Ubuntu
ant package

ant 1.9.3-2ubuntu0.1 source package in Ubuntu

Changelog

ant (1.9.3-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Fix ZipSlip vulnerability
    - debian/patches/CVE-2018-10886-1.patch: don't extract entires outside of
      the destination directory in
      src/main/org/apache/tools/ant/taskdefs/Expand.java,
      src/tests/antunit/taskdefs/unzip-test.xml
    - debian/patches/CVE-2018-10886-2.patch: Update the manual
      manual/Tasks/unzip.html
    - debian/patches/CVE-2018-10886-3.patch: Small update to the manual entry
      manual/Tasks/unzip.html
    - debian/patches/CVE-2018-10886-4.patch: Change stripAbsolutePathSpec's
      default value
      manual/Tasks/unzip.html
      src/main/org/apache/tools/ant/taskdefs/Expand.java
    - debian/patches/CVE-2018-10886-5.patch: add additional isLeadingPath
      method that resolves symlinks
      src/main/org/apache/tools/ant/util/FileUtils.java
      src/tests/junit/org/apache/tools/ant/util/FileUtilsTest.java
    - debian/patches/CVE-2018-10886-6.patch: take symlinks into account when
      expanding archives and checking entries
      src/main/org/apache/tools/ant/taskdefs/Expand.java
    - CVE-2018-10886

 -- Mike Salvatore <email address hidden>  Mon, 23 Jul 2018 09:07:56 -0400

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates main java
Trusty security main java

Downloads

File Size SHA-256 Checksum
ant_1.9.3.orig.tar.xz 3.0 MiB a09015887b7023db75520fca74257e76e66092f21af086456d64fb2a65507f57
ant_1.9.3-2ubuntu0.1.debian.tar.gz 37.3 KiB f309b7f5f9d3a1dd2a576c8fb3829050fb871fe8834a11ffbb4ee22c2eda4b93
ant_1.9.3-2ubuntu0.1.dsc 2.6 KiB 14191fa275485e62b4fe9f603b220848115e3988d88bab1706a23c220cccfe4e

View changes file

Binary packages built by this source

ant: Java based build tool like make

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the scripts and the core
 tasks libraries.

ant-doc: Java based build tool like make - API documentation and manual

 A system independent (i.e. not shell based) build tool that uses XML files
 as "Makefiles". This package contains the manual of ant as well as the
 Javadoc API documentation.

ant-gcj: Java based build tool like make (GCJ)

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles".
 .
 This package contains a native version of ant built using gcj.

ant-gcj-dbgsym: debug symbols for package ant-gcj

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles".
 .
 This package contains a native version of ant built using gcj.

ant-optional: Java based build tool like make - optional libraries

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the optional tasks libraries.

ant-optional-gcj: Java based build tool like make - optional libraries (GCJ)

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the optional tasks libraries
 compiled natively.

ant-optional-gcj-dbgsym: debug symbols for package ant-optional-gcj

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the optional tasks libraries
 compiled natively.