[CLSA-2026:1789382807] ant: Fix of CVE-2026-78254
Type:
security
Severity:
Moderate
Release date:
2026-09-14 10:46:59 UTC
Description:
- CVE-2026-78254: path traversal in the ftp and scp tasks let a malicious server write downloaded files outside the destination directory - Add FileUtils.getResolvedPath as a prerequisite for the CVE-2026-78254 fix, which uses it in the skipped-file log messages
CVEs fixed:
Updated packages:
  • ant-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:b6628d05482c20df56d52caf6c759f297beeae8d3eada27560b913eba1c07482
  • ant-antlr-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:b4a4d54fdcbbd2805ef7a882864b1dc17e53760c1178c0451da3f63c8e977ebf
  • ant-apache-bcel-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:1a51b498aa2dbc7128b60c6f12362c8457e47048634c0ccc795fa0ce4cd2aa76
  • ant-apache-bsf-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:caa6cb3c6dc76969e1f1de41259e93f1adabbae160e1c2430f85be734a6fa13c
  • ant-apache-oro-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:ae2dfbdcef1b746cd6086865545ea4568f83dd4b4219b2f835075d53d89f661f
  • ant-apache-regexp-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:c6ad0c79687bd727519e0c31aa49e4e779d85fe3e2eb42fb26a1b03407cec686
  • ant-apache-resolver-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:bfed8d18ed9b54473d1b2c93a1b083e9fd31e92db3808a7ddb40e4894dfa0dd0
  • ant-apache-xalan2-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:c8882aac4d224fca9c461451a2f7349ad356f9824b5054c892e8e29157558da2
  • ant-commons-logging-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:911882c811695c7b1790357bbd85d5e87681615037827404e0d84ffc78ce99e6
  • ant-commons-net-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:694c5e7eb4b76b50b9cc19bab1c1699b1c978859866fc2730b6fcae7c4d64226
  • ant-imageio-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:2caa7c3e7f9281c3f331a3228902a5155e1d4b8e272917a6137eb0d2c4c35bd9
  • ant-javadoc-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:f26f90f0026930594282593640f89c10ad877c39abae63371e11e94923c5f94a
  • ant-javamail-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:5dbc675e5eb0dd558a6c2104aa29db4c65e2ddb90fae2ca53ab819aa6f7538fe
  • ant-jdepend-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:af96c14268c89320c8962dda21ea192f24a9339610e29ef9151f340b11b0e768
  • ant-jmf-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:65d7fd29123610eb92529c0b8c43c9e25f34c8e5f28f685c9997278e6db2b825
  • ant-jsch-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:9f4d87e141fec4c4be707d2a62db7ebd9d999b1044afb966bc359f4479ab762a
  • ant-junit-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:a6d914a6c9d0af5119c485e4717f41311752f5e9302db3d59da6278434131db2
  • ant-junit5-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:cba89335cecf3e5a993a95d43359adbc2583969df7e2417fdc6af6a5f13cec21
  • ant-lib-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:3315e53484b9f42d58599065afe2b04168a2dcecc3b7acc268254925e35ba5fd
  • ant-manual-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:d6f8fb4369b912dcb05d88051f445dd17c1a22458b98e2c3912b1a79b5827e3f
  • ant-swing-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:648f385b571b890b5c97228ba6efc373159310dd0eee8008e6ed8a67673fdebd
  • ant-testutil-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:d383b983b826405f5dcf6aeeb853a882fff1bbedfe6c71bdaef61001e0e8f163
  • ant-xz-1.10.9-7.el9_2.tuxcare.els2.noarch.rpm
    sha:e155b4fa8e599702526321002671772bdef0098bb3839c738ca629f0c8af4f39
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.