{"action":"created","issue":{"url":"https://api.github.com/repos/drush-ops/drush/issues/2274","repository_url":"https://api.github.com/repos/drush-ops/drush","labels_url":"https://api.github.com/repos/drush-ops/drush/issues/2274/labels{/name}","comments_url":"https://api.github.com/repos/drush-ops/drush/issues/2274/comments","events_url":"https://api.github.com/repos/drush-ops/drush/issues/2274/events","html_url":"https://github.com/drush-ops/drush/pull/2274","id":165832700,"number":2274,"title":"Check release information (e.g. versions) strictly","user":{"login":"pjcdawkins","id":1465106,"avatar_url":"https://avatars.githubusercontent.com/u/1465106?v=3","gravatar_id":"","url":"https://api.github.com/users/pjcdawkins","html_url":"https://github.com/pjcdawkins","followers_url":"https://api.github.com/users/pjcdawkins/followers","following_url":"https://api.github.com/users/pjcdawkins/following{/other_user}","gists_url":"https://api.github.com/users/pjcdawkins/gists{/gist_id}","starred_url":"https://api.github.com/users/pjcdawkins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pjcdawkins/subscriptions","organizations_url":"https://api.github.com/users/pjcdawkins/orgs","repos_url":"https://api.github.com/users/pjcdawkins/repos","events_url":"https://api.github.com/users/pjcdawkins/events{/privacy}","received_events_url":"https://api.github.com/users/pjcdawkins/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/drush-ops/drush/labels/area-pm","name":"area-pm","color":"d4c5f9"},{"url":"https://api.github.com/repos/drush-ops/drush/labels/type-bug","name":"type-bug","color":"f7c6c7"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-15T16:56:28Z","updated_at":"2016-07-26T09:19:26Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/drush-ops/drush/pulls/2274","html_url":"https://github.com/drush-ops/drush/pull/2274","diff_url":"https://github.com/drush-ops/drush/pull/2274.diff","patch_url":"https://github.com/drush-ops/drush/pull/2274.patch"},"body":"1. Somehow end up with a Drush cache that includes out-of-date release info, _not_ containing Drupal core version `7.50`\r\n2. Run `drush make` on a make file (YAML or ini) which asks for Drupal core `\"7.50\"`\r\n3. Instead of failing and reporting that the version `7.50` could not be found, Drush will select version `7.5`\r\n4. The result could be a site unexpectedly vulnerable to Drupalgeddon.\r\n\r\nThe actual fix could probably be improved by contributors more knowledgeable about Make internals: I created the PR to illustrate the problem."},"comment":{"url":"https://api.github.com/repos/drush-ops/drush/issues/comments/235210566","html_url":"https://github.com/drush-ops/drush/pull/2274#issuecomment-235210566","issue_url":"https://api.github.com/repos/drush-ops/drush/issues/2274","id":235210566,"user":{"login":"jonhattan","id":482058,"avatar_url":"https://avatars.githubusercontent.com/u/482058?v=3","gravatar_id":"","url":"https://api.github.com/users/jonhattan","html_url":"https://github.com/jonhattan","followers_url":"https://api.github.com/users/jonhattan/followers","following_url":"https://api.github.com/users/jonhattan/following{/other_user}","gists_url":"https://api.github.com/users/jonhattan/gists{/gist_id}","starred_url":"https://api.github.com/users/jonhattan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonhattan/subscriptions","organizations_url":"https://api.github.com/users/jonhattan/orgs","repos_url":"https://api.github.com/users/jonhattan/repos","events_url":"https://api.github.com/users/jonhattan/events{/privacy}","received_events_url":"https://api.github.com/users/jonhattan/received_events","type":"User","site_admin":false},"created_at":"2016-07-26T09:19:26Z","updated_at":"2016-07-26T09:19:26Z","body":"Easy to reproduce:\r\n\r\n```\r\njonhattan@nuro:/tmp$ drush dl drupal-7.4000\r\n [notice] Project drupal (7.40) downloaded to /tmp/drupal-7.40.\r\n```\r\n"}}
{"actor":{"display_login":"jonhattan"}}