[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <ZckpS1D7bfqyJeq4@eldamar.lan>
Date: Sun, 11 Feb 2024 21:08:43 +0100
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: libuv 1.48.0 released, fixes CVE-2024-24806
Hi,
On Thu, Feb 08, 2024 at 12:15:23PM -0800, Alan Coopersmith wrote:
> https://github.com/libuv/libuv/releases/tag/v1.48.0 shows the release
> yesterday of stable release 1.48.0, including a fix for CVE-2024-24806.
>
> https://github.com/libuv/libuv/security/advisories/GHSA-f74f-cvh7-c6q6
> offers this information about that CVE:
>
> > Affected versions: > 1.45.x
> > Patched versions: v1.48.0
For completeness: The range of affected version in the above was
rectified after contacting upstream:
https://github.com/libuv/libuv/commit/6dd44caa35b4697d7e8c1b9fa0ba8e95d73355de
did introduce the support, which is in v1.24.0.
Regards,
Salvatore
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
