{"action":"closed","number":5411,"pull_request":{"url":"https://api.github.com/repos/jruby/jruby/pulls/5411","id":228098580,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI4MDk4NTgw","html_url":"https://github.com/jruby/jruby/pull/5411","diff_url":"https://github.com/jruby/jruby/pull/5411.diff","patch_url":"https://github.com/jruby/jruby/pull/5411.patch","issue_url":"https://api.github.com/repos/jruby/jruby/issues/5411","number":5411,"state":"closed","locked":false,"title":"taint flag","user":{"login":"ahorek","id":9540855,"node_id":"MDQ6VXNlcjk1NDA4NTU=","avatar_url":"https://avatars2.githubusercontent.com/u/9540855?v=4","gravatar_id":"","url":"https://api.github.com/users/ahorek","html_url":"https://github.com/ahorek","followers_url":"https://api.github.com/users/ahorek/followers","following_url":"https://api.github.com/users/ahorek/following{/other_user}","gists_url":"https://api.github.com/users/ahorek/gists{/gist_id}","starred_url":"https://api.github.com/users/ahorek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ahorek/subscriptions","organizations_url":"https://api.github.com/users/ahorek/orgs","repos_url":"https://api.github.com/users/ahorek/repos","events_url":"https://api.github.com/users/ahorek/events{/privacy}","received_events_url":"https://api.github.com/users/ahorek/received_events","type":"User","site_admin":false},"body":"https://www.ruby-lang.org/en/news/2018/10/17/not-propagated-taint-flag-in-some-formats-of-pack-cve-2018-16396/\r\n\r\n```\r\nArray#pack('M')\r\nArray#pack('m')\r\nArray#pack('u')\r\n```\r\nreturns a tainted string when a pack argument is tainted\r\n\r\n```\r\nArray#pack('p')\r\nArray#pack('P')\r\n```\r\nnot implemented on jruby","created_at":"2018-11-03T04:17:46Z","updated_at":"2018-11-03T11:01:49Z","closed_at":"2018-11-03T11:01:49Z","merged_at":"2018-11-03T11:01:49Z","merge_commit_sha":"15bb1691989c646c74d627c49bf70ad959dc04cc","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/jruby/jruby/pulls/5411/commits","review_comments_url":"https://api.github.com/repos/jruby/jruby/pulls/5411/comments","review_comment_url":"https://api.github.com/repos/jruby/jruby/pulls/comments{/number}","comments_url":"https://api.github.com/repos/jruby/jruby/issues/5411/comments","statuses_url":"https://api.github.com/repos/jruby/jruby/statuses/89047d951a0a2087f8dc9da6eb86d2d127a66f30","head":{"label":"ahorek:taint","ref":"taint","sha":"89047d951a0a2087f8dc9da6eb86d2d127a66f30","user":{"login":"ahorek","id":9540855,"node_id":"MDQ6VXNlcjk1NDA4NTU=","avatar_url":"https://avatars2.githubusercontent.com/u/9540855?v=4","gravatar_id":"","url":"https://api.github.com/users/ahorek","html_url":"https://github.com/ahorek","followers_url":"https://api.github.com/users/ahorek/followers","following_url":"https://api.github.com/users/ahorek/following{/other_user}","gists_url":"https://api.github.com/users/ahorek/gists{/gist_id}","starred_url":"https://api.github.com/users/ahorek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ahorek/subscriptions","organizations_url":"https://api.github.com/users/ahorek/orgs","repos_url":"https://api.github.com/users/ahorek/repos","events_url":"https://api.github.com/users/ahorek/events{/privacy}","received_events_url":"https://api.github.com/users/ahorek/received_events","type":"User","site_admin":false},"repo":{"id":26781632,"node_id":"MDEwOlJlcG9zaXRvcnkyNjc4MTYzMg==","name":"jruby","full_name":"ahorek/jruby","private":false,"owner":{"login":"ahorek","id":9540855,"node_id":"MDQ6VXNlcjk1NDA4NTU=","avatar_url":"https://avatars2.githubusercontent.com/u/9540855?v=4","gravatar_id":"","url":"https://api.github.com/users/ahorek","html_url":"https://github.com/ahorek","followers_url":"https://api.github.com/users/ahorek/followers","following_url":"https://api.github.com/users/ahorek/following{/other_user}","gists_url":"https://api.github.com/users/ahorek/gists{/gist_id}","starred_url":"https://api.github.com/users/ahorek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ahorek/subscriptions","organizations_url":"https://api.github.com/users/ahorek/orgs","repos_url":"https://api.github.com/users/ahorek/repos","events_url":"https://api.github.com/users/ahorek/events{/privacy}","received_events_url":"https://api.github.com/users/ahorek/received_events","type":"User","site_admin":false},"html_url":"https://github.com/ahorek/jruby","description":"JRuby, an implementation of Ruby on the JVM","fork":true,"url":"https://api.github.com/repos/ahorek/jruby","forks_url":"https://api.github.com/repos/ahorek/jruby/forks","keys_url":"https://api.github.com/repos/ahorek/jruby/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ahorek/jruby/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ahorek/jruby/teams","hooks_url":"https://api.github.com/repos/ahorek/jruby/hooks","issue_events_url":"https://api.github.com/repos/ahorek/jruby/issues/events{/number}","events_url":"https://api.github.com/repos/ahorek/jruby/events","assignees_url":"https://api.github.com/repos/ahorek/jruby/assignees{/user}","branches_url":"https://api.github.com/repos/ahorek/jruby/branches{/branch}","tags_url":"https://api.github.com/repos/ahorek/jruby/tags","blobs_url":"https://api.github.com/repos/ahorek/jruby/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ahorek/jruby/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ahorek/jruby/git/refs{/sha}","trees_url":"https://api.github.com/repos/ahorek/jruby/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ahorek/jruby/statuses/{sha}","languages_url":"https://api.github.com/repos/ahorek/jruby/languages","stargazers_url":"https://api.github.com/repos/ahorek/jruby/stargazers","contributors_url":"https://api.github.com/repos/ahorek/jruby/contributors","subscribers_url":"https://api.github.com/repos/ahorek/jruby/subscribers","subscription_url":"https://api.github.com/repos/ahorek/jruby/subscription","commits_url":"https://api.github.com/repos/ahorek/jruby/commits{/sha}","git_commits_url":"https://api.github.com/repos/ahorek/jruby/git/commits{/sha}","comments_url":"https://api.github.com/repos/ahorek/jruby/comments{/number}","issue_comment_url":"https://api.github.com/repos/ahorek/jruby/issues/comments{/number}","contents_url":"https://api.github.com/repos/ahorek/jruby/contents/{+path}","compare_url":"https://api.github.com/repos/ahorek/jruby/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ahorek/jruby/merges","archive_url":"https://api.github.com/repos/ahorek/jruby/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ahorek/jruby/downloads","issues_url":"https://api.github.com/repos/ahorek/jruby/issues{/number}","pulls_url":"https://api.github.com/repos/ahorek/jruby/pulls{/number}","milestones_url":"https://api.github.com/repos/ahorek/jruby/milestones{/number}","notifications_url":"https://api.github.com/repos/ahorek/jruby/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ahorek/jruby/labels{/name}","releases_url":"https://api.github.com/repos/ahorek/jruby/releases{/id}","deployments_url":"https://api.github.com/repos/ahorek/jruby/deployments","created_at":"2014-11-17T23:04:38Z","updated_at":"2017-09-02T20:36:01Z","pushed_at":"2018-11-03T04:37:12Z","git_url":"git://github.com/ahorek/jruby.git","ssh_url":"git@github.com:ahorek/jruby.git","clone_url":"https://github.com/ahorek/jruby.git","svn_url":"https://github.com/ahorek/jruby","homepage":"http://www.jruby.org","size":231093,"stargazers_count":0,"watchers_count":0,"language":"Ruby","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"other","name":"Other","spdx_id":"NOASSERTION","url":null,"node_id":"MDc6TGljZW5zZTA="},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"jruby:master","ref":"master","sha":"08fe128eb444bd6a665d53635b3bc9d57cf738e7","user":{"login":"jruby","id":55687,"node_id":"MDEyOk9yZ2FuaXphdGlvbjU1Njg3","avatar_url":"https://avatars2.githubusercontent.com/u/55687?v=4","gravatar_id":"","url":"https://api.github.com/users/jruby","html_url":"https://github.com/jruby","followers_url":"https://api.github.com/users/jruby/followers","following_url":"https://api.github.com/users/jruby/following{/other_user}","gists_url":"https://api.github.com/users/jruby/gists{/gist_id}","starred_url":"https://api.github.com/users/jruby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jruby/subscriptions","organizations_url":"https://api.github.com/users/jruby/orgs","repos_url":"https://api.github.com/users/jruby/repos","events_url":"https://api.github.com/users/jruby/events{/privacy}","received_events_url":"https://api.github.com/users/jruby/received_events","type":"Organization","site_admin":false},"repo":{"id":168370,"node_id":"MDEwOlJlcG9zaXRvcnkxNjgzNzA=","name":"jruby","full_name":"jruby/jruby","private":false,"owner":{"login":"jruby","id":55687,"node_id":"MDEyOk9yZ2FuaXphdGlvbjU1Njg3","avatar_url":"https://avatars2.githubusercontent.com/u/55687?v=4","gravatar_id":"","url":"https://api.github.com/users/jruby","html_url":"https://github.com/jruby","followers_url":"https://api.github.com/users/jruby/followers","following_url":"https://api.github.com/users/jruby/following{/other_user}","gists_url":"https://api.github.com/users/jruby/gists{/gist_id}","starred_url":"https://api.github.com/users/jruby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jruby/subscriptions","organizations_url":"https://api.github.com/users/jruby/orgs","repos_url":"https://api.github.com/users/jruby/repos","events_url":"https://api.github.com/users/jruby/events{/privacy}","received_events_url":"https://api.github.com/users/jruby/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/jruby/jruby","description":"JRuby, an implementation of Ruby on the JVM","fork":false,"url":"https://api.github.com/repos/jruby/jruby","forks_url":"https://api.github.com/repos/jruby/jruby/forks","keys_url":"https://api.github.com/repos/jruby/jruby/keys{/key_id}","collaborators_url":"https://api.github.com/repos/jruby/jruby/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/jruby/jruby/teams","hooks_url":"https://api.github.com/repos/jruby/jruby/hooks","issue_events_url":"https://api.github.com/repos/jruby/jruby/issues/events{/number}","events_url":"https://api.github.com/repos/jruby/jruby/events","assignees_url":"https://api.github.com/repos/jruby/jruby/assignees{/user}","branches_url":"https://api.github.com/repos/jruby/jruby/branches{/branch}","tags_url":"https://api.github.com/repos/jruby/jruby/tags","blobs_url":"https://api.github.com/repos/jruby/jruby/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/jruby/jruby/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/jruby/jruby/git/refs{/sha}","trees_url":"https://api.github.com/repos/jruby/jruby/git/trees{/sha}","statuses_url":"https://api.github.com/repos/jruby/jruby/statuses/{sha}","languages_url":"https://api.github.com/repos/jruby/jruby/languages","stargazers_url":"https://api.github.com/repos/jruby/jruby/stargazers","contributors_url":"https://api.github.com/repos/jruby/jruby/contributors","subscribers_url":"https://api.github.com/repos/jruby/jruby/subscribers","subscription_url":"https://api.github.com/repos/jruby/jruby/subscription","commits_url":"https://api.github.com/repos/jruby/jruby/commits{/sha}","git_commits_url":"https://api.github.com/repos/jruby/jruby/git/commits{/sha}","comments_url":"https://api.github.com/repos/jruby/jruby/comments{/number}","issue_comment_url":"https://api.github.com/repos/jruby/jruby/issues/comments{/number}","contents_url":"https://api.github.com/repos/jruby/jruby/contents/{+path}","compare_url":"https://api.github.com/repos/jruby/jruby/compare/{base}...{head}","merges_url":"https://api.github.com/repos/jruby/jruby/merges","archive_url":"https://api.github.com/repos/jruby/jruby/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/jruby/jruby/downloads","issues_url":"https://api.github.com/repos/jruby/jruby/issues{/number}","pulls_url":"https://api.github.com/repos/jruby/jruby/pulls{/number}","milestones_url":"https://api.github.com/repos/jruby/jruby/milestones{/number}","notifications_url":"https://api.github.com/repos/jruby/jruby/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/jruby/jruby/labels{/name}","releases_url":"https://api.github.com/repos/jruby/jruby/releases{/id}","deployments_url":"https://api.github.com/repos/jruby/jruby/deployments","created_at":"2009-04-05T03:54:35Z","updated_at":"2018-11-02T19:12:10Z","pushed_at":"2018-11-03T11:01:48Z","git_url":"git://github.com/jruby/jruby.git","ssh_url":"git@github.com:jruby/jruby.git","clone_url":"https://github.com/jruby/jruby.git","svn_url":"https://github.com/jruby/jruby","homepage":"http://www.jruby.org","size":226907,"stargazers_count":3212,"watchers_count":3212,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":807,"mirror_url":null,"archived":false,"open_issues_count":592,"license":{"key":"other","name":"Other","spdx_id":"NOASSERTION","url":null,"node_id":"MDc6TGljZW5zZTA="},"forks":807,"open_issues":592,"watchers":3212,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/jruby/jruby/pulls/5411"},"html":{"href":"https://github.com/jruby/jruby/pull/5411"},"issue":{"href":"https://api.github.com/repos/jruby/jruby/issues/5411"},"comments":{"href":"https://api.github.com/repos/jruby/jruby/issues/5411/comments"},"review_comments":{"href":"https://api.github.com/repos/jruby/jruby/pulls/5411/comments"},"review_comment":{"href":"https://api.github.com/repos/jruby/jruby/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/jruby/jruby/pulls/5411/commits"},"statuses":{"href":"https://api.github.com/repos/jruby/jruby/statuses/89047d951a0a2087f8dc9da6eb86d2d127a66f30"}},"author_association":"CONTRIBUTOR","merged":true,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":{"login":"kares","id":45967,"node_id":"MDQ6VXNlcjQ1OTY3","avatar_url":"https://avatars0.githubusercontent.com/u/45967?v=4","gravatar_id":"","url":"https://api.github.com/users/kares","html_url":"https://github.com/kares","followers_url":"https://api.github.com/users/kares/followers","following_url":"https://api.github.com/users/kares/following{/other_user}","gists_url":"https://api.github.com/users/kares/gists{/gist_id}","starred_url":"https://api.github.com/users/kares/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kares/subscriptions","organizations_url":"https://api.github.com/users/kares/orgs","repos_url":"https://api.github.com/users/kares/repos","events_url":"https://api.github.com/users/kares/events{/privacy}","received_events_url":"https://api.github.com/users/kares/received_events","type":"User","site_admin":false},"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":3,"deletions":7,"changed_files":3}}
{"actor":{"display_login":"kares"}}