~ubuntu-branches/ubuntu/karmic/fastjar/karmic-security

Viewing all changes in revision 13.

  • Committer: Bazaar Package Importer
  • Author(s): Marc Deslauriers
  • Date: 2010-06-18 08:23:57 UTC
  • Revision ID: james.westby@ubuntu.com-20100618082357-hcedbpt1beh1soab
Tags: 2:0.98-1ubuntu0.9.10.1
* SECURITY UPDATE: directory traversal vulnerabilities (LP: #540575)
  - jartool.c (extract_jar): Fix up checks for traversal to parent
    directories, disallow absolute paths, make the code slightly more
    efficient. (patch from trunk)
  - CVE-2010-0831
* Additional patches from the trunk:
  - jartool.c (read_entries): Properly zero-terminate filename.
  - jartool.c (add_file_to_jar): Fix write return value check.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: