diff --git a/SECURITY.md b/SECURITY.md index d06ec8727b95b134c47b054864e98838ec497b4d..073a27c61ee219698c60a1d0433e08b7559515d6 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -60,4 +60,4 @@ If malicious input can trigger memory corruption or non-clean exit, such bug is -[security advisories](https://github.com/PaddlePaddle/Paddle/blob/develop/security/README.md) +[security advisories](./security/README.md) diff --git a/SECURITY_cn.md b/SECURITY_cn.md index cd2b4b450b46e40db9bd298fd176a517dae12113..e22340349c4feb2c516e09c8e50d36f3f3effb17 100644 --- a/SECURITY_cn.md +++ b/SECURITY_cn.md @@ -46,4 +46,4 @@ 如果输入非预期的参数后,对飞桨代码造成了内存破坏,或者非干净退出,这类行为被认定为存在安全问题。 -### [安全公告](https://github.com/PaddlePaddle/Paddle/blob/develop/security/README_cn.md) +### [安全公告](./security/README_cn.md) diff --git a/security/README.md b/security/README.md index ceca597ec35bb15f531456aa2e59ae372eaed216..cb01299927f77ecd4611c1079cc3056a31b1846f 100644 --- a/security/README.md +++ b/security/README.md @@ -4,9 +4,9 @@ We regularly publish security advisories about using PaddlePaddle. -*Note*: In conjunction with these security advisories, we strongly encourage PaddlePaddle users to read and understand PaddlePaddle's security model as outlined in [SECURITY.md](https://github.com/PaddlePaddle/Paddle/blob/develop/SECURITY.md). +*Note*: In conjunction with these security advisories, we strongly encourage PaddlePaddle users to read and understand PaddlePaddle's security model as outlined in [SECURITY.md](../SECURITY.md). -| Advisory Number | Type | Versions affected | Reported by | Additional Information | -|---------------------------------------------------------------------------------------------------------|-------------------------|:-----------------:|---------------------------------------|------------------------| -| [PDSA-2022-001](https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-001.md) | OOB read in gather_tree | < 2.4 | Wang Xuan(王旋) of Qihoo 360 AIVul Team | | +| Advisory Number | Type | Versions affected | Reported by | Additional Information | +|----------------------------------------------|-------------------------|:-----------------:|---------------------------------------|------------------------| +| [PDSA-2022-001](./advisory/pdsa-2022-001.md) | OOB read in gather_tree | < 2.4 | Wang Xuan(王旋) of Qihoo 360 AIVul Team | | diff --git a/security/README_cn.md b/security/README_cn.md index 31661177eca65581dfe23c503135c759cce30239..a91f5ce4596819ac987ca0ddc6dbfda0a24d3a5d 100644 --- a/security/README_cn.md +++ b/security/README_cn.md @@ -4,9 +4,9 @@ -注:我们非常建议飞桨用户阅读和理解[SECURITY_cn.md](https://github.com/PaddlePaddle/Paddle/blob/develop/SECURITY_cn.md)所介绍的飞桨安全模型,以便更好地了解此安全公告。 +注:我们非常建议飞桨用户阅读和理解[SECURITY_cn.md](../SECURITY_cn.md)所介绍的飞桨安全模型,以便更好地了解此安全公告。 -| 安全公告编号 | 类型 | 受影响版本 | 报告者 | 备注 | -|------------------------------------------------------------------------------------------------------------|-------------------------|:-----:|---------------------------------------| ----------------------| -| [PDSA-2022-001](https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-001_cn.md) | OOB read in gather_tree | < 2.4 | Wang Xuan(王旋) of Qihoo 360 AIVul Team | | +| 安全公告编号 | 类型 | 受影响版本 | 报告者 | 备注 | +|-------------------------------------------------|-------------------------|:-----:|---------------------------------------|-----| +| [PDSA-2022-001](./advisory/pdsa-2022-001_cn.md) | OOB read in gather_tree | < 2.4 | Wang Xuan(王旋) of Qihoo 360 AIVul Team | | diff --git a/security/advisory/pdsa-2022-001.md b/security/advisory/pdsa-2022-001.md index 7bbce205111cfa3da45867d006f5508e690aed06..7b409020abb6bf3577769ea163157feeb1aaeab9 100644 --- a/security/advisory/pdsa-2022-001.md +++ b/security/advisory/pdsa-2022-001.md @@ -42,7 +42,7 @@ The fix will be included in PaddlePaddle 2.4. ### For more information -Please consult [our security guide](https://github.com/PaddlePaddle/Paddle/blob/develop/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. +Please consult [our security guide](../../SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. ### Attribution diff --git a/security/advisory/pdsa-2022-001_cn.md b/security/advisory/pdsa-2022-001_cn.md index 65e825b8a659ba8cf287f497a4f2ea9721fa1ff5..ce5f4e3cf4d58c78ba2692eaa03920fe019e257b 100644 --- a/security/advisory/pdsa-2022-001_cn.md +++ b/security/advisory/pdsa-2022-001_cn.md @@ -42,7 +42,7 @@ void GatherTreeKernel(const Context &dev_ctx, ### 更多信息 -请参考我们的[安全指南](https://github.com/PaddlePaddle/Paddle/blob/develop/SECURITY_cn.md)以获得更多关于安全的信息,以及如何与我们联系问题。 +请参考我们的[安全指南](../../SECURITY_cn.md)以获得更多关于安全的信息,以及如何与我们联系问题。 ### 贡献者