High DSA-3778-1 1 CVE

ruby-archive-tar-minitar - security update

Published Jan 31, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	ruby-archive-tar-minitar	0.5.2-2+deb8u1

Vulnerabilities 1

High 7.5

CVE-2016-10173

archive-tar-minitar and minitar vulnerable to Path Traversal

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.

ruby-minitar minitar ruby-minitar ruby-archive-tar-minitar Debian Ubuntu RubyGems

Feb 1, 2017