Stay Secure with the Latest Linux Advisories

security advisorymoderateupdate

Debian 8 DLA-1431-1 Moderate: Ant File Extraction Risk Advisory

unzip and untar target tasks in ant allows the extraction of files outside the target directory. A crafted zip or tar file submitted to an Ant build could create or overwrite arbitrary files with the . Package : ant Version : 1.9.4-3+deb8u1 CVE ID : CVE-2018-10886 unzip and untar target tasks in ant allows the extraction of files outside the target directory. A crafted zip or tar file submitted to an Ant build could create or overwrite arbitrary files with the privileges of the user running Ant. For Debian 8 "Jessie", these problems have been fixed in version 1.9.4-3+deb8u1. We recommend that you upgrade your ant packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Package : ant Version : 1.9.4-3+deb8u1 CVE ID : CVE-2018-10886 unzip and untar target tasks in ant a. target, unzip, untar, tasks, allows, extraction, files, outside, directory. . Severity: Important. LinuxSecurity.com Team

Jul 19, 2018 •Important Debian LTS