File _patchinfo of Package patchinfo.4085

<patchinfo incident="4085">
  <issue id="1021740" tracker="bnc">VUL-1: CVE-2016-10173: rubygem-minitar,rubygem-archive-tar-minitar:  directory traversal vulnerability</issue>
  <issue id="2016-10173" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>jordimassaguerpla</packager>
  <description>
This update for rubygem-archive-tar-minitar fixes one security issue:

- CVE-2016-10173: Archives with files containing '..' in the extracted filename could have been used to overwrite arbitrary files (bsc#1021740).
</description>
  <summary>Security update for rubygem-archive-tar-minitar</summary>
</patchinfo>
openSUSE Build Service is sponsored by