New subject: [Bug 958221] plexus-utils: directory traversal in org.codehaus.plexus.util.Expand

30 Apr 2013


      Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=958221
Bug ID: 958221
           Summary: plexus-utils: directory traversal in
                    org.codehaus.plexus.util.Expand
           Product: Fedora
           Version: rawhide
         Component: plexus-utils
          Severity: unspecified
          Priority: unspecified
          Assignee: fnasser@redhat.com
          Reporter: fweimer@redhat.com
        QA Contact: extras-qa@fedoraproject.org
                CC: fnasser@redhat.com,
                    java-sig-commits@lists.fedoraproject.org,
                    mizdebsk@redhat.com
            Blocks: 958220
          Category: ---
org.codehaus.plexus.util.Expand does not guard against directory traversal, but
such protection is generally expected from unarchiving tools.
I think the class should just be deprecated and removed because there do not
appear to be any users left (not even a test case).
-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hp1lhU9LQd&a=cc_unsubscribe

[Bug 958221] New: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand