Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2866-1

Опубликовано: 26 сент. 2018
Источник: suse-cvrf

Описание

Security update for ant

This update for ant fixes the following issues:

Security issue fixed:

  • CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053)

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15
ant-1.9.10-3.3.1
ant-antlr-1.9.10-3.3.1
ant-apache-bcel-1.9.10-3.3.1
ant-apache-bsf-1.9.10-3.3.1
ant-apache-log4j-1.9.10-3.3.1
ant-apache-oro-1.9.10-3.3.1
ant-apache-regexp-1.9.10-3.3.1
ant-apache-resolver-1.9.10-3.3.1
ant-commons-logging-1.9.10-3.3.1
ant-javamail-1.9.10-3.3.1
ant-jdepend-1.9.10-3.3.1
ant-jmf-1.9.10-3.3.1
ant-junit-1.9.10-3.3.1
ant-manual-1.9.10-3.3.1
ant-scripts-1.9.10-3.3.1
ant-swing-1.9.10-3.3.1

Ссылки

Описание

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15:ant-1.9.10-3.3.1
SUSE Linux Enterprise Module for Development Tools 15:ant-antlr-1.9.10-3.3.1
SUSE Linux Enterprise Module for Development Tools 15:ant-apache-bcel-1.9.10-3.3.1
SUSE Linux Enterprise Module for Development Tools 15:ant-apache-bsf-1.9.10-3.3.1
Ссылки