The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gradleUpgrade apache-ant | Aug 22, 2024 | Oct 1, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 1, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | Oct 1, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Nov 17, 2020 | Oct 1, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ant-libUpgrade ant | Feb 2, 2021 | Oct 1, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.9-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Oct 1, 2020 |
| Redhat Openshift | — | Upgrade runcUpgrade jenkinsUpgrade openshiftUpgrade machine-config-daemonUpgrade openshift-ansibleUpgrade conmonUpgrade openshift-clients | Feb 18, 2021 | Oct 1, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 1, 2020 |
| Suse | — | Upgrade antlr3-java-javadocUpgrade ant-contrib-manualUpgrade maven-plugin-tools-antUpgrade ant-swingUpgrade ant-apache-resolverUpgrade antlr4-javaUpgrade jetty-antUpgrade ant-apache-bcelUpgrade ant-jdependUpgrade antlr-bootstrapUpgrade antlr3-javaUpgrade ant-contrib-javadocUpgrade plexus-ant-factoryUpgrade antlr3-toolUpgrade ant-apache-oroUpgrade ant-junit5Upgrade ant-manualUpgrade maven-antrun-pluginUpgrade ant-jmfUpgrade ant-xzUpgrade ant-antlrUpgrade maven-antrun-plugin-javadocUpgrade maven-script-antUpgrade ant-contribUpgrade jsch-agent-proxy-pageantUpgrade libantlr4-runtime-develUpgrade antlr-develUpgrade ant-apache-xalan2Upgrade ant-scalaUpgrade paranamer-antUpgrade antlr4-javadocUpgrade ant-jschUpgrade antlrUpgrade antUpgrade antlr-manualUpgrade ant-imageioUpgrade plexus-ant-factory-javadocUpgrade ant-apache-regexpUpgrade antlr3-bootstrap-toolUpgrade antlr-javaUpgrade antlr4-toolUpgrade ant-commons-netUpgrade ant-scriptsUpgrade ant-apache-bsfUpgrade ant-commons-loggingUpgrade groovy-antUpgrade ant-testutilUpgrade antlr3-javadocUpgrade ant-javamailUpgrade antlr4-maven-pluginUpgrade ant-javadocUpgrade ant-junitUpgrade ant-apache-log4j | Aug 9, 2024 | Oct 1, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub