Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:2367-1

Опубликовано: 31 дек. 2020
Источник: suse-cvrf

Описание

Security update for groovy

This update for groovy fixes the following issues:

  • groovy was updated to 2.4.21
  • CVE-2020-17521: Fixed an information disclosure vulnerability (bsc#1179729).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
groovy-2.4.21-lp152.2.3.2
groovy-ant-2.4.21-lp152.2.3.2
groovy-bsf-2.4.21-lp152.2.3.2
groovy-console-2.4.21-lp152.2.3.2
groovy-docgenerator-2.4.21-lp152.2.3.2
groovy-groovydoc-2.4.21-lp152.2.3.2
groovy-groovysh-2.4.21-lp152.2.3.2
groovy-jmx-2.4.21-lp152.2.3.2
groovy-json-2.4.21-lp152.2.3.2
groovy-jsr223-2.4.21-lp152.2.3.2
groovy-lib-2.4.21-lp152.2.3.2
groovy-nio-2.4.21-lp152.2.3.2
groovy-servlet-2.4.21-lp152.2.3.2
groovy-sql-2.4.21-lp152.2.3.2
groovy-swing-2.4.21-lp152.2.3.2
groovy-templates-2.4.21-lp152.2.3.2
groovy-test-2.4.21-lp152.2.3.2
groovy-testng-2.4.21-lp152.2.3.2
groovy-xml-2.4.21-lp152.2.3.2

Ссылки

Описание

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.

Затронутые продукты
openSUSE Leap 15.2:groovy-2.4.21-lp152.2.3.2
openSUSE Leap 15.2:groovy-ant-2.4.21-lp152.2.3.2
openSUSE Leap 15.2:groovy-bsf-2.4.21-lp152.2.3.2
openSUSE Leap 15.2:groovy-console-2.4.21-lp152.2.3.2
Ссылки