Updated advisory posts against rubysec/ruby-advisory-db@c40084b

RubySec CI · RubySec CI · commit 2d02710ab80e · 2017-02-02T18:15:29.000Z
diff --git a/advisories/_posts/2016-08-22-CVE-2016-10173.md b/advisories/_posts/2016-08-22-CVE-2016-10173.md
@@ -0,0 +1,23 @@
+---
+layout: advisory
+title: 'CVE-2016-10173 (minitar): Minitar Directory Traversal Vulnerability'
+comments: false
+categories:
+- minitar
+advisory:
+  gem: minitar
+  cve: 2016-10173
+  url: https://github.com/halostatue/minitar/issues/16
+  title: Minitar Directory Traversal Vulnerability
+  date: 2016-08-22
+  description: |
+    Minitar allows attackers to overwrite arbitrary files during archive
+    extraction via a .. (dot dot) in an extracted filename. Analogous
+    vulnerabilities for unzip and tar:
+    https://www.cvedetails.com/cve/CVE-2001-1268/ and
+    http://www.cvedetails.com/cve/CVE-2001-1267/
+
+    Credit: ecneladis
+  patched_versions:
+  - ">= 0.60"
+---
