File bsc_1021740.patch of Package rubygem-minitar
diff --git a/lib/archive/tar/minitar.rb b/lib/archive/tar/minitar.rb index 5ad466d..21c5a07 100644 --- a/lib/archive/tar/minitar.rb +++ b/lib/archive/tar/minitar.rb @@ -975,6 +975,9 @@ module Archive::Tar::Minitar end inp.each do |entry| + if entry.full_name.squeeze('/') =~ /\.{2}(?:\/|\z)/ + raise entry.full_name + " Error path contains .." + end if files.empty? or files.include?(entry.full_name) inp.extract_entry(dest, entry, &block) end