Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:2895-1

Опубликовано: 27 сент. 2018
Источник: suse-cvrf

Описание

Security update for ant

This update for ant fixes the following issues:

Security issue fixed:

  • CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
ant-1.9.10-lp150.2.3.1
ant-antlr-1.9.10-lp150.2.3.1
ant-apache-bcel-1.9.10-lp150.2.3.1
ant-apache-bsf-1.9.10-lp150.2.3.1
ant-apache-log4j-1.9.10-lp150.2.3.1
ant-apache-oro-1.9.10-lp150.2.3.1
ant-apache-regexp-1.9.10-lp150.2.3.1
ant-apache-resolver-1.9.10-lp150.2.3.1
ant-apache-xalan2-1.9.10-lp150.2.3.1
ant-commons-logging-1.9.10-lp150.2.3.1
ant-commons-net-1.9.10-lp150.2.3.1
ant-javamail-1.9.10-lp150.2.3.1
ant-jdepend-1.9.10-lp150.2.3.1
ant-jmf-1.9.10-lp150.2.3.1
ant-jsch-1.9.10-lp150.2.3.1
ant-junit-1.9.10-lp150.2.3.1
ant-manual-1.9.10-lp150.2.3.1
ant-scripts-1.9.10-lp150.2.3.1
ant-swing-1.9.10-lp150.2.3.1
ant-testutil-1.9.10-lp150.2.3.1

Ссылки

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None.

Затронутые продукты
openSUSE Leap 15.0:ant-1.9.10-lp150.2.3.1
openSUSE Leap 15.0:ant-antlr-1.9.10-lp150.2.3.1
openSUSE Leap 15.0:ant-apache-bcel-1.9.10-lp150.2.3.1
openSUSE Leap 15.0:ant-apache-bsf-1.9.10-lp150.2.3.1
Ссылки