{"affected":[{"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-archive-tar-minitar":"0.5.2-7.3.65"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 12","name":"rubygem-archive-tar-minitar","purl":"purl:rpm/suse/rubygem-archive-tar-minitar&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.5.2-7.3.65"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for rubygem-archive-tar-minitar fixes one security issue:\n\n- CVE-2016-10173: Archives with files containing '..' in the extracted filename could have been used to overwrite arbitrary files (bsc#1021740).\n","id":"SUSE-SU-2021:0115-1","modified":"2021-01-13T15:30:38Z","published":"2021-01-13T15:30:38Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210115-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1021740"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-10173"}],"related":["CVE-2016-10173"],"summary":"Security update for rubygem-archive-tar-minitar"}