archive-tar-minitar
'archive-tar-minitar' has been deprecated; just install 'minitar'. The minitar library is a pure-Ruby library that provides the ability to deal with POSIX tar(1) archive files. This is release 0.12. This is likely the last revision before 1.0. minitar (previously called Archive::Tar::Minitar) is based heavily on code originally written by Mauricio Julio Fernández Pradier for the rpa-base project.
Activity
- Latest release
- 2y ago
- Total releases
- 6
- Cadence
- ~3.4 years
- Last 12 months
- 0
Details
- License
- unknown OR BSD-2-Clause
- First release
- Sep 27, 2004
| Version | Released | |
|---|---|---|
0.12
minor
| ||
0.8
minor
| ||
0.6.1
patch
| ||
0.6
minor
| ||
0.5.2
patch
| ||
0.5.1
initial
1 CVE
CVE-2016-10173
GHSA-h5g2-38x9-4gv3
Oct 24, 2017
archive-tar-minitar and minitar vulnerable to Path Traversal
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
High
None
Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a Affected versions
0.5.1
Fixed in
0.5.2
References
Updated Feb 16, 2024 · Source: OSV.dev |