Re: [oe][meta-oe][kirkstone][PATCH 2/4] nodejs: fix CVE-2024-21892

2024-02-28 Thread Armin Kuster
of Polampalli, Archana via lists.openembedded.org *Sent:* Friday, February 23, 2024 14:06 *To:* openembedded-devel@lists.openembedded.org *Subject:* [oe][meta-oe][kirkstone][PATCH 2/4] nodejs: fix CVE-2024-21892 From: Archana Polampalli On Linux, Node.js ignores certain environment variables

Re: [oe][meta-oe][kirkstone][PATCH 2/4] nodejs: fix CVE-2024-21892

2024-02-27 Thread Polampalli, Archana via lists.openembedded.org
][kirkstone][PATCH 2/4] nodejs: fix CVE-2024-21892 From: Archana Polampalli On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND_SERVICE. Due to a

[oe][meta-oe][kirkstone][PATCH 2/4] nodejs: fix CVE-2024-21892

2024-02-23 Thread Polampalli, Archana via lists.openembedded.org
From: Archana Polampalli On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND_SERVICE. Due to a bug in the implementation of this exception, Node.js