f509a22f9d
* use security_fix category in changelogs for CVEs * these fragments do not say CVE but are security fixes Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>
4 lines
170 B
YAML
4 lines
170 B
YAML
security_fixes:
|
|
- >
|
|
**security issue** win_unzip - normalize paths in archive to ensure extracted
|
|
files do not escape from the target directory (CVE-2020-1737)
|