[PATCH] lib: disable futimes when permission model is enabled
authorRafaelGSS <rafael.nunu@hotmail.com>
Tue, 21 Oct 2025 21:25:31 +0000 (18:25 -0300)
committerJérémy Lal <kapouer@melix.org>
Thu, 5 Mar 2026 10:05:11 +0000 (11:05 +0100)
commitbee526a7775fad0d4874797a47976780a4a2d716
treee9744cffe277f576e2c26709f0f63e665ac610f8
parent28b60d2897df2aed9e4359d46d23a75c5a7e7057
[PATCH] lib: disable futimes when permission model is enabled

Refs: https://hackerone.com/reports/3390084
PR-URL: https://github.com/nodejs-private/node-private/pull/748
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
CVE-ID: CVE-2025-55132
PR-URL: https://github.com/nodejs-private/node-private/pull/802
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
CVE-ID: CVE-2025-55132

Gbp-Pq: Topic sec
Gbp-Pq: Name 35-lib-disable-futimes-when-permission-model-is-enabled.patch
lib/fs.js
test/fixtures/permission/fs-write.js
test/parallel/test-permission-fs-supported.js