Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.rc > #356357
| From | Dominique Dumont <dod@debian.org> |
|---|---|
| Newsgroups | linux.debian.bugs.rc |
| Subject | Bug#1063484: libuv1: CVE-2024-24806 |
| Date | 2024-02-14 13:10 +0100 |
| Message-ID | <I7mfn-a5QJ-9@gated-at.bofh.it> (permalink) |
| References | <I5iIV-8NST-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Thu, 08 Feb 2024 20:51:30 +0100 Salvatore Bonaccorso <carnil@debian.org>
wrote:
> Note, that the advisory at [1] mentions that affected versions are
> only > 1.45.x. Looking at the git changes, is it not introduced after
> 6dd44caa35b4 ("unix,win: support IDNA 2008 in uv_getaddrinfo()") in
> v1.24.0?
The advisory has been changed and list v1.24.0 as affected version.
I'm going to pacakge v1.48 to fix this issue in unstable.
I'm still pondering what should be done for stable which ships a libuv 1.44.2
All the best
Back to linux.debian.bugs.rc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1063484: libuv1: CVE-2024-24806 Salvatore Bonaccorso <carnil@debian.org> - 2024-02-08 21:00 +0100
Bug#1063484: libuv1: CVE-2024-24806 Dominique Dumont <dod@debian.org> - 2024-02-14 13:10 +0100
Bug#1063484: libuv1: CVE-2024-24806 Dominique Dumont <dod@debian.org> - 2024-02-20 19:20 +0100
Bug#1063484: libuv1: CVE-2024-24806 Salvatore Bonaccorso <carnil@debian.org> - 2024-02-29 22:00 +0100
Bug#1063484: marked as done (libuv1: CVE-2024-24806) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-02-19 09:00 +0100
Bug#1063484: libuv1: CVE-2024-24806 Salvatore Bonaccorso <carnil@debian.org> - 2024-03-06 21:10 +0100
Bug#1063484: libuv1: CVE-2024-24806 Salvatore Bonaccorso <carnil@debian.org> - 2024-03-10 15:00 +0100
Bug#1063484: marked as done (libuv1: CVE-2024-24806) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-03-17 18:10 +0100
Bug#1063484: marked as done (libuv1: CVE-2024-24806) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-03-18 23:10 +0100
csiph-web