Ubuntu Security Notice 953-1 – Dan Rosenberg discovered that fastjar incorrectly handled file paths containing “..” when unpacking archives. If a user or an automated system were tricked into unpacking a specially crafted jar file, arbitrary files could be overwritten with user privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/90902/USN-953-1.txt
Source: https://packetstormsecurity.com/files/90902/Ubuntu-Security-Notice-953-1.html