Re: update apache-ant to 1.10.9

2020-10-11 Thread Jeremy Evans
On 10/11 12:42, Stuart Henderson wrote: > On 2020/10/10 23:39, Daniel Dickman wrote: > > This update includes a fix for CVE-2020-11979. > > > > To summarize, the fix for CVE-2020-1945 that was done in ant 1.10.8 did > > not work as intended so a new release of ant was made to try again. > > > >

Re: update apache-ant to 1.10.9

2020-10-11 Thread Stuart Henderson
On 2020/10/10 23:39, Daniel Dickman wrote: > This update includes a fix for CVE-2020-11979. > > To summarize, the fix for CVE-2020-1945 that was done in ant 1.10.8 did > not work as intended so a new release of ant was made to try again. > > Diff below includes a quirks update. > > The consumer

update apache-ant to 1.10.9

2020-10-10 Thread Daniel Dickman
This update includes a fix for CVE-2020-11979. To summarize, the fix for CVE-2020-1945 that was done in ant 1.10.8 did not work as intended so a new release of ant was made to try again. Diff below includes a quirks update. The consumers of ant were compile tested with the update below: editor