Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1188919 > unrolled thread

Bug#1063484: libuv1: CVE-2024-24806

Started byDominique Dumont <dod@debian.org>
First post2024-03-03 16:00 +0100
Last post2024-03-06 19:10 +0100
Articles 3 — 2 participants

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Bug#1063484: libuv1: CVE-2024-24806 Dominique Dumont <dod@debian.org> - 2024-03-03 16:00 +0100
    Bug#1063484: libuv1: CVE-2024-24806 Salvatore Bonaccorso <carnil@debian.org> - 2024-03-05 22:20 +0100
      Bug#1063484: libuv1: CVE-2024-24806 Dominique Dumont <dod@debian.org> - 2024-03-06 19:10 +0100

#1188919 — Bug#1063484: libuv1: CVE-2024-24806

FromDominique Dumont <dod@debian.org>
Date2024-03-03 16:00 +0100
SubjectBug#1063484: libuv1: CVE-2024-24806
Message-ID<IdVtM-e9PG-19@gated-at.bofh.it>
On Thu, 29 Feb 2024 21:53:07 +0100 Salvatore Bonaccorso <carnil@debian.org> 
wrote:
> libuv1 is as well affected in bullseye and it's still supported. Can
> you have a look as well at this version? 

The same patch (with a refresh) applies to bullseye. I can also prepare an 
upload.

All the best

[toc] | [next] | [standalone]


#1189202

FromSalvatore Bonaccorso <carnil@debian.org>
Date2024-03-05 22:20 +0100
Message-ID<IeKmB-eF5t-1@gated-at.bofh.it>
In reply to#1188919
Hi Dominique,

On Sun, Mar 03, 2024 at 03:51:28PM +0100, Dominique Dumont wrote:
> On Thu, 29 Feb 2024 21:53:07 +0100 Salvatore Bonaccorso <carnil@debian.org> 
> wrote:
> > libuv1 is as well affected in bullseye and it's still supported. Can
> > you have a look as well at this version? 
> 
> The same patch (with a refresh) applies to bullseye. I can also prepare an 
> upload.

The debdiff for bookworm-security looks good to me. Please do upload
to security-master (and make sure to build with -sa as the orig
tarball is not yet on security-master for 1.44.2).

So we just need as well the bullseye-security one, as per above, can
you prepare this one as well.

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]


#1189285

FromDominique Dumont <dod@debian.org>
Date2024-03-06 19:10 +0100
Message-ID<If3Sh-eR2O-5@gated-at.bofh.it>
In reply to#1189202

[Multipart message — attachments visible in raw view] — view raw

On Tuesday, 5 March 2024 22:15:50 CET Salvatore Bonaccorso wrote:
> The debdiff for bookworm-security looks good to me. Please do upload
> to security-master (and make sure to build with -sa as the orig
> tarball is not yet on security-master for 1.44.2).

Done.

> So we just need as well the bullseye-security one, as per above, can
> you prepare this one as well.

Done. Here's the debdiff in attachment

All the best

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web