n[2.4.1-1]\n- Update to upstream version 2.4.1\n\n[2.4.0-12]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.4.0-11]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.4.0-10]\n- Rebuild to regenerate auto-Requires on java\n\n[2.4.0-9]\n- Convert License tag to SPDX format\n\n[2.4.0-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\njsr-305\n[3.0.2-34]\n- Update javapackages test plan to f42\n\n[3.0.2-33]\n- Use xpath macros instead of sed\n\n[3.0.2-17]\n- Replace CC-BY-2.5 annotations with Apache-2.0 ones\n- Resolves: rhbz#2301569\n\n[3.0.2-16]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[3.0.2-15]\n- Rebuilt for java-21-openjdk as system jdk\n\n[3.0.2-14]\n- bump of release for for java-21-openjdk as system jdk\n\n[3.0.2-13]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.0.2-12]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.0.2-11]\n- Rebuild to regenerate auto-Requires on java\n\n[3.0.2-10]\n- Convert License tag to SPDX format\n\nmaven\n[1:3.9.9-13]\n- Add maven-openjdk25 binding\n\n[1:3.9.9-12]\n- Reuse jlink image if it already exists\n\n[1:3.9.9-11]\n- Require /plans/matrix/unbound/jlink for gating\n\n[1:3.9.9-10]\n- Update javapackages test plan to f42\n\n[1:3.9.9-9]\n- Add test plan for maven-unbound\n\n[1:3.9.9-8]\n- Exclude maven-unbound from openjdk21 tests\n\n[1:3.9.9-6]\n- Generate bindings with %jp_binding macro\n\n[1:3.9.9-4]\n- Expect JVMs in %_jvmdir instead of %_jvmlibdir\n\n[1:3.9.9-3]\n- Update gating.yaml\n\n[1:3.9.9-2]\n- Drop bindings for OpenJDK  21\n\nmaven-resolver\n[1:1.9.22-2]\n- Update javapackages test plan to f42\n\n[1:1.9.22-1]\n- Update to upstream version 1.9.22\n\n[1:1.9.18-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1:1.9.18-4]\n- Switch to a newer patch macro syntax\n\n[1:1.9.18-3]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1:1.9.18-2]\n- bump of release for for java-21-openjdk as system jdk\n\n[1:1.9.18-1]\n- Update to upstream version 1.9.18\n\n[1:1.9.15-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1:1.9.15-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1:1.9.15-3]\n- Rebuild to regenerate auto-Requires on java\n\nmaven-shared-utils\n[3.4.2-17]\n- Update javapackages test plan to f42\n\n[3.4.2-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[3.4.2-7]\n- Rebuilt for java-21-openjdk as system jdk\n\n[3.4.2-6]\n- bump of release for for java-21-openjdk as system jdk\n\n[3.4.2-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.4.2-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.4.2-3]\n- Rebuild to regenerate auto-Requires on java\n\n[3.4.2-2]\n- Rebuild\n\n[3.4.2-1]\n- Update to upstream version 3.4.2\n\n[3.3.4-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\nmaven-wagon\n[3.5.3-15]\n- Use %autosetup -C\n\n[3.5.3-14]\n- Update javapackages test plan to f42\n\n[3.5.3-13]\n- Set Java compiler source/target via javaVersion property\n\n[3.5.3-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[3.5.3-7]\n- Rebuilt for java-21-openjdk as system jdk\n\n[3.5.3-6]\n- Update Java source/target to 1.8\n\n[3.5.3-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.5.3-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.5.3-3]\n- Rebuild to regenerate auto-Requires on java\n\n[3.5.3-2]\n- Convert License tag to SPDX format\n\nplexus-cipher\n[2.0-24]\n- Update javapackages test plan to f42\n\n[2.0-12]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[2.0-11]\n- Rebuilt for java-21-openjdk as system jdk\n\n[2.0-10]\n- Update Java source/target to 1.8\n\n[2.0-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.0-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.0-7]\n- Rebuild to regenerate auto-Requires on java\n\n[2.0-6]\n- Rebuild\n\n[2.0-5]\n- Use implicit maven toolchains\n\n[2.0-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\nplexus-classworlds\n[2.8.0-8]\n- Update javapackages test plan to f42\n\n[2.8.0-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[2.8.0-3]\n- Rebuilt for java-21-openjdk as system jdk\n\n[2.8.0-2]\n- bump of release for for java-21-openjdk as system jdk\n\n[2.8.0-1]\n- Update to upstream version 2.8.0\n\n[2.7.0-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.7.0-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.7.0-3]\n- Rebuild to regenerate auto-Requires on java\n\n[2.7.0-2]\n- Convert License tag to SPDX format\n\n[2.7.0-1]\n- Update to upstream version 2.7.0\n\nplexus-containers\n[2.2.0-8]\n- Update javapackages test plan to f42\n\n[2.2.0-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[2.2.0-3]\n- Rebuilt for java-21-openjdk as system jdk\n\n[2.2.0-2]\n- bump of release for for java-21-openjdk as system jdk\n\n[2.2.0-1]\n- Update to upstream version 2.2.0\n- Drop obsolete plexus-containers-container-default\n\n[2.1.1-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.1.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.1.1-7]\n- Rebuild to regenerate auto-Requires on java\n\n[2.1.1-6]\n- Rebuild\n\n[2.1.1-5]\n- Use implicit maven toolchains\n\nplexus-interpolation\n[1.27-9]\n- Update javapackages test plan to f42\n\n[1.27-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1.27-3]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1.27-2]\n- bump of release for for java-21-openjdk as system jdk\n\n[1.27-1]\n- Update to upstream version 1.27\n\n[1.26-19]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.26-18]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.26-17]\n- Rebuild to regenerate auto-Requires on java\n\n[1.26-16]\n- Rebuild\n\n[1.26-15]\n- Use implicit maven toolchains\n\nplexus-sec-dispatcher\n[2.0-26]\n- Update javapackages test plan to f42\n\n[2.0-14]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[2.0-13]\n- Rebuilt for java-21-openjdk as system jdk\n\n[2.0-12]\n- bump of release for for java-21-openjdk as system jdk\n\n[2.0-11]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.0-10]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[2.0-9]\n- Rebuild to regenerate auto-Requires on java\n\n[2.0-8]\n- Convert License tag to SPDX format\n\n[2.0-7]\n- Build with default JDK 17\n\n[2.0-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\nplexus-utils\n[3.5.1-16]\n- Update javapackages test plan to f42\n\n[3.5.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[3.5.1-7]\n- Rebuilt for java-21-openjdk as system jdk\n\n[3.5.1-6]\n- bump of release for for java-21-openjdk as system jdk\n\n[3.5.1-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.5.1-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[3.5.1-3]\n- Rebuild to regenerate auto-Requires on java\n\n[3.5.1-2]\n- Convert License tag to SPDX format\n\n[3.5.1-1]\n- Update to upstream version 3.5.1\n\n[3.4.2-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild\n\nsisu\n[1:0.9.0~M3-3]\n- Update javapackages test plan to f42\n\n[1:0.9.0~M3-1]\n- Update to upstream version 0.9.0.M3\n\n[1:0.3.5-15]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1:0.3.5-14]\n- Switch to a newer patch macro syntax\n\n[1:0.3.5-13]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1:0.3.5-12]\n- bump of release for for java-21-openjdk as system jdk\n\n[1:0.3.5-11]\n- Add plexus-container-default alias\n\n[1:0.3.5-10]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1:0.3.5-9]\n- Rebuild to regenerate auto-Requires on java\n\n[1:0.3.5-8]\n- Convert License tag to SPDX format\n\nslf4j\n[1.7.36-7]\n- Update javapackages test plan to f42\n\n[1.7.36-6]\n- Rebuild to regenerate auto-requires\n\n[1.7.36-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n[1.7.36-1]\n- Update to upstream version 1.7.36\n\n[1.7.32-12]\n- Rebuilt for java-21-openjdk as system jdk\n\n[1.7.32-11]\n- bump of release for for java-21-openjdk as system jdk\n\n[1.7.32-10]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild\n\n[1.7.32-9]\n- Rebuild to regenerate auto-Requires on java\n\n[1.7.32-8]\n- Convert License tag to SPDX format\n\n[1.7.32-7]\n- Build with default JDK 17","id":"ELSA-2026-38500","ovalId":"oval:com.oracle.elsa:def:202638500","source":"oracle_linux","title":"ELSA-2026-38500:  maven:3.9 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-38500.html"}