[ GLSA 202007-34 ] Apache Ant

[GLSA]

Gentoo Linux Security Advisory

Title: Apache Ant: Multiple vulnerabilities (GLSA 202007-34)
Severity: normal
Exploitable: local
Date: 2020-07-27
Bug(s): #723086
ID: 202007-34

Synopsis

Apache Ant uses various insecure temporary files possibly allowing
local code execution.


Background

Ant is a Java-based build tool similar to ‘make’ that uses XML
configuration files.


Affected Packages

Package: dev-java/ant
Vulnerable: < 1.10.8
Unaffected: >= 1.10.8
Architectures: All supported architectures


Description

Apache Ant was found to be using multiple insecure temporary files which
may disclose sensitive information or execute code from an unsafe local
location.


Impact

A local attacker could possibly execute arbitrary code with the
privileges of the process, or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Apache Ant users should upgrade to the latest version: