CVE-2020-12649: Improper Limitation of a Pathname to a Restricted Directory

Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...