[mixlib-archive] mixlib-archive Path Traversal vulnerability

Chef Software’s mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using .. in tar archive entries

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000026
• https://github.com/chef/mixlib-archive/blob/master/CHANGELOG.md
• https://github.com/chef/mixlib-archive/pull/6
• https://github.com/advisories/GHSA-98wx-cw86-c97x