[CLSA-2026:1786433114] maven: Fix of CVE-2021-26291
Type:
security
Severity:
Critical
Release date:
2026-08-11 07:25:26 UTC
Description:
- CVE-2021-26291: block external HTTP repositories by default (MNG-7116, MNG-7117, MNG-7118, MNG-7128)
CVEs fixed:
Updated packages:
  • maven-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm
    sha:3f181adb7da6fc71fd6994de747d20fd32cf68977f573dcdf0b8749632341583
  • maven-javadoc-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm
    sha:79b021dfd2748fb5d1cb006e2b15d23d77b7ac495b8034ee95f4b99c55527943
  • maven-lib-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm
    sha:611043791345d6944148812fd517b3a5bb263b6fb8121bfbe35ec1d86433a3e2
  • maven-openjdk11-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm
    sha:486f42172c18ec14baec0ff40db1a9b51c0c047f7b037c7b885238aa4388157a
  • maven-openjdk17-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm
    sha:2dd1506ac2afe94f4aaf7bcacff293578c53fcb255cb18dfd86b2d8325015b35
  • maven-openjdk8-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm
    sha:79467bf51aa2fbdc426aa0cd3870985e218df0fd09fba26c83b6fe3e1e38b209
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.