CHANGELOG.md in launchdarkly-server-sdk-5.5.10 vs CHANGELOG.md in launchdarkly-server-sdk-5.5.11
- old
+ new
@@ -1,11 +1,15 @@
# Change log
All notable changes to the LaunchDarkly Ruby SDK will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org).
-## [5.5.10] - 2019-07-24
+## [5.5.11] - 2019-07-24
### Fixed:
- `FileDataSource` was using `YAML.load`, which has a known [security vulnerability](https://trailofbits.github.io/rubysec/yaml/index.html). This has been changed to use `YAML.safe_load`, which will refuse to parse any files that contain the `!` directives used in this type of attack. This issue does not affect any applications that do not use `FileDataSource` (which is meant for testing purposes, not production use). ([#139](https://github.com/launchdarkly/ruby-server-sdk/issues/139))
+
+
+## [5.5.10] - 2019-07-24
+This release was an error; it is identical to 5.5.9.
## [5.5.9] - 2019-07-23
### Fixed:
- Due to the gem name no longer being the same as the `require` name, Bundler autoloading was no longer working in versions 5.5.7 and 5.5.8 of the SDK. This has been fixed. (Thanks, [tonyta](https://github.com/launchdarkly/ruby-server-sdk/pull/137)!)