Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0703-1

Опубликовано: 23 мая 2020
Источник: suse-cvrf

Описание

Security update for ant

This update for ant fixes the following issues:

Security issue fixed:

  • CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053).

Non-security issues fixed:

  • Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).
  • Remove jakarta-commons-logging dependencies (bsc#1133997).
  • Use apache-commons-logging in optional tasks

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
ant-1.9.10-lp151.4.3.1
ant-antlr-1.9.10-lp151.4.3.1
ant-apache-bcel-1.9.10-lp151.4.3.1
ant-apache-bsf-1.9.10-lp151.4.3.1
ant-apache-log4j-1.9.10-lp151.4.3.1
ant-apache-oro-1.9.10-lp151.4.3.1
ant-apache-regexp-1.9.10-lp151.4.3.1
ant-apache-resolver-1.9.10-lp151.4.3.1
ant-apache-xalan2-1.9.10-lp151.4.3.1
ant-commons-logging-1.9.10-lp151.4.3.1
ant-commons-net-1.9.10-lp151.4.3.1
ant-javamail-1.9.10-lp151.4.3.1
ant-jdepend-1.9.10-lp151.4.3.1
ant-jmf-1.9.10-lp151.4.3.1
ant-jsch-1.9.10-lp151.4.3.1
ant-junit-1.9.10-lp151.4.3.1
ant-manual-1.9.10-lp151.4.3.1
ant-scripts-1.9.10-lp151.4.3.1
ant-swing-1.9.10-lp151.4.3.1
ant-testutil-1.9.10-lp151.4.3.1

Ссылки

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None.

Затронутые продукты
openSUSE Leap 15.1:ant-1.9.10-lp151.4.3.1
openSUSE Leap 15.1:ant-antlr-1.9.10-lp151.4.3.1
openSUSE Leap 15.1:ant-apache-bcel-1.9.10-lp151.4.3.1
openSUSE Leap 15.1:ant-apache-bsf-1.9.10-lp151.4.3.1
Ссылки