This release contains changes that address the following vulnerabilities:

### CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API

A security vulnerability has been discovered in Kubernetes windows nodes
that could allow a user with the ability to query a node's '/logs' endpoint
to execute arbitrary commands on the host.

**Affected Versions**:
  - kubelet <= v1.29.12
  - kubelet <= v1.30.8

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isAllowCompound(java.lang.String)
     */
    @Override
    public boolean isAllowCompound(final String command) {
        return this.delegate.isAllowCompound(command);
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isTraceResourceUsage()
     */
    @Override
    public boolean isTraceResourceUsage() {

<span style="color: green;">INFO</span>:     Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
```

</div>

/// tip

To set multiple env vars for a single command just separate them with a space, and put them all before the command.

///

And then the `admin_email` setting would be set to `"******@****.***"`.

The `app_name` would be `"ChimichangApp"`.

import org.codelibs.fess.util.ComponentUtil;
import org.lastaflute.core.message.UserMessages;
import org.opensearch.index.query.QueryBuilder;
import org.opensearch.index.query.QueryBuilders;

/**
 * Query command for prefix queries.
 */
public class PrefixQueryCommand extends QueryCommand {

    /**
     * Default constructor.
     */
    public PrefixQueryCommand() {
        super();
    }

        }
    }

    private final int informationLevel;

    AllocInfo info;

    Trans2QueryFSInformationResponse(final int informationLevel) {
        this.informationLevel = informationLevel;
        command = SMB_COM_TRANSACTION2;
        subCommand = SmbComTransaction.TRANS2_QUERY_FS_INFORMATION;
    }

    @Override
    int writeSetupWireFormat(final byte[] dst, final int dstIndex) {
        return 0;
    }

</div>

////

//// tab | Windows PowerShell

<div class="termy">

```console
$ Get-Command python

C:\Users\user\code\awesome-project\.venv\Scripts\python
```

</div>

////

즉, 현재 사용되는 `python` 프로그램은 **가상 환경 내부에 있는 것**입니다.

Linux와 macOS에서는 `which`, Windows PowerShell에서는 `Get-Command` 명령어를 사용합니다.

이 명령어는 `PATH` 환경 변수에 지정된 경로들을 **순서대로 탐색**하면서 `python`이라는 이름의 프로그램을 찾습니다.

            final int createOptions, final ServerMessageBlock andx) {
        super(andx);
        this.path = name;
        command = SMB_COM_NT_CREATE_ANDX;

        desiredAccess = access;
        desiredAccess |= FILE_READ_DATA | FILE_READ_EA | FILE_READ_ATTRIBUTES;

        // extFileAttributes
        this.extFileAttributes = extFileAttributes;

import jcifs.internal.smb2.ServerMessageBlock2Request;
import jcifs.internal.smb2.Smb2Constants;
import jcifs.internal.util.SMBUtil;

/**
 * SMB2 Session Setup request message. This command is used to establish a security session
 * and authenticate a user to the server.
 *
 * @author mbechler
 *
 */
public class Smb2SessionSetupRequest extends ServerMessageBlock2Request<Smb2SessionSetupResponse> {

        byte[] buf = new byte[12]; // Buffer needs to be at least 12 bytes for the parameter words
        cmd.writeParameterWordsWireFormat(buf, 0);
        // The flag must be present so the command recognises largeFile
        SmbComLockingAndX copy = new SmbComLockingAndX(cfg);
        copy.readParameterWordsWireFormat(buf, 0);
        assertTrue((boolean) getField(copy, "largeFile"));
    }

    /**

    * kubeadm: use the default kubeconfig (/etc/kubernetes/admin.conf) for "kubeadm reset" and "kubeadm upgrade" commands.