Hello community, here is the log from the commit of package fastjar checked in at Mon Aug 7 11:31:42 CEST 2006. -------- --- fastjar/fastjar.changes 2006-07-12 17:15:07.000000000 +0200 +++ fastjar/fastjar.changes 2006-08-07 10:07:53.000000000 +0200 @@ -1,0 +2,5 @@ +Mon Aug 7 10:07:33 CEST 2006 - rguenther@suse.de + +- Update fix for 191845 to upstream version. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fastjar.spec ++++++ --- /var/tmp/diff_new_pack.7dTrhw/_old 2006-08-07 11:30:24.000000000 +0200 +++ /var/tmp/diff_new_pack.7dTrhw/_new 2006-08-07 11:30:24.000000000 +0200 @@ -17,7 +17,7 @@ Provides: libgcj:/usr/bin/fastjar PreReq: %install_info_prereq Version: 0.92 -Release: 2 +Release: 3 Summary: The fastjar Java package archiver URL: http://savannah.nongnu.org/projects/fastjar/ Source: fastjar-%{version}.tar.bz2 @@ -40,7 +40,6 @@ make %{?jobs:-j%jobs} %install - %makeinstall %post @@ -62,6 +61,8 @@ %{_bindir}/grepjar %changelog -n fastjar +* Mon Aug 07 2006 - rguenther@suse.de +- Update fix for 191845 to upstream version. * Wed Jul 12 2006 - rguenther@suse.de - Fix 191845, directory traversal on unpacking. * Mon May 29 2006 - rguenther@suse.de ++++++ nvl191845.patch ++++++ --- /var/tmp/diff_new_pack.7dTrhw/_old 2006-08-07 11:30:24.000000000 +0200 +++ /var/tmp/diff_new_pack.7dTrhw/_new 2006-08-07 11:30:24.000000000 +0200 @@ -19,7 +19,7 @@ + fprintf(stderr, "Traversal to parent directories during unpacking!\n"); + exit(1); + } -+ } else ++ } else if (strcmp(tmp_buff, ".") != 0) + ++depth; if(stat(tmp_buff, &sbuf) < 0){ if(errno != ENOENT){ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...