Debian Linux Security Advisory 4226-1 - Jakub Wilk discovered a directory traversal flaw in the Archive::Tar module, allowing an attacker to overwrite any file writable by the extracting user via a specially crafted tar archive.
e0d4b28c40b972342d85f4d9e267c2b56cb6f4a9f24f8c60c717404c361083f0