apache-ivy vulnerabilities (Mageia)

2 vulnerabilities.

• apache-ivy Mageia Apache Ivy allows path traversal in the presence of a malicious repository CVE-2022-37866 Fix available 7.5 HighNovember 7, 2022
• apache-ivy Mageia Apache Ivy allows creating/overwriting any file on the system CVE-2022-37865 Fix available 9.1 CriticalNovember 7, 2022