p PatchFirst

RLSA-2025:9318

RLSA-2025:9318 · Important: javapackages-tools:201801 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 8.8 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ant Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.10.5-1.module+el8.3.0+74+855e3f5d

    Update to 0:1.10.5-1.module+el8.3.0+74+855e3f5d

  • ant Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb

  • ant-contrib Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d

    Update to 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d

  • antlr Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:2.7.7-56.module+el8.3.0+74+855e3f5d

    Update to 0:2.7.7-56.module+el8.3.0+74+855e3f5d

  • aopalliance Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.0-17.module+el8.6.0+843+5a13dac3

    Update to 0:1.0-17.module+el8.6.0+843+5a13dac3

  • aopalliance Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.0-17.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.0-17.module+el8.10.0+2003+8aeac9cb

  • aopalliance Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.0-17.module+el8.3.0+74+855e3f5d

    Update to 0:1.0-17.module+el8.3.0+74+855e3f5d

  • apache-commons-beanutils Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb

  • apache-commons-cli Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.4-4.module+el8.6.0+843+5a13dac3

    Update to 0:1.4-4.module+el8.6.0+843+5a13dac3

  • apache-commons-cli Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.4-4.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.4-4.module+el8.10.0+2003+8aeac9cb

  • apache-commons-cli Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.4-4.module+el8.3.0+74+855e3f5d

    Update to 0:1.4-4.module+el8.3.0+74+855e3f5d

  • apache-commons-codec Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.11-3.module+el8.6.0+843+5a13dac3

    Update to 0:1.11-3.module+el8.6.0+843+5a13dac3

  • apache-commons-codec Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.11-3.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.11-3.module+el8.10.0+2003+8aeac9cb

  • apache-commons-codec Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.11-3.module+el8.3.0+74+855e3f5d

    Update to 0:1.11-3.module+el8.3.0+74+855e3f5d

  • apache-commons-collections Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.2.2-10.module+el8.10.0+1763+c7c02164

    Update to 0:3.2.2-10.module+el8.10.0+1763+c7c02164

  • apache-commons-collections Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.2.2-10.module+el8.3.0+74+855e3f5d

    Update to 0:3.2.2-10.module+el8.3.0+74+855e3f5d

  • apache-commons-compress Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.18-1.module+el8.3.0+74+855e3f5d

    Update to 0:1.18-1.module+el8.3.0+74+855e3f5d

  • apache-commons-compress Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.18-1.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.18-1.module+el8.10.0+2003+8aeac9cb

  • apache-commons-exec Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.3-8.module+el8.3.0+74+855e3f5d

    Update to 0:1.3-8.module+el8.3.0+74+855e3f5d

  • apache-commons-io Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 1:2.6-3.module+el8.6.0+843+5a13dac3

    Update to 1:2.6-3.module+el8.6.0+843+5a13dac3

  • apache-commons-io Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 1:2.6-3.module+el8.3.0+74+855e3f5d

    Update to 1:2.6-3.module+el8.3.0+74+855e3f5d

  • apache-commons-io Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 1:2.6-3.module+el8.10.0+2003+8aeac9cb

    Update to 1:2.6-3.module+el8.10.0+2003+8aeac9cb

  • apache-commons-jxpath Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.3-29.module+el8.3.0+74+855e3f5d

    Update to 0:1.3-29.module+el8.3.0+74+855e3f5d

  • apache-commons-jxpath Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.3-29.module+el8.10.0+2003+8aeac9cb

    Update to 0:1.3-29.module+el8.10.0+2003+8aeac9cb

Original sources

Check your server →