Debian Security Advisory 1170-1 – It was discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49779/dsa-1170-1.txt
Source: https://packetstormsecurity.com/files/49779/Debian-Linux-Security-Advisory-1170-1.html