Bug 29257

Summary:	ant new security issues CVE-2021-3637[34]
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	RPM Packages	Assignee:	Java Stack Maintainers <java>
Status:	NEW ---	QA Contact:
Severity:	normal
Priority:	Normal
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA8TOO
Source RPM:	ant-1.10.9-1.mga8.src.rpm	CVE:
Status comment:	Fixed upstream in 1.10.11

Description David Walser 2021-07-14 16:19:09 CEST

Apache has issued advisories on July 13:
https://www.openwall.com/lists/oss-security/2021/07/13/5
https://www.openwall.com/lists/oss-security/2021/07/13/6

See also:
https://ant.apache.org/security.html

The issues are fixed upstream in 1.10.11.

Mageia 8 is also affected.

David Walser 2021-07-14 16:19:28 CEST

Status comment: (none) => Fixed upstream in 1.10.11
Whiteboard: (none) => MGA8TOO

Comment 1 David Walser 2022-05-02 20:00:08 CEST

openSUSE has issued an advisory for this on April 27:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXY7DJ3ZRXW5ELKGQV46EF2S2IYSY5P7/