Bug#960630: ant: CVE-2020-1945

2020-05-17 Thread Emmanuel Bourg
Ant 1.10.8 adds a convenience property to change the temporary directory. It was already possible to change it in prior versions with: ANT_OPTS=-Djava.io.tmpdir=~/temp ant jar Now it's possible to use: ant jar -Dant.tmpdir=~/temp Or by setting the ant.tmpdir property inside the Ant

Bug#960630: ant: CVE-2020-1945

2020-05-14 Thread Salvatore Bonaccorso
Source: ant Version: 1.10.7-1 Severity: important Tags: security upstream Control: found -1 1.10.5-2 Control: found -1 1.9.9-1+deb9u1 Control: found -1 1.9.9-1 Hi, The following vulnerability was published for ant. CVE-2020-1945[0]: | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the