Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache-ant | Jun 16, 2020 | May 14, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 14, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | May 14, 2020 |
| Freebsd | — | Upgrade apache-ant | Sep 29, 2020 | Sep 28, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Jul 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ant | Nov 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ant | Sep 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ant | Sep 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade antUpgrade ant-lib | Jul 31, 2020 | May 14, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.8-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 14, 2020 |
| Redhat Openshift | — | Upgrade conmonUpgrade machine-config-daemonUpgrade openshift-clientsUpgrade jenkinsUpgrade openshift-ansibleUpgrade openshiftUpgrade runc | Feb 18, 2021 | May 13, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2020 |
| Suse | — | Upgrade ant-junitUpgrade ant-commons-netUpgrade ant-commons-loggingUpgrade ant-jmfUpgrade ant-jschUpgrade ant-xzUpgrade ant-manualUpgrade ant-scriptsUpgrade ant-imageioUpgrade ant-antlrUpgrade ant-swingUpgrade ant-apache-xalan2Upgrade ant-apache-oroUpgrade antUpgrade ant-apache-bcelUpgrade ant-junit5Upgrade ant-apache-bsfUpgrade ant-jdependUpgrade ant-apache-log4jUpgrade ant-apache-resolverUpgrade ant-testutilUpgrade ant-apache-regexpUpgrade ant-javamail | Jul 21, 2020 | May 14, 2020 |
| Ubuntu | — | Upgrade ant-optionalUpgrade antUpgrade ant (Ubuntu Pro)Upgrade ant-doc | Jun 2, 2020 | May 14, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub