Format: 1.8
Date: Fri, 29 May 2020 10:33:36 -0400
Source: ant
Binary: ant ant-doc ant-optional
Architecture: all
Version: 1.10.6-1ubuntu0.1
Distribution: eoan
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-013.buildd>
Changed-By: Mike Salvatore <mike.salvatore@canonical.com>
Description:
 ant        - Java based build tool like make
 ant-doc    - Java based build tool like make - API documentation and manual
 ant-optional - Java based build tool like make - optional libraries
Changes:
 ant (1.10.6-1ubuntu0.1) eoan-security; urgency=medium
 .
   * SECURITY UPDATE: Information leak, Code injection
     - debian/patches/CVE-2020-1945-1.patch: provide a magic property that
       overrides temp directory
     - debian/patches/CVE-2020-1945-2.patch: recommend using ant.tmpdir
     - debian/patches/CVE-2020-1945-3.patch: make junit launcher and friends
       use FileUtils.createTempFile
     - debian/patches/CVE-2020-1945-4.patch: make junit launcher use ant.tmpdir
       as well
     - debian/patches/CVE-2020-1945-5.patch: use nio.Files.createTempFile
       rather than File.createTempFile
     - CVE-2020-1945
Checksums-Sha1:
 09a99879e52949f926be695c7c950c4f75ef1d89 2423800 ant-doc_1.10.6-1ubuntu0.1_all.deb
 0bc4d9aa771354607f5054253b9ea95928198e5b 367168 ant-optional_1.10.6-1ubuntu0.1_all.deb
 e1fab9b096a76a5b8d9d58ed45dad6ed08db0378 2101472 ant_1.10.6-1ubuntu0.1_all.deb
 0a7258bbad8331532d75f0a23a76cc16c4684aa2 8887 ant_1.10.6-1ubuntu0.1_amd64.buildinfo
Checksums-Sha256:
 fcfda404f4c5df57a4ccc9970bcd6633d1c28c7613e7a75b90fc8d6b74227a03 2423800 ant-doc_1.10.6-1ubuntu0.1_all.deb
 bde8dc97b79a4638bed021886d567b4c9eeba21c4e5277b1f52098b02987e9d0 367168 ant-optional_1.10.6-1ubuntu0.1_all.deb
 647f46832741bf32b8c3153c1c00258298ad7112d419fd849bcb3d4336a63f00 2101472 ant_1.10.6-1ubuntu0.1_all.deb
 e806f4e52496926cccdd7c8862d5cf71aead1487487d22a12cae6514ec5a2f5c 8887 ant_1.10.6-1ubuntu0.1_amd64.buildinfo
Files:
 247455129f73d2a706471263fc359a6f 2423800 doc optional ant-doc_1.10.6-1ubuntu0.1_all.deb
 bab6581b391fcd2c32bd4b3c732d422d 367168 java optional ant-optional_1.10.6-1ubuntu0.1_all.deb
 8481c373f9ad6629932f9b48f9365c8a 2101472 java optional ant_1.10.6-1ubuntu0.1_all.deb
 0123e0ff989b7105e7a0810e52483150 8887 java optional ant_1.10.6-1ubuntu0.1_amd64.buildinfo
Original-Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>