Date: Wed, 27 Apr 2005 20:31:33 +0000 (UTC) From: Greg Lewis <glewis@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/java/jdk13/files patch-j2sdk1.3.1-jar-Main.java patch-j2sdk1.3.1-resources-jar.properties Message-ID: <200504272031.j3RKVXdX057038@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
glewis 2005-04-27 20:31:33 UTC
FreeBSD ports repository
Added files:
java/jdk13/files patch-j2sdk1.3.1-jar-Main.java
patch-j2sdk1.3.1-resources-jar.properties
Log:
. Ensure that when files are extracted that their fully resolved path lies
in or below the current working directory. Fixes a security problem with
jar(1).
This fix may change to be compatible with whatever fix Sun applies when
they release the next version of 1.5.
Revision Changes Path
1.1 +56 -0 ports/java/jdk13/files/patch-j2sdk1.3.1-jar-Main.java (new)
1.1 +11 -0 ports/java/jdk13/files/patch-j2sdk1.3.1-resources-jar.properties (new)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200504272031.j3RKVXdX057038>
