#strip-components clear

CVE-2016-6321: GNU tar path traversal via --strip-components applied after safer_name_suffix