From owner-cvs-ports@FreeBSD.ORG Wed Apr 27 20:31:33 2005 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 96A4016A4CE; Wed, 27 Apr 2005 20:31:33 +0000 (GMT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7AD8843D2F; Wed, 27 Apr 2005 20:31:33 +0000 (GMT) (envelope-from glewis@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j3RKVXVo057039; Wed, 27 Apr 2005 20:31:33 GMT (envelope-from glewis@repoman.freebsd.org) Received: (from glewis@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j3RKVXdX057038; Wed, 27 Apr 2005 20:31:33 GMT (envelope-from glewis) Message-Id: <200504272031.j3RKVXdX057038@repoman.freebsd.org> From: Greg Lewis Date: Wed, 27 Apr 2005 20:31:33 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: ports/java/jdk13/files patch-j2sdk1.3.1-jar-Main.java patch-j2sdk1.3.1-resources-jar.properties X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Apr 2005 20:31:33 -0000 glewis 2005-04-27 20:31:33 UTC FreeBSD ports repository Added files: java/jdk13/files patch-j2sdk1.3.1-jar-Main.java patch-j2sdk1.3.1-resources-jar.properties Log: . Ensure that when files are extracted that their fully resolved path lies in or below the current working directory. Fixes a security problem with jar(1). This fix may change to be compatible with whatever fix Sun applies when they release the next version of 1.5. Revision Changes Path 1.1 +56 -0 ports/java/jdk13/files/patch-j2sdk1.3.1-jar-Main.java (new) 1.1 +11 -0 ports/java/jdk13/files/patch-j2sdk1.3.1-resources-jar.properties (new)