From owner-cvs-all@FreeBSD.ORG Wed May 11 21:18:40 2005 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 391A816A4CE; Wed, 11 May 2005 21:18:40 +0000 (GMT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2501443D5A; Wed, 11 May 2005 21:18:40 +0000 (GMT) (envelope-from glewis@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j4BLIeIJ010164; Wed, 11 May 2005 21:18:40 GMT (envelope-from glewis@repoman.freebsd.org) Received: (from glewis@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j4BLIegS010163; Wed, 11 May 2005 21:18:40 GMT (envelope-from glewis) Message-Id: <200505112118.j4BLIegS010163@repoman.freebsd.org> From: Greg Lewis Date: Wed, 11 May 2005 21:18:40 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: ports/java/jdk14 Makefile ports/java/jdk14/files patch-j2se-jar-Main.java patch-j2se-resources-jar.properties X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2005 21:18:40 -0000 glewis 2005-05-11 21:18:40 UTC FreeBSD ports repository Modified files: java/jdk14 Makefile Added files: java/jdk14/files patch-j2se-jar-Main.java patch-j2se-resources-jar.properties Log: . Ensure that when files are extracted that their fully resolved path lies in or below the current working directory. Fixes a security problem with jar(1). This fix may change to be compatible with whatever fix Sun applies when they release a fixed version of 1.5. . Bump PORTREVISION for this fix. Approved by: maintainer timeout Security: http://vuxml.FreeBSD.org/18e5428f-ae7c-11d9-837d-000e0c2e438a.html Revision Changes Path 1.90 +1 -0 ports/java/jdk14/Makefile 1.1 +58 -0 ports/java/jdk14/files/patch-j2se-jar-Main.java (new) 1.1 +13 -0 ports/java/jdk14/files/patch-j2se-resources-jar.properties (new)