CVE catalog

CVE-2023-46122

Security update for maven, maven-resolver, sbt, xmvn

[CVE catalog]

Severity
Low · CVSS 3.9CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.37% · Oct 27, 2026

This update for maven, maven-resolver, sbt, xmvn fixes the following issues: - CVE-2023-46122: Fixed an arbitrary file write when extracting a crafted zip file with sbt (bsc#1216529). - Upgraded maven to version 3.9.4 - Upgraded maven-resolver to version 1.9.15.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susemavenlinux enterprise module for development tools 15 sp43.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise module for development tools 15 sp41.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1fixed
Susemavenlinux enterprise module for development tools 15 sp53.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise module for development tools 15 sp51.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1fixed
Susesbtlinux enterprise module for package hub 15 sp50.13.18-150200.4.16.1fixed
Susesbt-bootstraplinux enterprise module for package hub 15 sp50.13.18-150200.4.16.1fixed
Susemavenlinux enterprise high performance computing 15 sp2-ltss3.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise high performance computing 15 sp2-ltss1.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susemavenlinux enterprise high performance computing 15 sp3-espos3.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise high performance computing 15 sp3-espos1.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1fixed
Susemavenlinux enterprise high performance computing 15 sp3-ltss3.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise high performance computing 15 sp3-ltss1.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susemavenlinux enterprise server 15 sp2-ltss3.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise server 15 sp2-ltss1.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1fixed
Susemavenlinux enterprise server 15 sp3-ltss3.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise server 15 sp3-ltss1.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1fixed
Susemavenlinux enterprise server for sap applications 15 sp23.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise server for sap applications 15 sp21.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1fixed
Susemavenlinux enterprise server for sap applications 15 sp33.9.4-150200.4.18.1fixed
Susemaven-resolverlinux enterprise server for sap applications 15 sp31.9.15-150200.3.14.2fixed
Susexmvnlinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1fixed
Susexmvn-connectorlinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1fixed
Susexmvn-mojolinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1fixed
Susexmvn-toolslinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1fixed
Susemavenenterprise storage 7.13.9.4-150200.4.18.1fixed
Susemaven-resolverenterprise storage 7.11.9.15-150200.3.14.2fixed
Susexmvnenterprise storage 7.14.2.0-150200.3.14.1fixed
Susexmvn-connectorenterprise storage 7.14.2.0-150200.3.14.1fixed
Susexmvn-mojoenterprise storage 7.14.2.0-150200.3.14.1fixed
Susexmvn-toolsenterprise storage 7.14.2.0-150200.3.14.1fixed
Opensusemavenleap 15.43.9.4-150200.4.18.1fixed
Opensusemaven-resolverleap 15.41.9.15-150200.3.14.2fixed
Opensusesbtleap 15.40.13.18-150200.4.16.1fixed
Opensusesbt-bootstrapleap 15.40.13.18-150200.4.16.1fixed
Opensusexmvnleap 15.44.2.0-150200.3.14.1fixed
Opensusexmvn-connectorleap 15.44.2.0-150200.3.14.1fixed
Opensusexmvn-mojoleap 15.44.2.0-150200.3.14.1fixed
Opensusexmvn-parentleap 15.44.2.0-150200.3.14.1fixed
Opensusexmvn-toolsleap 15.44.2.0-150200.3.14.1fixed
Opensusemavenleap 15.53.9.4-150200.4.18.1fixed
Opensusemaven-resolverleap 15.51.9.15-150200.3.14.2fixed
Opensusesbtleap 15.50.13.18-150200.4.16.1fixed
Opensusesbt-bootstrapleap 15.50.13.18-150200.4.16.1fixed
Opensusexmvnleap 15.54.2.0-150200.3.14.1fixed
Opensusexmvn-connectorleap 15.54.2.0-150200.3.14.1fixed
Opensusexmvn-mojoleap 15.54.2.0-150200.3.14.1fixed
Opensusexmvn-parentleap 15.54.2.0-150200.3.14.1fixed
Opensusexmvn-toolsleap 15.54.2.0-150200.3.14.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susemavenrpmlinux enterprise module for development tools 15 sp43.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise module for development tools 15 sp41.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise module for development tools 15 sp44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise module for development tools 15 sp53.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise module for development tools 15 sp51.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise module for development tools 15 sp54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susesbtrpmlinux enterprise module for package hub 15 sp50.13.18-150200.4.16.1Not reportedSUSE-SU-2023:4527-1Not reported
Susesbt-bootstraprpmlinux enterprise module for package hub 15 sp50.13.18-150200.4.16.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise high performance computing 15 sp2-ltss3.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise high performance computing 15 sp2-ltss1.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise high performance computing 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise high performance computing 15 sp3-espos3.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise high performance computing 15 sp3-espos1.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise high performance computing 15 sp3-espos4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise high performance computing 15 sp3-ltss3.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise high performance computing 15 sp3-ltss1.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise high performance computing 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise server 15 sp2-ltss3.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise server 15 sp2-ltss1.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise server 15 sp2-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise server 15 sp3-ltss3.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise server 15 sp3-ltss1.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise server 15 sp3-ltss4.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise server for sap applications 15 sp23.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise server for sap applications 15 sp21.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise server for sap applications 15 sp24.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmlinux enterprise server for sap applications 15 sp33.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmlinux enterprise server for sap applications 15 sp31.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmlinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmlinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmlinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmlinux enterprise server for sap applications 15 sp34.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemavenrpmenterprise storage 7.13.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Susemaven-resolverrpmenterprise storage 7.11.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvnrpmenterprise storage 7.14.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-connectorrpmenterprise storage 7.14.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-mojorpmenterprise storage 7.14.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Susexmvn-toolsrpmenterprise storage 7.14.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusemavenrpmleap 15.43.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusemaven-resolverrpmleap 15.41.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Opensusesbtrpmleap 15.40.13.18-150200.4.16.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusesbt-bootstraprpmleap 15.40.13.18-150200.4.16.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvnrpmleap 15.44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-connectorrpmleap 15.44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-mojorpmleap 15.44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-parentrpmleap 15.44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-toolsrpmleap 15.44.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusemavenrpmleap 15.53.9.4-150200.4.18.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusemaven-resolverrpmleap 15.51.9.15-150200.3.14.2Not reportedSUSE-SU-2023:4527-1Not reported
Opensusesbtrpmleap 15.50.13.18-150200.4.16.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusesbt-bootstraprpmleap 15.50.13.18-150200.4.16.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvnrpmleap 15.54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-connectorrpmleap 15.54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-mojorpmleap 15.54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-parentrpmleap 15.54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported
Opensusexmvn-toolsrpmleap 15.54.2.0-150200.3.14.1Not reportedSUSE-SU-2023:4527-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References