ansible/changelogs/fragments/fetch_no_slurp.yml

bugfixes:
    - In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2019-3828.
fixed fetch traversal from slurp (#68720) * fixed fetch traversal from slurp * ignore slurp result for dest * fixed naming when source is relative * fixed bug in local connection plugin * added tests with fake slurp * moved existing role tests into runme.sh * normalized on action excepts * moved dest transform down to when needed * added is_subpath check * fixed bug in local connection fixes #67793 CVE-2019-3828 2020-04-08 20:28:51 +02:00			`bugfixes:`
			`- In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2019-3828.`