{"id":"SUSE-SU-2021:0115-1","summary":"Security update for rubygem-archive-tar-minitar","details":"\nThis update for rubygem-archive-tar-minitar fixes one security issue:\n\n- CVE-2016-10173: Archives with files containing '..' in the extracted filename could have been used to overwrite arbitrary files (bsc#1021740).\n","modified":"2026-02-04T03:26:16.541932Z","published":"2021-01-13T15:30:38Z","related":["CVE-2016-10173"],"upstream":["CVE-2016-10173"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210115-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1021740"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-10173"}],"affected":[{"package":{"name":"rubygem-archive-tar-minitar","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","purl":"pkg:rpm/suse/rubygem-archive-tar-minitar&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-7.3.65"}]}],"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-archive-tar-minitar":"0.5.2-7.3.65"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:0115-1.json"}}],"schema_version":"1.7.3"}