{"action":"created","comment":{"url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/comments/177796442","pull_request_review_id":107735543,"id":177796442,"diff_hunk":"@@ -0,0 +1,36 @@\n+---\n+layout: news_post\n+title: \"CVE-2018-8779: Unintentional directory traversal by poisoned NUL byte in Dir\"\n+author: \"usa\"\n+date: 2018-03-28 14:00:00 +0000\n+tags: security\n+lang: en\n+---\n+\n+There is an unintentional directory traversal in some methods in `Dir`.\n+This vulnerability has been assigned the CVE identifier [CVE-2018-8779](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8779).","path":"en/news/_posts/2018-03-28-poisoned-nul-byte-dir-cve-2018-8780.md","position":11,"original_position":11,"commit_id":"01a739956cbe9557729b6a220ab04292d964f48e","original_commit_id":"01a739956cbe9557729b6a220ab04292d964f48e","user":{"login":"nagachika","id":21976,"avatar_url":"https://avatars1.githubusercontent.com/u/21976?v=4","gravatar_id":"","url":"https://api.github.com/users/nagachika","html_url":"https://github.com/nagachika","followers_url":"https://api.github.com/users/nagachika/followers","following_url":"https://api.github.com/users/nagachika/following{/other_user}","gists_url":"https://api.github.com/users/nagachika/gists{/gist_id}","starred_url":"https://api.github.com/users/nagachika/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nagachika/subscriptions","organizations_url":"https://api.github.com/users/nagachika/orgs","repos_url":"https://api.github.com/users/nagachika/repos","events_url":"https://api.github.com/users/nagachika/events{/privacy}","received_events_url":"https://api.github.com/users/nagachika/received_events","type":"User","site_admin":false},"body":"/8779/8780/","created_at":"2018-03-28T15:44:09Z","updated_at":"2018-03-28T15:46:54Z","html_url":"https://github.com/ruby/www.ruby-lang.org/pull/1761#discussion_r177796442","pull_request_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/comments/177796442"},"html":{"href":"https://github.com/ruby/www.ruby-lang.org/pull/1761#discussion_r177796442"},"pull_request":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761"}}},"pull_request":{"url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761","id":178075916,"html_url":"https://github.com/ruby/www.ruby-lang.org/pull/1761","diff_url":"https://github.com/ruby/www.ruby-lang.org/pull/1761.diff","patch_url":"https://github.com/ruby/www.ruby-lang.org/pull/1761.patch","issue_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues/1761","number":1761,"state":"open","locked":false,"title":"Security announcement","user":{"login":"unak","id":17790,"avatar_url":"https://avatars2.githubusercontent.com/u/17790?v=4","gravatar_id":"","url":"https://api.github.com/users/unak","html_url":"https://github.com/unak","followers_url":"https://api.github.com/users/unak/followers","following_url":"https://api.github.com/users/unak/following{/other_user}","gists_url":"https://api.github.com/users/unak/gists{/gist_id}","starred_url":"https://api.github.com/users/unak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/unak/subscriptions","organizations_url":"https://api.github.com/users/unak/orgs","repos_url":"https://api.github.com/users/unak/repos","events_url":"https://api.github.com/users/unak/events{/privacy}","received_events_url":"https://api.github.com/users/unak/received_events","type":"User","site_admin":false},"body":"Please do not publish before merging release announcement.","created_at":"2018-03-28T15:24:55Z","updated_at":"2018-03-28T15:46:54Z","closed_at":null,"merged_at":null,"merge_commit_sha":"8cc17f10018755ae491d62aff51707da4c7de25a","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761/commits","review_comments_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761/comments","review_comment_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/comments{/number}","comments_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues/1761/comments","statuses_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/statuses/01a739956cbe9557729b6a220ab04292d964f48e","head":{"label":"unak:security-2018-03-28","ref":"security-2018-03-28","sha":"01a739956cbe9557729b6a220ab04292d964f48e","user":{"login":"unak","id":17790,"avatar_url":"https://avatars2.githubusercontent.com/u/17790?v=4","gravatar_id":"","url":"https://api.github.com/users/unak","html_url":"https://github.com/unak","followers_url":"https://api.github.com/users/unak/followers","following_url":"https://api.github.com/users/unak/following{/other_user}","gists_url":"https://api.github.com/users/unak/gists{/gist_id}","starred_url":"https://api.github.com/users/unak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/unak/subscriptions","organizations_url":"https://api.github.com/users/unak/orgs","repos_url":"https://api.github.com/users/unak/repos","events_url":"https://api.github.com/users/unak/events{/privacy}","received_events_url":"https://api.github.com/users/unak/received_events","type":"User","site_admin":false},"repo":{"id":17125272,"name":"www.ruby-lang.org","full_name":"unak/www.ruby-lang.org","owner":{"login":"unak","id":17790,"avatar_url":"https://avatars2.githubusercontent.com/u/17790?v=4","gravatar_id":"","url":"https://api.github.com/users/unak","html_url":"https://github.com/unak","followers_url":"https://api.github.com/users/unak/followers","following_url":"https://api.github.com/users/unak/following{/other_user}","gists_url":"https://api.github.com/users/unak/gists{/gist_id}","starred_url":"https://api.github.com/users/unak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/unak/subscriptions","organizations_url":"https://api.github.com/users/unak/orgs","repos_url":"https://api.github.com/users/unak/repos","events_url":"https://api.github.com/users/unak/events{/privacy}","received_events_url":"https://api.github.com/users/unak/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/unak/www.ruby-lang.org","description":"Source of the www.ruby-lang.org site","fork":true,"url":"https://api.github.com/repos/unak/www.ruby-lang.org","forks_url":"https://api.github.com/repos/unak/www.ruby-lang.org/forks","keys_url":"https://api.github.com/repos/unak/www.ruby-lang.org/keys{/key_id}","collaborators_url":"https://api.github.com/repos/unak/www.ruby-lang.org/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/unak/www.ruby-lang.org/teams","hooks_url":"https://api.github.com/repos/unak/www.ruby-lang.org/hooks","issue_events_url":"https://api.github.com/repos/unak/www.ruby-lang.org/issues/events{/number}","events_url":"https://api.github.com/repos/unak/www.ruby-lang.org/events","assignees_url":"https://api.github.com/repos/unak/www.ruby-lang.org/assignees{/user}","branches_url":"https://api.github.com/repos/unak/www.ruby-lang.org/branches{/branch}","tags_url":"https://api.github.com/repos/unak/www.ruby-lang.org/tags","blobs_url":"https://api.github.com/repos/unak/www.ruby-lang.org/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/unak/www.ruby-lang.org/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/unak/www.ruby-lang.org/git/refs{/sha}","trees_url":"https://api.github.com/repos/unak/www.ruby-lang.org/git/trees{/sha}","statuses_url":"https://api.github.com/repos/unak/www.ruby-lang.org/statuses/{sha}","languages_url":"https://api.github.com/repos/unak/www.ruby-lang.org/languages","stargazers_url":"https://api.github.com/repos/unak/www.ruby-lang.org/stargazers","contributors_url":"https://api.github.com/repos/unak/www.ruby-lang.org/contributors","subscribers_url":"https://api.github.com/repos/unak/www.ruby-lang.org/subscribers","subscription_url":"https://api.github.com/repos/unak/www.ruby-lang.org/subscription","commits_url":"https://api.github.com/repos/unak/www.ruby-lang.org/commits{/sha}","git_commits_url":"https://api.github.com/repos/unak/www.ruby-lang.org/git/commits{/sha}","comments_url":"https://api.github.com/repos/unak/www.ruby-lang.org/comments{/number}","issue_comment_url":"https://api.github.com/repos/unak/www.ruby-lang.org/issues/comments{/number}","contents_url":"https://api.github.com/repos/unak/www.ruby-lang.org/contents/{+path}","compare_url":"https://api.github.com/repos/unak/www.ruby-lang.org/compare/{base}...{head}","merges_url":"https://api.github.com/repos/unak/www.ruby-lang.org/merges","archive_url":"https://api.github.com/repos/unak/www.ruby-lang.org/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/unak/www.ruby-lang.org/downloads","issues_url":"https://api.github.com/repos/unak/www.ruby-lang.org/issues{/number}","pulls_url":"https://api.github.com/repos/unak/www.ruby-lang.org/pulls{/number}","milestones_url":"https://api.github.com/repos/unak/www.ruby-lang.org/milestones{/number}","notifications_url":"https://api.github.com/repos/unak/www.ruby-lang.org/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/unak/www.ruby-lang.org/labels{/name}","releases_url":"https://api.github.com/repos/unak/www.ruby-lang.org/releases{/id}","deployments_url":"https://api.github.com/repos/unak/www.ruby-lang.org/deployments","created_at":"2014-02-24T04:31:57Z","updated_at":"2014-05-16T20:04:09Z","pushed_at":"2018-03-28T15:21:54Z","git_url":"git://github.com/unak/www.ruby-lang.org.git","ssh_url":"git@github.com:unak/www.ruby-lang.org.git","clone_url":"https://github.com/unak/www.ruby-lang.org.git","svn_url":"https://github.com/unak/www.ruby-lang.org","homepage":"https://www.ruby-lang.org","size":42602,"stargazers_count":0,"watchers_count":0,"language":"CSS","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":null,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"ruby:master","ref":"master","sha":"e307af6cd5a3ef5667ad77c0a7bd9aadde20fe66","user":{"login":"ruby","id":210414,"avatar_url":"https://avatars3.githubusercontent.com/u/210414?v=4","gravatar_id":"","url":"https://api.github.com/users/ruby","html_url":"https://github.com/ruby","followers_url":"https://api.github.com/users/ruby/followers","following_url":"https://api.github.com/users/ruby/following{/other_user}","gists_url":"https://api.github.com/users/ruby/gists{/gist_id}","starred_url":"https://api.github.com/users/ruby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruby/subscriptions","organizations_url":"https://api.github.com/users/ruby/orgs","repos_url":"https://api.github.com/users/ruby/repos","events_url":"https://api.github.com/users/ruby/events{/privacy}","received_events_url":"https://api.github.com/users/ruby/received_events","type":"Organization","site_admin":false},"repo":{"id":2147447,"name":"www.ruby-lang.org","full_name":"ruby/www.ruby-lang.org","owner":{"login":"ruby","id":210414,"avatar_url":"https://avatars3.githubusercontent.com/u/210414?v=4","gravatar_id":"","url":"https://api.github.com/users/ruby","html_url":"https://github.com/ruby","followers_url":"https://api.github.com/users/ruby/followers","following_url":"https://api.github.com/users/ruby/following{/other_user}","gists_url":"https://api.github.com/users/ruby/gists{/gist_id}","starred_url":"https://api.github.com/users/ruby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruby/subscriptions","organizations_url":"https://api.github.com/users/ruby/orgs","repos_url":"https://api.github.com/users/ruby/repos","events_url":"https://api.github.com/users/ruby/events{/privacy}","received_events_url":"https://api.github.com/users/ruby/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/ruby/www.ruby-lang.org","description":"Source of the https://www.ruby-lang.org website.","fork":false,"url":"https://api.github.com/repos/ruby/www.ruby-lang.org","forks_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/forks","keys_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/teams","hooks_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/hooks","issue_events_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues/events{/number}","events_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/events","assignees_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/assignees{/user}","branches_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/branches{/branch}","tags_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/tags","blobs_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/git/refs{/sha}","trees_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/statuses/{sha}","languages_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/languages","stargazers_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/stargazers","contributors_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/contributors","subscribers_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/subscribers","subscription_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/subscription","commits_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/commits{/sha}","git_commits_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/git/commits{/sha}","comments_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/comments{/number}","issue_comment_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues/comments{/number}","contents_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/contents/{+path}","compare_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/merges","archive_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/downloads","issues_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues{/number}","pulls_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls{/number}","milestones_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/milestones{/number}","notifications_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/labels{/name}","releases_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/releases{/id}","deployments_url":"https://api.github.com/repos/ruby/www.ruby-lang.org/deployments","created_at":"2011-08-03T08:29:44Z","updated_at":"2018-03-27T14:21:25Z","pushed_at":"2018-03-28T15:24:56Z","git_url":"git://github.com/ruby/www.ruby-lang.org.git","ssh_url":"git@github.com:ruby/www.ruby-lang.org.git","clone_url":"https://github.com/ruby/www.ruby-lang.org.git","svn_url":"https://github.com/ruby/www.ruby-lang.org","homepage":"","size":42695,"stargazers_count":664,"watchers_count":664,"language":"HTML","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":452,"mirror_url":null,"archived":false,"open_issues_count":63,"license":null,"forks":452,"open_issues":63,"watchers":664,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761"},"html":{"href":"https://github.com/ruby/www.ruby-lang.org/pull/1761"},"issue":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues/1761"},"comments":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/issues/1761/comments"},"review_comments":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761/comments"},"review_comment":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/pulls/1761/commits"},"statuses":{"href":"https://api.github.com/repos/ruby/www.ruby-lang.org/statuses/01a739956cbe9557729b6a220ab04292d964f48e"}},"author_association":"MEMBER"}}
{"actor":{"display_login":"nagachika"}}