Package: ant / 1.9.9-1+deb9u1

CVE-2018-10886/forgot-to-update-the-manual.patch Patch series | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
From: Stefan Bodewig <bodewig@apache.org>
Date: Sat, 21 Apr 2018 20:01:02 +0200
Subject: forgot to update the manual
Origin: https://github.com/apache/ant/commit/1a2b1e37e3616991588f21efa89c474dd6ff83ff
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2018-10886

---
 manual/Tasks/unzip.html | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/manual/Tasks/unzip.html b/manual/Tasks/unzip.html
index 8d93b7041..6b3eed374 100644
--- a/manual/Tasks/unzip.html
+++ b/manual/Tasks/unzip.html
@@ -138,6 +138,15 @@
       zip task page</a></td>
     <td align="center" valign="top">No, defaults to true</td>
   </tr>
+  <tr>
+    <td valign="top">allowFilesToEscapeDest</td>
+    <td valign="top">Whether to allow the extracted file or directory
+      to be outside of the dest directory.
+      <em>since Ant 1.9.12</em></td>
+    <td valign="top" align="center">No, defaults to false unless
+    stripAbsolutePathSpec and the entry's name starts with a leading
+    path spec.</td>
+  </tr>
 </table>
 <h3>Examples</h3>
 <pre>
-- 
2.11.0