16:39 glewis 

. Update to patchset 8.

21:18 glewis 

. Ensure that when files are extracted that their fully resolved path lies
  in or below the current working directory.  Fixes a security problem with
  jar(1).

  This fix may change to be compatible with whatever fix Sun applies when
  they release a fixed version of 1.5.
. Bump PORTREVISION for this fix.

Approved by:    maintainer timeout
Security: http://vuxml.FreeBSD.org/18e5428f-ae7c-11d9-837d-000e0c2e438a.html