ansible/changelogs/fragments/fetch_no_slurp.yml

bugfixes:
    - In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2020-1735.
fixed fetch traversal from slurp (#68720) * fixed fetch traversal from slurp * ignore slurp result for dest * fixed naming when source is relative * fixed bug in local connection plugin * added tests with fake slurp * moved existing role tests into runme.sh * normalized on action excepts * moved dest transform down to when needed * added is_subpath check * fixed bug in local connection fixes #67793 CVE-2019-3828 2020-04-08 20:28:51 +02:00			`bugfixes:`
Fix incorrect CVE reference in changelog fragment Change: This corrects an incorrect CVE identifier in the changelog entry for CVE-2020-1735. Test Plan: N/A Tickets: Refs #67793, #68720 Signed-off-by: Rick Elrod <rick@elrod.me> 2020-04-18 13:27:14 +02:00			`- In fetch action, avoid using slurp return to set up dest, also ensure no dir traversal CVE-2020-1735.`