Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.3:Update
icedtea-web
CVE-2019-10182_2.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File CVE-2019-10182_2.patch of Package icedtea-web
commit 5437234c59f6c375a8ad0b07f93d459eefd571ba Author: Jiri Vanek <jvanek@redhat.com> Date: Tue Jul 9 12:10:39 2019 +0200 Preventively, hash also .. in queue diff --git a/netx/net/sourceforge/jnlp/cache/CacheUtil.java b/netx/net/sourceforge/jnlp/cache/CacheUtil.java index 5c8652b6..15e8865c 100644 --- a/netx/net/sourceforge/jnlp/cache/CacheUtil.java +++ b/netx/net/sourceforge/jnlp/cache/CacheUtil.java @@ -703,7 +703,11 @@ public class CacheUtil { path.append(File.separatorChar); } String locationPath = location.getPath().replace('/', File.separatorChar); - if (locationPath.contains("..")){ + String query = ""; + if (location.getQuery() != null) { + query = location.getQuery(); + } + if (locationPath.contains("..") || query.contains("..")){ try { /** * if path contains .. then it can harm lcoal system
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
