Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1352-1

Опубликовано: 20 мая 2020
Источник: suse-cvrf

Описание

Security update for ant

This update for ant fixes the following issues:

Security issue fixed:

  • CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053).

Non-security issues fixed:

  • Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).
  • Remove jakarta-commons-logging dependencies (bsc#1133997).
  • Use apache-commons-logging in optional tasks

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP1
ant-1.9.10-3.6.1
ant-antlr-1.9.10-3.6.1
ant-apache-bcel-1.9.10-3.6.1
ant-apache-bsf-1.9.10-3.6.1
ant-apache-log4j-1.9.10-3.6.1
ant-apache-oro-1.9.10-3.6.1
ant-apache-regexp-1.9.10-3.6.1
ant-apache-resolver-1.9.10-3.6.1
ant-commons-logging-1.9.10-3.6.1
ant-javamail-1.9.10-3.6.1
ant-jdepend-1.9.10-3.6.1
ant-jmf-1.9.10-3.6.1
ant-junit-1.9.10-3.6.1
ant-manual-1.9.10-3.6.1
ant-scripts-1.9.10-3.6.1
ant-swing-1.9.10-3.6.1

Ссылки

Описание

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP1:ant-1.9.10-3.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP1:ant-antlr-1.9.10-3.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP1:ant-apache-bcel-1.9.10-3.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP1:ant-apache-bsf-1.9.10-3.6.1
Ссылки