bmuschko / gradle-vagrant-plugin

Gradle plugin for managing Vagrant boxes.
Apache License 2.0
48 stars 11 forks source link

Don't print environment #20

Closed britter closed 3 years ago

britter commented 3 years ago

Fixes #19

britter commented 3 years ago

I did not change the way envp is created because I realized that the environment will be inherited anyway when the new process is spawned. That's probably the reason why null is passed if the user supplied environment variables are empty.

JLLeitschuh commented 3 years ago

This has been assigned CVE-2021-21361 https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-jpcm-4485-69p7