NODE.js 4 critical vulnerabilities
- Thread starter bigredfish
- Start date
I already updated two internet-accessible instances of node.js at my house today, can't update the third apparently as it is baked into Ubiquiti's UISP software and I can't patch it until THEY do. At least not easily. This did get me to order a UISP-console appliance so I can put it in an isolated corner of my network and let it auto-update, in theory, which I never got working on my UISP installation that runs in a VM.
This shit will only be more and more common for a while too. Hopefully it becomes less common over time.
This shit will only be more and more common for a while too. Hopefully it becomes less common over time.
Ah geez. I just read UISP-console appliances don't have automatic updates either, and it is even harder to shoehorn in automatic updates for it. I guess I'll cancel that order.... or not.... already shipped. These guys are fast at something at least.