CVE-2016-6321: Path Traversal in tar --strip-components

Tar archive extraction with --strip-components option fails to properly validate member names for directory traversal sequences after component stripping, allowing attackers to write files outside the intended extraction directory via crafted tar archives containing '..' path components that become active only after the specified number of leading components are removed.