2 commits

Author	SHA1	Message	Date
Alicia Cozine	f509a22f9d	add changelog categories, update CVE fragments to use security_fix category (#69968) ... * use security_fix category in changelogs for CVEs * these fragments do not say CVE but are security fixes Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>	2020-06-11 10:24:01 -07:00
Sam Doran	d30c57ab22	win_unzip - normalize and compare paths to prevent path traversal (#67799) ... * Actually inspect the paths and prevent escape * Add integration tests * Generate zip files for use in integration test * Adjust error message	2020-02-28 17:56:21 -05:00