Alpine/openjdk17: high 7.8
On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND
Action: Upgrade openjdk17 to 17.0.11_p9-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.0.11_p9-r0 | - |
Fixed versions
| 17.0.11_p9-r0 |
Sources
- osv: ALPINE-CVE-2024-21892#Alpine:v3.21/openjdk17
- https://security.alpinelinux.org/vuln/CVE-2024-21892
published · modified · JSON