gpp_maybe Security update for apache-ivy
SUSE-SLE-Module-Development-Tools-15-SP4-2023-4367


This update for apache-ivy fixes the following issues: - Upgrade to version 2.5.2 (bsc#1214422) - CVE-2022-46751: Fixed an XML External Entity Injections that could be exploited to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways. (bsc#1214422)

  • Release Date
    Nov 5 2023
  • References
    Bugzilla: 1214422
    CVEs: CVE-2022-46751
  • Type
    security
  • Severity
    important

cloud_download Downloads

Development Tools Module 15.4 ppc64le
  • Packages
    apache-ivy
    Java-based dependency manager
    2.5.2-150200.3.9.1 lock rpm lock src
Development Tools Module 15.4 aarch64
  • Packages
    apache-ivy
    Java-based dependency manager
    2.5.2-150200.3.9.1 lock rpm lock src
Development Tools Module 15.4 s390x
  • Packages
    apache-ivy
    Java-based dependency manager
    2.5.2-150200.3.9.1 lock rpm lock src
Development Tools Module 15.4 x86_64
  • Packages
    apache-ivy
    Java-based dependency manager
    2.5.2-150200.3.9.1 lock rpm lock src