Source: ruby-minitar Version: 0.5.4-3 Severity: grave Tags: security upstream patch Forwarded: https://github.com/halostatue/minitar/issues/16
Hi, the following vulnerability was published for ruby-minitar. CVE-2016-10173[0]: directory traversal vulnerability There is an upstream bug for it at [1], which as well references a minimal patch from SuSE for the issue at [2]. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2016-10173 [1] https://github.com/halostatue/minitar/issues/16 [2] https://bugzilla.opensuse.org/show_bug.cgi?id=1021740#c5 Regards, Salvatore
