Viewing all changes in revision 5.
- Committer: Bazaar Package Importer
- Date: 2010-06-18 08:37:54 UTC
- mfrom: (4.1.2 hardy-proposed)
- Revision ID: james.westby@ubuntu.com-20100618083754-8vi7ppfmygc1y2yo
* SECURITY UPDATE: directory traversal vulnerabilities (LP: #540575)
- jartool.c (extract_jar): Fix up checks for traversal to parent
directories, disallow absolute paths, make the code slightly more
efficient. (patch from trunk)
- CVE-2010-0831
* Additional patches from the trunk:
- jartool.c (read_entries): Properly zero-terminate filename.
- jartool.c (extract_jar): Fix up checks for traversal to parent
directories, disallow absolute paths, make the code slightly more
efficient. (patch from trunk)
- CVE-2010-0831
* Additional patches from the trunk:
- jartool.c (read_entries): Properly zero-terminate filename.
- files added:
- argv.c
- files modified:
- Makefile.am
expand all
collapse all
added
removed
