File bsc_1021740.patch of Package rubygem-archive-tar-minitar
diff --git a/lib/archive/tar/minitar.rb b/lib/archive/tar/minitar.rb
index 5ad466d..21c5a07 100644
--- a/lib/archive/tar/minitar.rb
+++ b/lib/archive/tar/minitar.rb
@@ -975,6 +975,9 @@ module Archive::Tar::Minitar
end
inp.each do |entry|
+ if entry.full_name.squeeze('/') =~ /\.{2}(?:\/|\z)/
+ raise entry.full_name + " Error path contains .."
+ end
if files.empty? or files.include?(entry.full_name)
inp.extract_entry(dest, entry, &block)
end