Commit graph

1 commit

Author SHA1 Message Date
Greg Lewis
83c1e8c44a . Ensure that when files are extracted that their fully resolved path lies
in or below the current working directory.  Fixes a security problem with
  jar(1).

  This fix may change to be compatible with whatever fix Sun applies when
  they release the next version of 1.5.
. Bump PORTREVISION for this fix.

Security: http://vuxml.FreeBSD.org/18e5428f-ae7c-11d9-837d-000e0c2e438a.html
Reviewed by:	maintainer timeout
2005-05-12 04:14:52 +00:00