[CVE-2020-11979] Apache Ant insecure temporary file vulnerability

2020-09-30 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2020-11979: Apache Ant insecure temporary file vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Ant 1.10.8 Description: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of

[ANN] Apache Ant 1.10.9 Released

2020-09-30 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The Apache Ant Team is pleased to announce the release of Apache Ant 1.10.9. Apache Ant is a Java library and command-line tool that helps building software. The Apache Ant team currently maintains two lines of development. The 1.9.x releases require