[CVE-2020-1945] Apache Ant insecure temporary file vulnerability

2020-05-13 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2020-1945: Apache Ant insecure temporary file vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 Description: Apache Ant uses the default temporary directory i

[ANN] Apache Ant 1.9.15 and 1.10.8 Released

2020-05-13 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The Apache Ant Team is pleased to announce the releases of Apache Ant 1.9.15 and 1.10.8. Apache Ant is a Java library and command-line tool that helps building software. The Apache Ant team currently maintains two lines of development. The 1.9.x rele

[RESULT] Release Apache Ant 1.10.8 based on RC1

2020-05-13 Thread Stefan Bodewig
Hi all with three binding +1s by Maarten, Jaikiran and myself and Paul Kings non-binding +1 the vote has passed. I'll publish the artifacts and give the mirrors a bit of time before announcing the release(s). Stefan - To unsubs

[RESULT] Release Apache Ant 1.9.15 based on RC1

2020-05-13 Thread Stefan Bodewig
Hi all with three binding +1s by Maarten, Jaikiran and myself the vote has passed. I'll publish the artifacts and give the mirrors a bit of time before announcing the release(s). Stefan - To unsubscribe, e-mail: dev-unsubscr...

Re: [VOTE] EOL the 1.9.x branch with the 1.9.15 release

2020-05-13 Thread Jaikiran Pai
+1 for making 1.9.15 the last release for 1.9.x series and then retiring the 1.9.x branch. -Jaikiran On 12/05/20 4:03 pm, Stefan Bodewig wrote: > Hi all > > I was under the impression we had already voted on this but my > recollections was wrong. > > Wnen 1.10.7 has been released there had not be

Re: [VOTE] Release Apache Ant 1.10.8 based on RC1

2020-05-13 Thread Maarten Coene
+1 Maarten Op zondag 10 mei 2020 16:59:23 CEST schreef Stefan Bodewig : Hi all I've created a release candidate for 1.10.8: git tag: ANT_1.10.8_RC1         on commit: e04bc3455 tarballs: https://dist.apache.org/repos/dist/dev/ant/           revision: 39345 Maven artifacts:         ht