Ubuntu
ant package

ant 1.9.6-1ubuntu1.1 source package in Ubuntu

Changelog

ant (1.9.6-1ubuntu1.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Fix ZipSlip vulnerability
    - debian/patches/CVE-2018-10886-1.patch: don't extract entires outside of
      the destination directory in
      src/main/org/apache/tools/ant/taskdefs/Expand.java,
      src/tests/antunit/taskdefs/unzip-test.xml
    - debian/patches/CVE-2018-10886-2.patch: Update the manual
      manual/Tasks/unzip.html
    - debian/patches/CVE-2018-10886-3.patch: Small update to the manual entry
      manual/Tasks/unzip.html
    - debian/patches/CVE-2018-10886-4.patch: Change stripAbsolutePathSpec's
      default value
      manual/Tasks/unzip.html
      src/main/org/apache/tools/ant/taskdefs/Expand.java
    - debian/patches/CVE-2018-10886-5.patch: add additional isLeadingPath
      method that resolves symlinks
      src/main/org/apache/tools/ant/util/FileUtils.java
      src/tests/junit/org/apache/tools/ant/util/FileUtilsTest.java
    - debian/patches/CVE-2018-10886-6.patch: take symlinks into account when
      expanding archives and checking entries
      src/main/org/apache/tools/ant/taskdefs/Expand.java
    - CVE-2018-10886

 -- Mike Salvatore <email address hidden>  Fri, 20 Jul 2018 13:55:37 -0400

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates universe java
Xenial security universe java

Downloads

File Size SHA-256 Checksum
ant_1.9.6.orig.tar.xz 3.1 MiB a6ea6524945528502dafd4c77555608fc54df5bd5adcef133f45288f154f1920
ant_1.9.6-1ubuntu1.1.debian.tar.xz 20.1 KiB e816057dd231fe6b017e6d757883206a2f0a82b87ae768f23c65ef6fb60715e8
ant_1.9.6-1ubuntu1.1.dsc 2.6 KiB 96e6259662197f55a1b46c8f6187d7b937a25a1df4d5b1646da95bc0fde028f0

View changes file

Binary packages built by this source

ant: Java based build tool like make

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the scripts and the core
 tasks libraries.

ant-doc: Java based build tool like make - API documentation and manual

 A system independent (i.e. not shell based) build tool that uses XML files
 as "Makefiles". This package contains the manual of ant as well as the
 Javadoc API documentation.

ant-gcj: Java based build tool like make (GCJ)

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles".
 .
 This package contains a native version of ant built using gcj.

ant-gcj-dbgsym: debug symbols for package ant-gcj

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles".
 .
 This package contains a native version of ant built using gcj.

ant-optional: Java based build tool like make - optional libraries

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the optional tasks libraries.

ant-optional-gcj: Java based build tool like make - optional libraries (GCJ)

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the optional tasks libraries
 compiled natively.

ant-optional-gcj-dbgsym: debug symbols for package ant-optional-gcj

 A system independent (i.e. not shell based) build tool that uses XML
 files as "Makefiles". This package contains the optional tasks libraries
 compiled natively.