* 0.73 with File::Spec->file_name_is_absolute.

  It's more correct, but ultimately equivalent, because we
  don't install on Win32 anyway.

  Also add CVE-2013-2145 reference to Changes.