Oval Definition:oval:org.opensuse.security:def:126091
Revision Date:2020-05-20Version:1
Title:Security update for ant (Moderate)
Description:

This update for ant fixes the following issues:

Security issue fixed:

- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053).

Non-security issues fixed:

- Add rhino to the ant-apache-bsf optional tasks (bsc#1134001). - Remove jakarta-commons-logging dependencies (bsc#1133997). - Use apache-commons-logging in optional tasks
Family:unixClass:patch
Status:Reference(s):1100053
1133997
1134001
CVE-2018-10886
SUSE-SU-2020:1351-1
Platform(s):SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP4
Product(s):
Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND Package Information
  • ant-1.9.4-3.6.1 is installed
  • OR ant-antlr-1.9.4-3.6.1 is installed
  • OR ant-apache-bcel-1.9.4-3.6.1 is installed
  • OR ant-apache-bsf-1.9.4-3.6.1 is installed
  • OR ant-apache-log4j-1.9.4-3.6.1 is installed
  • OR ant-apache-oro-1.9.4-3.6.1 is installed
  • OR ant-apache-regexp-1.9.4-3.6.1 is installed
  • OR ant-apache-resolver-1.9.4-3.6.1 is installed
  • OR ant-commons-logging-1.9.4-3.6.1 is installed
  • OR ant-javadoc-1.9.4-3.6.1 is installed
  • OR ant-javamail-1.9.4-3.6.1 is installed
  • OR ant-jdepend-1.9.4-3.6.1 is installed
  • OR ant-jmf-1.9.4-3.6.1 is installed
  • OR ant-junit-1.9.4-3.6.1 is installed
  • OR ant-manual-1.9.4-3.6.1 is installed
  • OR ant-scripts-1.9.4-3.6.1 is installed
  • OR ant-swing-1.9.4-3.6.1 is installed
  • BACK