Skip to content

Conversation

@RDIL
Copy link

@RDIL RDIL commented Jan 15, 2026

Updates

  • Affected products
  • Description
  • References

Comments

  • Minor formatting improvements (actual headers)
  • Add relevant Rails LTS 2.3.x, 3.2.x, and 4.2.x fixed versions. Had to dig through these while patching an app, so hopefully saving everyone else the trouble.
    • Link the URL from the mailing list that was sent out instead of just the 5.2 changelog.
  • Other changes (like starting version etc) were not intentional (I think the form improvement workflow just sucks)

Copilot AI review requested due to automatic review settings January 15, 2026 19:50
@github-actions github-actions bot changed the base branch from main to RDIL/advisory-improvement-6653 January 15, 2026 19:51
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the security advisory GHSA-579w-22j4-4749 for CVE-2022-44566 (Denial of Service vulnerability in ActiveRecord's PostgreSQL adapter) by adding missing Rails LTS fixed versions, improving documentation formatting, and updating references.

Changes:

  • Added Rails LTS fixed versions 2.3.18.47, 3.2.22.34, and 4.2.11.27 to the advisory
  • Improved details section formatting with proper markdown headers (## Fixed Versions, ## Impact, ## Releases, ## Workarounds, ## Patches)
  • Updated reference URL from a specific changelog page to a more comprehensive Rails LTS announcement

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database advisory-database bot merged commit 3bc4bc5 into RDIL/advisory-improvement-6653 Jan 15, 2026
9 of 10 checks passed
@advisory-database
Copy link
Contributor

Hi @RDIL! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database bot deleted the RDIL-GHSA-579w-22j4-4749 branch January 15, 2026 23:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants