415 matches found
Security Bulletin: Apache Ant as used by IBM QRadar SIEM is vulnerable to Insecure Temporary Files (CVE-2020-11979)
Summary Apache Ant as used by IBM QRadar SIEM is vulnerable to Insecure Temporary Files Vulnerability Details CVEID: CVE-2020-11979 DESCRIPTION: Apache Ant could allow a remote authenticated attacker to bypass security restrictions, caused by an insecure temporary file flaw. By sending a...
Security Bulletin: Vulnerability in Apache Ant affects IBM Spectrum Symphony
Summary These interim fixes provide instructions on upgrading Apache Ant to 1.10.9 in IBM Spectrum Symphony 7.2.0.2, IBM Spectrum Symphony 7.2.1, IBM Spectrum Symphony 7.3, and IBM Spectrum Symphony 7.3.1 in order to address security vulnerability CVE-2020-11979 in Apache Ant. Vulnerability Detai...
Security Bulletin: Gradle version in IBP javaenv and dind images depends on vulnerable Apache Ant
Summary Versions of IBP images javaenv and dind before 2.5.1 release on 12082020 included a version of gradle that depended upon vulnerable Apache libraries. Gradle is a build system, intended to aid in building chaincode, though not required for building chaincode. Vulnerability Details CVEID:...
[ASA-202012-5] ant: arbitrary code execution
Arch Linux Security Advisory ASA-202012-5 ========================================= Severity: Medium Date : 2020-12-05 CVE-ID : CVE-2020-11979 Package : ant Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1312 Summary ======= The package ant before version...
CVE-2020-11979
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...
GLSA-202011-18 : Apache Ant: Insecure temporary file
The remote host is affected by the vulnerability described in GLSA-202011-18 Apache Ant: Insecure temporary file A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact : A local attacker could perform symlink attacks to overwrite...
Apache Ant: Insecure temporary file
Background Ant is a Java-based build tool similar to ‘make’ that uses XML configuration files. Description A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact A local attacker could perform symlink attacks to overwrite arbitrary...
Huawei EulerOS: Security Advisory for ant (EulerOS-SA-2020-2327)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : ant (EulerOS-SA-2020-2327)
According to the version of the ant package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several...
Oracle Business Process Management Suite (Oct 2020 CPU)
The version of Oracle Business Process Management Suite installed on the remote host is affected by the following vulnerabilities as referenced in the October 2020 CPU advisory: - Vulnerability in the Runtime Engine Application Development Framework. An unauthenticated, remote attacker with netwo...
[SECURITY] Fedora 32 Update: ant-1.10.9-1.fc32
Apache Ant is a Java library and command-line tool whose mission is to drive processes described in build files as targets and extension points dependent upon each other. The main known usage of Ant is the build of Java applications. Ant supplies a number of built-in tasks allowing to compile,...
Fedora: Security Advisory for ant (FEDORA-2020-3ce0f55bc5)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for ant (FEDORA-2020-92b1d001b3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Important Photon OS Security Update - PHSA-2020-0155
Updates of 'containerd', 'apache-ant', 'python3', 'oniguruma' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-3.0-0155
Updates of 'containerd', 'oniguruma', 'python3', 'apache-ant' packages of Photon OS have been released...
Fedora: Security Advisory for ant (FEDORA-2020-2640aa4e19)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: ant-1.10.9-1.fc33
Apache Ant is a Java library and command-line tool whose mission is to drive processes described in build files as targets and extension points dependent upon each other. The main known usage of Ant is the build of Java applications. Ant supplies a number of built-in tasks allowing to compile,...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0335
An update of 'envoy', 'apache-ant' packages of Photon OS has been released...