[ https://issues.apache.org/jira/browse/FELIX-5870?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Karl Pauls resolved FELIX-5870. ------------------------------- Resolution: Fixed Done in r1833597. > Handle relative path elements in bundle classpath > ------------------------------------------------- > > Key: FELIX-5870 > URL: https://issues.apache.org/jira/browse/FELIX-5870 > Project: Felix > Issue Type: Bug > Components: Framework > Affects Versions: framework-5.6.10 > Reporter: Karl Pauls > Assignee: Karl Pauls > Priority: Major > Fix For: framework-6.0.0 > > > We have to handle relative path elements in the bundle classpath to make sure > we are not allowing entries to be unpacked outside of the bundle cache: > https://res.cloudinary.com/snyk/image/upload/v1528192501/zip-slip-vulnerability/technical-whitepaper.pdf -- This message was sent by Atlassian JIRA (v7.6.3#76005)