Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1351-1

Опубликовано: 20 мая 2020
Источник: suse-cvrf

Описание

Security update for ant

This update for ant fixes the following issues:

Security issue fixed:

  • CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053).

Non-security issues fixed:

  • Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).
  • Remove jakarta-commons-logging dependencies (bsc#1133997).
  • Use apache-commons-logging in optional tasks

Список пакетов

SUSE Linux Enterprise Server 12 SP4
ant-1.9.4-3.6.1
SUSE Linux Enterprise Server 12 SP5
ant-1.9.4-3.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
ant-1.9.4-3.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ant-1.9.4-3.6.1
SUSE Linux Enterprise Software Development Kit 12 SP4
ant-1.9.4-3.6.1
ant-antlr-1.9.4-3.6.1
ant-apache-bcel-1.9.4-3.6.1
ant-apache-bsf-1.9.4-3.6.1
ant-apache-log4j-1.9.4-3.6.1
ant-apache-oro-1.9.4-3.6.1
ant-apache-regexp-1.9.4-3.6.1
ant-apache-resolver-1.9.4-3.6.1
ant-commons-logging-1.9.4-3.6.1
ant-javadoc-1.9.4-3.6.1
ant-javamail-1.9.4-3.6.1
ant-jdepend-1.9.4-3.6.1
ant-jmf-1.9.4-3.6.1
ant-junit-1.9.4-3.6.1
ant-manual-1.9.4-3.6.1
ant-scripts-1.9.4-3.6.1
ant-swing-1.9.4-3.6.1
SUSE Linux Enterprise Software Development Kit 12 SP5
ant-1.9.4-3.6.1
ant-antlr-1.9.4-3.6.1
ant-apache-bcel-1.9.4-3.6.1
ant-apache-bsf-1.9.4-3.6.1
ant-apache-log4j-1.9.4-3.6.1
ant-apache-oro-1.9.4-3.6.1
ant-apache-regexp-1.9.4-3.6.1
ant-apache-resolver-1.9.4-3.6.1
ant-commons-logging-1.9.4-3.6.1
ant-javadoc-1.9.4-3.6.1
ant-javamail-1.9.4-3.6.1
ant-jdepend-1.9.4-3.6.1
ant-jmf-1.9.4-3.6.1
ant-junit-1.9.4-3.6.1
ant-manual-1.9.4-3.6.1
ant-scripts-1.9.4-3.6.1
ant-swing-1.9.4-3.6.1

Ссылки

Описание

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None

Затронутые продукты
SUSE Linux Enterprise Server 12 SP4:ant-1.9.4-3.6.1
SUSE Linux Enterprise Server 12 SP5:ant-1.9.4-3.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4:ant-1.9.4-3.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:ant-1.9.4-3.6.1
Ссылки