ant-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From j..@apache.org
Subject svn commit: r1823436 [2/2] - in /ant/site/ant: production/ sources/
Date Wed, 07 Feb 2018 07:11:04 GMT
Modified: ant/site/ant/production/resources.html
URL: http://svn.apache.org/viewvc/ant/site/ant/production/resources.html?rev=1823436&r1=1823435&r2=1823436&view=diff
==============================================================================
--- ant/site/ant/production/resources.html (original)
+++ ant/site/ant/production/resources.html Wed Feb  7 07:11:03 2018
@@ -97,7 +97,7 @@
                                     <a href="./index.html">Welcome</a>
                                 </li>
                             <li>
-                                    <a href=".https://www.apache.org/licenses/">License</a>
+                                    <a href="https://www.apache.org/licenses/">License</a>
                                 </li>
                             <li>
                                     <a href="./antnews.html">News</a>
@@ -461,7 +461,7 @@
         This is the original description:</p>
                                 <pre class="code">
         Das Build-Tool Ant ist das Open-Source-Werkzeug, das den Entwicklungsprozess einer
Java-
-        oder J2EE-Anwendung wesentlich vereinfacht. Gesteuert durch XML-basierte Skripte
führt es
+        oder J2EE-Anwendung wesentlich vereinfacht. Gesteuert durch XML-basierte Skripte
führt es
         nahezu alle Aufgaben aus, die nach dem Kodieren einer Anwendung anfallen.</pre>
                                 <p>Some topics:</p>
                                 <ul>
@@ -586,11 +586,11 @@
                         <p>A German language short reference for Ant that covers Ant
         1.4.  This is the original description:</p>
                                 <pre class="code">
-  Ant kurz &amp; gut enthält eine vollständige Referenz der Built-in Tasks
-  und ihrer jeweiligen Attribute sowie kurze Beispiele für ihre Verwendung.
-  Daneben bietet das Buch eine knappe Einführung in die Arbeit mit Ant und
-  eine Erläuterung der Ant-Basiselemente (Projekte, Properties, Targets und Tasks).
-  Behandelt werden außerdem grundlegende Konzepte wie Filesets, Patternsets und
+  Ant kurz &amp; gut enthält
eine vollständige Referenz
der Built-in Tasks
+  und ihrer jeweiligen Attribute sowie kurze Beispiele für
ihre Verwendung.
+  Daneben bietet das Buch eine knappe Einführung
in die Arbeit mit Ant und
+  eine Erläuterung der Ant-Basiselemente
(Projekte, Properties, Targets und Tasks).
+  Behandelt werden außerdem
grundlegende Konzepte wie Filesets, Patternsets und
   Pfadstrukturen, das Schreiben eigener Tasks, die Aufruf-Syntax und Optional Tasks. </pre>
                                       <table class="externals" cellspacing="1" cellpadding="4">
               <tr>
@@ -766,8 +766,8 @@
       </tr>
           </table>
                                                           <h4 class="subsection">
-        <a name="Programmieren für Ant"></a>
-        Programmieren für Ant
+        <a name="Programmieren für
Ant"></a>
+        Programmieren für
Ant
       </h4>
                         <p>This article describes the main topics of programming your
own tasks.
         Description is done on five examples.</p>

Modified: ant/site/ant/production/security.html
URL: http://svn.apache.org/viewvc/ant/site/ant/production/security.html?rev=1823436&r1=1823435&r2=1823436&view=diff
==============================================================================
--- ant/site/ant/production/security.html (original)
+++ ant/site/ant/production/security.html Wed Feb  7 07:11:03 2018
@@ -97,7 +97,7 @@
                                     <a href="./index.html">Welcome</a>
                                 </li>
                             <li>
-                                    <a href=".https://www.apache.org/licenses/">License</a>
+                                    <a href="https://www.apache.org/licenses/">License</a>
                                 </li>
                             <li>
                                     <a href="./antnews.html">News</a>
@@ -265,6 +265,22 @@
         the descriptions here are incomplete, please report them
         privately to the Apache Security Team. Thank you.</p>
                                       <h4 class="subsection">
+        <a name="Fixed in Apache Ant 1.9.10 / Ant 1.10.2"></a>
+        Fixed in Apache Ant 1.9.10 / Ant 1.10.2
+      </h4>
+                        <p><b>Low: Denial of Service</b> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5645">CVE-2017-5645</a></p>
+                                <p>When using Apache Ants Log4jListener there could
be a security 
+          issue with the underlying Apache Log4j library in version 1.x. <br />
+          Please note that Log4j 1.x has reached its end of life and is no longer 
+          maintained. For details about migrating away from Log4j 1.x please 
+          consult with the Apache Log4j team.</p>
+                                <p>This was fixed in revisions
+          <a href="https://git-wip-us.apache.org/repos/asf?p=ant.git;a=commit;h=2b53103932031a1d2321f5dc890ede55a9833f95">2b53103932031a1d2321f5dc890ede55a9833f95</a>
and
+          <a href="https://git-wip-us.apache.org/repos/asf?p=ant.git;a=commit;h=146df361556b499f2fa7d34f58a86508b9492652">146df361556b499f2fa7d34f58a86508b9492652</a>.</p>
+                                <p>This was first reported to the Security Team on
8 January 2018 and 
+          made public on 07 February 2018.</p>
+                                <p>Affects: until 1.9.9 / 1.10.1</p>
+                                                          <h4 class="subsection">
         <a name="Fixed in Apache Ant 1.8.4"></a>
         Fixed in Apache Ant 1.8.4
       </h4>
@@ -292,7 +308,7 @@
   </div>
 
         <p class="copyright">
-        Copyright &#169; 1999-2017 The Apache Software Foundation, Licensed under the
Apache License, Version 2.0.
+        Copyright &#169; 1999-2018 The Apache Software Foundation, Licensed under the
Apache License, Version 2.0.
       </p>
       <p class="copyright">
       Apache Ant, Apache Ivy, Apache EasyAnt, Ant, Ivy, EasyAnt, Apache, the Apache feather
logo, and the Apache Ant project logos are trademarks of The Apache Software Foundation.

Modified: ant/site/ant/production/srcdownload.html
URL: http://svn.apache.org/viewvc/ant/site/ant/production/srcdownload.html?rev=1823436&r1=1823435&r2=1823436&view=diff
==============================================================================
--- ant/site/ant/production/srcdownload.html (original)
+++ ant/site/ant/production/srcdownload.html Wed Feb  7 07:11:03 2018
@@ -97,7 +97,7 @@
                                     <a href="./index.html">Welcome</a>
                                 </li>
                             <li>
-                                    <a href=".https://www.apache.org/licenses/">License</a>
+                                    <a href="https://www.apache.org/licenses/">License</a>
                                 </li>
                             <li>
                                     <a href="./antnews.html">News</a>

Modified: ant/site/ant/production/svn.html
URL: http://svn.apache.org/viewvc/ant/site/ant/production/svn.html?rev=1823436&r1=1823435&r2=1823436&view=diff
==============================================================================
--- ant/site/ant/production/svn.html (original)
+++ ant/site/ant/production/svn.html Wed Feb  7 07:11:03 2018
@@ -99,7 +99,7 @@
                                     <a href="./index.html">Welcome</a>
                                 </li>
                             <li>
-                                    <a href=".https://www.apache.org/licenses/">License</a>
+                                    <a href="https://www.apache.org/licenses/">License</a>
                                 </li>
                             <li>
                                     <a href="./antnews.html">News</a>

Modified: ant/site/ant/sources/security.xml
URL: http://svn.apache.org/viewvc/ant/site/ant/sources/security.xml?rev=1823436&r1=1823435&r2=1823436&view=diff
==============================================================================
--- ant/site/ant/sources/security.xml (original)
+++ ant/site/ant/sources/security.xml Wed Feb  7 07:11:03 2018
@@ -82,6 +82,26 @@
         the descriptions here are incomplete, please report them
         privately to the Apache Security Team. Thank you.</p>
 
+        <subsection name="Fixed in Apache Ant 1.9.10 / Ant 1.10.2">
+          <p><b>Low: Denial of Service</b> <a
+          href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5645">CVE-2017-5645</a></p>
+
+          <p>When using Apache Ants Log4jListener there could be a security 
+          issue with the underlying Apache Log4j library in version 1.x. <br/>
+          Please note that Log4j 1.x has reached its end of life and is no longer 
+          maintained. For details about migrating away from Log4j 1.x please 
+          consult with the Apache Log4j team.</p>
+
+          <p>This was fixed in revisions
+          <a href="https://git-wip-us.apache.org/repos/asf?p=ant.git;a=commit;h=2b53103932031a1d2321f5dc890ede55a9833f95">2b53103932031a1d2321f5dc890ede55a9833f95</a>
and
+          <a href="https://git-wip-us.apache.org/repos/asf?p=ant.git;a=commit;h=146df361556b499f2fa7d34f58a86508b9492652">146df361556b499f2fa7d34f58a86508b9492652</a>.</p>
+
+          <p>This was first reported to the Security Team on 8 January 2018 and 
+          made public on 07 February 2018.</p>
+
+          <p>Affects: until 1.9.9 / 1.10.1</p>
+        </subsection>
+
         <subsection name="Fixed in Apache Ant 1.8.4">
           <p><b>Low: Denial of Service</b> <a
           href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098">CVE-2012-2098</a></p>



Mime
View raw message