The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gradleUpgrade apache-ant | Aug 22, 2024 | Oct 1, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 1, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | Oct 1, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Nov 17, 2020 | Oct 1, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ant-libUpgrade ant | Feb 2, 2021 | Oct 1, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.9-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Oct 1, 2020 |
| Redhat Openshift | — | Upgrade jenkinsUpgrade openshift-ansibleUpgrade openshiftUpgrade conmonUpgrade openshift-clientsUpgrade machine-config-daemonUpgrade runc | Feb 18, 2021 | Oct 1, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 1, 2020 |
| Suse | — | Upgrade antlr4-javadocUpgrade antlr-manualUpgrade antlr3-javadocUpgrade libantlr4-runtime-develUpgrade antlr-javaUpgrade ant-testutilUpgrade antlr3-bootstrap-toolUpgrade ant-scalaUpgrade antlr-develUpgrade ant-apache-xalan2Upgrade ant-apache-log4jUpgrade plexus-ant-factory-javadocUpgrade ant-junitUpgrade antlr4-toolUpgrade ant-scriptsUpgrade antUpgrade antlrUpgrade ant-commons-netUpgrade ant-jschUpgrade ant-commons-loggingUpgrade ant-apache-bsfUpgrade paranamer-antUpgrade ant-imageioUpgrade ant-javamailUpgrade ant-apache-regexpUpgrade groovy-antUpgrade ant-javadocUpgrade antlr4-maven-pluginUpgrade ant-apache-oroUpgrade maven-plugin-tools-antUpgrade ant-apache-bcelUpgrade ant-swingUpgrade maven-antrun-plugin-javadocUpgrade jsch-agent-proxy-pageantUpgrade ant-contrib-manualUpgrade antlr3-javaUpgrade antlr-bootstrapUpgrade ant-manualUpgrade plexus-ant-factoryUpgrade ant-xzUpgrade ant-apache-resolverUpgrade antlr3-java-javadocUpgrade ant-contrib-javadocUpgrade antlr3-toolUpgrade antlr4-javaUpgrade jetty-antUpgrade ant-contribUpgrade ant-antlrUpgrade ant-jmfUpgrade maven-script-antUpgrade maven-antrun-pluginUpgrade ant-junit5Upgrade ant-jdepend | Aug 9, 2024 | Oct 1, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub