cvs commit: ports/java/jdk15 Makefile ports/java/jdk15/files patch-j2se-jar-Main.java patch-j2se-resources-jar.properties

[Greg Lewis]

glewis      2005-05-12 04:14:52 UTC

  FreeBSD ports repository

  Modified files:
    java/jdk15           Makefile 
  Added files:
    java/jdk15/files     patch-j2se-jar-Main.java 
                         patch-j2se-resources-jar.properties 
  Log:
  . Ensure that when files are extracted that their fully resolved path lies
    in or below the current working directory.  Fixes a security problem with
    jar(1).
  
    This fix may change to be compatible with whatever fix Sun applies when
    they release the next version of 1.5.
  . Bump PORTREVISION for this fix.
  
  Security: http://vuxml.FreeBSD.org/18e5428f-ae7c-11d9-837d-000e0c2e438a.html
  Reviewed by:    maintainer timeout
  
  Revision  Changes    Path
  1.90      +1 -1      ports/java/jdk15/Makefile
  1.1       +58 -0     ports/java/jdk15/files/patch-j2se-jar-Main.java (new)
  1.1       +13 -0     ports/java/jdk15/files/patch-j2se-resources-jar.properties (new)