{"action":"closed","number":671,"pull_request":{"url":"https://api.github.com/repos/pyupio/watcher/pulls/671","id":89779855,"html_url":"https://github.com/pyupio/watcher/pull/671","diff_url":"https://github.com/pyupio/watcher/pull/671.diff","patch_url":"https://github.com/pyupio/watcher/pull/671.patch","issue_url":"https://api.github.com/repos/pyupio/watcher/issues/671","number":671,"state":"closed","locked":false,"title":"Changelog python-dbusmock version 0.15.1","user":{"login":"vuln-bot","id":22832786,"avatar_url":"https://avatars.githubusercontent.com/u/22832786?v=3","gravatar_id":"","url":"https://api.github.com/users/vuln-bot","html_url":"https://github.com/vuln-bot","followers_url":"https://api.github.com/users/vuln-bot/followers","following_url":"https://api.github.com/users/vuln-bot/following{/other_user}","gists_url":"https://api.github.com/users/vuln-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/vuln-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vuln-bot/subscriptions","organizations_url":"https://api.github.com/users/vuln-bot/orgs","repos_url":"https://api.github.com/users/vuln-bot/repos","events_url":"https://api.github.com/users/vuln-bot/events{/privacy}","received_events_url":"https://api.github.com/users/vuln-bot/received_events","type":"User","site_admin":false},"body":"Keywords: security,cve,attacker,attack\n\n> -------------------\n>  - SECURITY FIX: When loading a template from an arbitrary file through the\n>    AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template()\n>    Python method, don't create or use Python's *.pyc cached files. By tricking\n>    a user into loading a template from a world-writable directory like /tmp, an\n>    attacker could run arbitrary code with the user's privileges by putting a\n>    crafted .pyc file into that directory. Note that this is highly unlikely to\n>    actually appear in practice as custom dbusmock templates are usually shipped\n>    in project directories, not directly in world-writable directories.\n>    Thanks to Simon McVittie for discovering this!\n>    (LP: 1453815, CVE-2015-1326)\n> ","created_at":"2016-10-18T09:42:20Z","updated_at":"2016-10-18T09:45:39Z","closed_at":"2016-10-18T09:45:38Z","merged_at":"2016-10-18T09:45:38Z","merge_commit_sha":"6493d0f7a2e8070fe9b4912a33515d9c02741f7c","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/pyupio/watcher/pulls/671/commits","review_comments_url":"https://api.github.com/repos/pyupio/watcher/pulls/671/comments","review_comment_url":"https://api.github.com/repos/pyupio/watcher/pulls/comments{/number}","comments_url":"https://api.github.com/repos/pyupio/watcher/issues/671/comments","statuses_url":"https://api.github.com/repos/pyupio/watcher/statuses/22fdea545cf52d7011a925ad106f3c7aef736173","head":{"label":"pyupio:changelog-python-dbusmock-version-0.15.1","ref":"changelog-python-dbusmock-version-0.15.1","sha":"22fdea545cf52d7011a925ad106f3c7aef736173","user":{"login":"pyupio","id":16113910,"avatar_url":"https://avatars.githubusercontent.com/u/16113910?v=3","gravatar_id":"","url":"https://api.github.com/users/pyupio","html_url":"https://github.com/pyupio","followers_url":"https://api.github.com/users/pyupio/followers","following_url":"https://api.github.com/users/pyupio/following{/other_user}","gists_url":"https://api.github.com/users/pyupio/gists{/gist_id}","starred_url":"https://api.github.com/users/pyupio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyupio/subscriptions","organizations_url":"https://api.github.com/users/pyupio/orgs","repos_url":"https://api.github.com/users/pyupio/repos","events_url":"https://api.github.com/users/pyupio/events{/privacy}","received_events_url":"https://api.github.com/users/pyupio/received_events","type":"Organization","site_admin":false},"repo":{"id":70887007,"name":"watcher","full_name":"pyupio/watcher","owner":{"login":"pyupio","id":16113910,"avatar_url":"https://avatars.githubusercontent.com/u/16113910?v=3","gravatar_id":"","url":"https://api.github.com/users/pyupio","html_url":"https://github.com/pyupio","followers_url":"https://api.github.com/users/pyupio/followers","following_url":"https://api.github.com/users/pyupio/following{/other_user}","gists_url":"https://api.github.com/users/pyupio/gists{/gist_id}","starred_url":"https://api.github.com/users/pyupio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyupio/subscriptions","organizations_url":"https://api.github.com/users/pyupio/orgs","repos_url":"https://api.github.com/users/pyupio/repos","events_url":"https://api.github.com/users/pyupio/events{/privacy}","received_events_url":"https://api.github.com/users/pyupio/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/pyupio/watcher","description":null,"fork":false,"url":"https://api.github.com/repos/pyupio/watcher","forks_url":"https://api.github.com/repos/pyupio/watcher/forks","keys_url":"https://api.github.com/repos/pyupio/watcher/keys{/key_id}","collaborators_url":"https://api.github.com/repos/pyupio/watcher/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/pyupio/watcher/teams","hooks_url":"https://api.github.com/repos/pyupio/watcher/hooks","issue_events_url":"https://api.github.com/repos/pyupio/watcher/issues/events{/number}","events_url":"https://api.github.com/repos/pyupio/watcher/events","assignees_url":"https://api.github.com/repos/pyupio/watcher/assignees{/user}","branches_url":"https://api.github.com/repos/pyupio/watcher/branches{/branch}","tags_url":"https://api.github.com/repos/pyupio/watcher/tags","blobs_url":"https://api.github.com/repos/pyupio/watcher/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/pyupio/watcher/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/pyupio/watcher/git/refs{/sha}","trees_url":"https://api.github.com/repos/pyupio/watcher/git/trees{/sha}","statuses_url":"https://api.github.com/repos/pyupio/watcher/statuses/{sha}","languages_url":"https://api.github.com/repos/pyupio/watcher/languages","stargazers_url":"https://api.github.com/repos/pyupio/watcher/stargazers","contributors_url":"https://api.github.com/repos/pyupio/watcher/contributors","subscribers_url":"https://api.github.com/repos/pyupio/watcher/subscribers","subscription_url":"https://api.github.com/repos/pyupio/watcher/subscription","commits_url":"https://api.github.com/repos/pyupio/watcher/commits{/sha}","git_commits_url":"https://api.github.com/repos/pyupio/watcher/git/commits{/sha}","comments_url":"https://api.github.com/repos/pyupio/watcher/comments{/number}","issue_comment_url":"https://api.github.com/repos/pyupio/watcher/issues/comments{/number}","contents_url":"https://api.github.com/repos/pyupio/watcher/contents/{+path}","compare_url":"https://api.github.com/repos/pyupio/watcher/compare/{base}...{head}","merges_url":"https://api.github.com/repos/pyupio/watcher/merges","archive_url":"https://api.github.com/repos/pyupio/watcher/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/pyupio/watcher/downloads","issues_url":"https://api.github.com/repos/pyupio/watcher/issues{/number}","pulls_url":"https://api.github.com/repos/pyupio/watcher/pulls{/number}","milestones_url":"https://api.github.com/repos/pyupio/watcher/milestones{/number}","notifications_url":"https://api.github.com/repos/pyupio/watcher/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/pyupio/watcher/labels{/name}","releases_url":"https://api.github.com/repos/pyupio/watcher/releases{/id}","deployments_url":"https://api.github.com/repos/pyupio/watcher/deployments","created_at":"2016-10-14T07:50:24Z","updated_at":"2016-10-14T07:50:24Z","pushed_at":"2016-10-18T09:45:39Z","git_url":"git://github.com/pyupio/watcher.git","ssh_url":"git@github.com:pyupio/watcher.git","clone_url":"https://github.com/pyupio/watcher.git","svn_url":"https://github.com/pyupio/watcher","homepage":null,"size":3366,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":39,"forks":0,"open_issues":39,"watchers":0,"default_branch":"master"}},"base":{"label":"pyupio:master","ref":"master","sha":"c7d4735751357e7d9fb698e9af747e5b6620871e","user":{"login":"pyupio","id":16113910,"avatar_url":"https://avatars.githubusercontent.com/u/16113910?v=3","gravatar_id":"","url":"https://api.github.com/users/pyupio","html_url":"https://github.com/pyupio","followers_url":"https://api.github.com/users/pyupio/followers","following_url":"https://api.github.com/users/pyupio/following{/other_user}","gists_url":"https://api.github.com/users/pyupio/gists{/gist_id}","starred_url":"https://api.github.com/users/pyupio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyupio/subscriptions","organizations_url":"https://api.github.com/users/pyupio/orgs","repos_url":"https://api.github.com/users/pyupio/repos","events_url":"https://api.github.com/users/pyupio/events{/privacy}","received_events_url":"https://api.github.com/users/pyupio/received_events","type":"Organization","site_admin":false},"repo":{"id":70887007,"name":"watcher","full_name":"pyupio/watcher","owner":{"login":"pyupio","id":16113910,"avatar_url":"https://avatars.githubusercontent.com/u/16113910?v=3","gravatar_id":"","url":"https://api.github.com/users/pyupio","html_url":"https://github.com/pyupio","followers_url":"https://api.github.com/users/pyupio/followers","following_url":"https://api.github.com/users/pyupio/following{/other_user}","gists_url":"https://api.github.com/users/pyupio/gists{/gist_id}","starred_url":"https://api.github.com/users/pyupio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyupio/subscriptions","organizations_url":"https://api.github.com/users/pyupio/orgs","repos_url":"https://api.github.com/users/pyupio/repos","events_url":"https://api.github.com/users/pyupio/events{/privacy}","received_events_url":"https://api.github.com/users/pyupio/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/pyupio/watcher","description":null,"fork":false,"url":"https://api.github.com/repos/pyupio/watcher","forks_url":"https://api.github.com/repos/pyupio/watcher/forks","keys_url":"https://api.github.com/repos/pyupio/watcher/keys{/key_id}","collaborators_url":"https://api.github.com/repos/pyupio/watcher/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/pyupio/watcher/teams","hooks_url":"https://api.github.com/repos/pyupio/watcher/hooks","issue_events_url":"https://api.github.com/repos/pyupio/watcher/issues/events{/number}","events_url":"https://api.github.com/repos/pyupio/watcher/events","assignees_url":"https://api.github.com/repos/pyupio/watcher/assignees{/user}","branches_url":"https://api.github.com/repos/pyupio/watcher/branches{/branch}","tags_url":"https://api.github.com/repos/pyupio/watcher/tags","blobs_url":"https://api.github.com/repos/pyupio/watcher/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/pyupio/watcher/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/pyupio/watcher/git/refs{/sha}","trees_url":"https://api.github.com/repos/pyupio/watcher/git/trees{/sha}","statuses_url":"https://api.github.com/repos/pyupio/watcher/statuses/{sha}","languages_url":"https://api.github.com/repos/pyupio/watcher/languages","stargazers_url":"https://api.github.com/repos/pyupio/watcher/stargazers","contributors_url":"https://api.github.com/repos/pyupio/watcher/contributors","subscribers_url":"https://api.github.com/repos/pyupio/watcher/subscribers","subscription_url":"https://api.github.com/repos/pyupio/watcher/subscription","commits_url":"https://api.github.com/repos/pyupio/watcher/commits{/sha}","git_commits_url":"https://api.github.com/repos/pyupio/watcher/git/commits{/sha}","comments_url":"https://api.github.com/repos/pyupio/watcher/comments{/number}","issue_comment_url":"https://api.github.com/repos/pyupio/watcher/issues/comments{/number}","contents_url":"https://api.github.com/repos/pyupio/watcher/contents/{+path}","compare_url":"https://api.github.com/repos/pyupio/watcher/compare/{base}...{head}","merges_url":"https://api.github.com/repos/pyupio/watcher/merges","archive_url":"https://api.github.com/repos/pyupio/watcher/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/pyupio/watcher/downloads","issues_url":"https://api.github.com/repos/pyupio/watcher/issues{/number}","pulls_url":"https://api.github.com/repos/pyupio/watcher/pulls{/number}","milestones_url":"https://api.github.com/repos/pyupio/watcher/milestones{/number}","notifications_url":"https://api.github.com/repos/pyupio/watcher/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/pyupio/watcher/labels{/name}","releases_url":"https://api.github.com/repos/pyupio/watcher/releases{/id}","deployments_url":"https://api.github.com/repos/pyupio/watcher/deployments","created_at":"2016-10-14T07:50:24Z","updated_at":"2016-10-14T07:50:24Z","pushed_at":"2016-10-18T09:45:39Z","git_url":"git://github.com/pyupio/watcher.git","ssh_url":"git@github.com:pyupio/watcher.git","clone_url":"https://github.com/pyupio/watcher.git","svn_url":"https://github.com/pyupio/watcher","homepage":null,"size":3366,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":39,"forks":0,"open_issues":39,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/pyupio/watcher/pulls/671"},"html":{"href":"https://github.com/pyupio/watcher/pull/671"},"issue":{"href":"https://api.github.com/repos/pyupio/watcher/issues/671"},"comments":{"href":"https://api.github.com/repos/pyupio/watcher/issues/671/comments"},"review_comments":{"href":"https://api.github.com/repos/pyupio/watcher/pulls/671/comments"},"review_comment":{"href":"https://api.github.com/repos/pyupio/watcher/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/pyupio/watcher/pulls/671/commits"},"statuses":{"href":"https://api.github.com/repos/pyupio/watcher/statuses/22fdea545cf52d7011a925ad106f3c7aef736173"}},"merged":true,"mergeable":null,"mergeable_state":"unknown","merged_by":{"login":"vuln-bot","id":22832786,"avatar_url":"https://avatars.githubusercontent.com/u/22832786?v=3","gravatar_id":"","url":"https://api.github.com/users/vuln-bot","html_url":"https://github.com/vuln-bot","followers_url":"https://api.github.com/users/vuln-bot/followers","following_url":"https://api.github.com/users/vuln-bot/following{/other_user}","gists_url":"https://api.github.com/users/vuln-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/vuln-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vuln-bot/subscriptions","organizations_url":"https://api.github.com/users/vuln-bot/orgs","repos_url":"https://api.github.com/users/vuln-bot/repos","events_url":"https://api.github.com/users/vuln-bot/events{/privacy}","received_events_url":"https://api.github.com/users/vuln-bot/received_events","type":"User","site_admin":false},"comments":0,"review_comments":0,"commits":2,"additions":9,"deletions":0,"changed_files":2}}
{"actor":{"display_login":"vuln-bot"}}