shield Security update for maven, maven-resolver, sbt, xmvn

SUSE-SLE-Module-Development-Tools-15-SP5-2023-4527

This update for maven, maven-resolver, sbt, xmvn fixes the following issues: - CVE-2023-46122: Fixed an arbitrary file write when extracting a crafted zip file with sbt (bsc#1216529). - Upgraded maven to version 3.9.4 - Upgraded maven-resolver to version 1.9.15.

• Release Date
  Nov 22 2023
• References
  Bugzilla: 1162112, 1216529
  CVEs: CVE-2023-46122
• Type
  security
• Severity
  moderate

cloud_download Downloads

Development Tools Module 15.5 x86_64

• Packages
  maven
  Java project management and project comprehension tool

  3.9.4-150200.4.18.1 lock rpm lock src

  maven-lib
  Core part of Maven

  3.9.4-150200.4.18.1 lock rpm

  maven-resolver
  Apache Maven Artifact Resolver library

  1.9.15-150200.3.14.2 lock src

  maven-resolver-api
  Maven Artifact Resolver API

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-connector-basic
  Maven Artifact Resolver Connector Basic

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-impl
  Maven Artifact Resolver Implementation

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-named-locks
  Maven Artifact Resolver Named Locks

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-spi
  Maven Artifact Resolver SPI

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-file
  Maven Artifact Resolver Transport File

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-http
  Maven Artifact Resolver Transport HTTP

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-wagon
  Maven Artifact Resolver Transport Wagon

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-util
  Maven Artifact Resolver Utilities

  1.9.15-150200.3.14.2 lock rpm

  xmvn
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.2.0-150200.3.14.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-core
  XMvn Core

  4.2.0-150200.3.14.1 lock rpm

  xmvn-install
  XMvn Install

  4.2.0-150200.3.14.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.2.0-150200.3.14.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.2.0-150200.3.14.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.2.0-150200.3.14.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock src

Development Tools Module 15.5 s390x

• Packages
  maven
  Java project management and project comprehension tool

  3.9.4-150200.4.18.1 lock rpm lock src

  maven-lib
  Core part of Maven

  3.9.4-150200.4.18.1 lock rpm

  maven-resolver
  Apache Maven Artifact Resolver library

  1.9.15-150200.3.14.2 lock src

  maven-resolver-api
  Maven Artifact Resolver API

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-connector-basic
  Maven Artifact Resolver Connector Basic

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-impl
  Maven Artifact Resolver Implementation

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-named-locks
  Maven Artifact Resolver Named Locks

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-spi
  Maven Artifact Resolver SPI

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-file
  Maven Artifact Resolver Transport File

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-http
  Maven Artifact Resolver Transport HTTP

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-wagon
  Maven Artifact Resolver Transport Wagon

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-util
  Maven Artifact Resolver Utilities

  1.9.15-150200.3.14.2 lock rpm

  xmvn
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.2.0-150200.3.14.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-core
  XMvn Core

  4.2.0-150200.3.14.1 lock rpm

  xmvn-install
  XMvn Install

  4.2.0-150200.3.14.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.2.0-150200.3.14.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.2.0-150200.3.14.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.2.0-150200.3.14.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock src

Development Tools Module 15.5 ppc64le

• Packages
  maven
  Java project management and project comprehension tool

  3.9.4-150200.4.18.1 lock rpm lock src

  maven-lib
  Core part of Maven

  3.9.4-150200.4.18.1 lock rpm

  maven-resolver
  Apache Maven Artifact Resolver library

  1.9.15-150200.3.14.2 lock src

  maven-resolver-api
  Maven Artifact Resolver API

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-connector-basic
  Maven Artifact Resolver Connector Basic

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-impl
  Maven Artifact Resolver Implementation

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-named-locks
  Maven Artifact Resolver Named Locks

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-spi
  Maven Artifact Resolver SPI

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-file
  Maven Artifact Resolver Transport File

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-http
  Maven Artifact Resolver Transport HTTP

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-wagon
  Maven Artifact Resolver Transport Wagon

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-util
  Maven Artifact Resolver Utilities

  1.9.15-150200.3.14.2 lock rpm

  xmvn
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.2.0-150200.3.14.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-core
  XMvn Core

  4.2.0-150200.3.14.1 lock rpm

  xmvn-install
  XMvn Install

  4.2.0-150200.3.14.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.2.0-150200.3.14.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.2.0-150200.3.14.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.2.0-150200.3.14.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock src

Development Tools Module 15.5 aarch64

• Packages
  maven
  Java project management and project comprehension tool

  3.9.4-150200.4.18.1 lock rpm lock src

  maven-lib
  Core part of Maven

  3.9.4-150200.4.18.1 lock rpm

  maven-resolver
  Apache Maven Artifact Resolver library

  1.9.15-150200.3.14.2 lock src

  maven-resolver-api
  Maven Artifact Resolver API

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-connector-basic
  Maven Artifact Resolver Connector Basic

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-impl
  Maven Artifact Resolver Implementation

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-named-locks
  Maven Artifact Resolver Named Locks

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-spi
  Maven Artifact Resolver SPI

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-file
  Maven Artifact Resolver Transport File

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-http
  Maven Artifact Resolver Transport HTTP

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-transport-wagon
  Maven Artifact Resolver Transport Wagon

  1.9.15-150200.3.14.2 lock rpm

  maven-resolver-util
  Maven Artifact Resolver Utilities

  1.9.15-150200.3.14.2 lock rpm

  xmvn
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.2.0-150200.3.14.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-core
  XMvn Core

  4.2.0-150200.3.14.1 lock rpm

  xmvn-install
  XMvn Install

  4.2.0-150200.3.14.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.2.0-150200.3.14.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.2.0-150200.3.14.1 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.2.0-150200.3.14.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.2.0-150200.3.14.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.2.0-150200.3.14.1 lock src