ansible/changelogs/fragments/vault_tmp_race_fix.yml

security_fixes:
    - "**security_issue** - create temporary vault file with strict permissions when editing and prevent race condition (CVE-2020-1740)"
add changelog categories, update CVE fragments to use security_fix category (#69968) * use security_fix category in changelogs for CVEs * these fragments do not say CVE but are security fixes Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com> 2020-06-11 19:24:01 +02:00			`security_fixes:`
safely use vault to edit secrets (#68644) * when possible, use filedescriptors from mkstemp to avoid race * when using path strings, ensure we are always creating the file CVE-2020-1740 Fixes #67798 Co-authored-by: samdoran 2020-04-03 16:19:01 +02:00			`- "security_issue - create temporary vault file with strict permissions when editing and prevent race condition (CVE-2020-1740)"`