Security
- Harden allowlisted GNU
sortandgsortarguments against external program execution and path escape. - Reject
--compress-program,-o/--output,--files0-from, and-T/--temporary-directory, including GNU abbreviations, attached values, clustered forms, and options after operands. - Preserve ordinary sorting and option-like filenames after a discrete
--.
Versions <=1.1.8 are affected. Upgrade to 1.1.9 or later.
Fixes GHSA-74g6-ch7r-v7jr.