RedHat has Errata available for the current maven package (RHSA-2022:4797)
But maven is a module and pinned to version 3.5, therefore never updated.
It is also protected by package lock.
Maven module repos to be updated to higher versions, as it seems to be installed with foreman.
Or is it save to enable higher version manually?
Foreman and Proxy versions:
Foreman and Proxy plugin versions:
Distribution and version:
Red Hat Enterprise Linux release 8.7 (Ootpa)
Other relevant data:
dnf module list maven
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
Name Stream Profiles
maven 3.5 [d][e] common [d]
maven 3.6 common [d]
maven 3.8 common [d]