Ubuntu Security Notice 953-1 - Dan Rosenberg discovered that fastjar incorrectly handled file paths containing ".." when unpacking archives. If a user or an automated system were tricked into unpacking a specially crafted jar file, arbitrary files could be overwritten with user privileges.
c522fc3e3fe5c9822122c33072c335308b6b3a4a2403c724a3b7a2aaf63b999e