Format: 1.8 Date: Fri, 18 Jun 2010 08:20:03 -0400 Source: fastjar Binary: fastjar Architecture: ia64 Version: 2:0.98-1ubuntu0.10.04.1 Distribution: lucid Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Marc Deslauriers Description: fastjar - Jar creation utility Launchpad-Bugs-Fixed: 540575 Changes: fastjar (2:0.98-1ubuntu0.10.04.1) lucid-security; urgency=low . * SECURITY UPDATE: directory traversal vulnerabilities (LP: #540575) - jartool.c (extract_jar): Fix up checks for traversal to parent directories, disallow absolute paths, make the code slightly more efficient. (patch from trunk) - CVE-2010-0831 * Additional patches from the trunk: - jartool.c (read_entries): Properly zero-terminate filename. - jartool.c (add_file_to_jar): Fix write return value check. Checksums-Sha1: 4e27c9396345300570bb895e6c2ec111b2350ca7 126560 fastjar_0.98-1ubuntu0.10.04.1_ia64.deb Checksums-Sha256: 8edd844855208524db65415fafd010d906b8937883d526ba1d5708f806da6d33 126560 fastjar_0.98-1ubuntu0.10.04.1_ia64.deb Files: 7415ed3e6fec29dea4880bba3ee7ad2e 126560 misc extra fastjar_0.98-1ubuntu0.10.04.1_ia64.deb Original-Maintainer: Matthias Klose