Format: 1.8
Date: Wed, 14 Feb 2024 12:38:47 -0500
Source: libuv1
Binary: libuv1 libuv1-dev
Architecture: arm64
Version: 1.34.2-1ubuntu1.5
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-033.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libuv1     - asynchronous event notification library - runtime library
 libuv1-dev - asynchronous event notification library - development files
Changes:
 libuv1 (1.34.2-1ubuntu1.5) focal-security; urgency=medium
 .
   * SECURITY UPDATE: hostname restriction bypass via truncation
     - debian/patches/CVE-2024-24806-1.patch: always zero-terminate idna
       output in src/idna.c, test/test-idna.c.
     - debian/patches/CVE-2024-24806-2.patch: reject zero-length idna inputs
       in src/idna.c, test/test-idna.c.
     - debian/patches/CVE-2024-24806-3.patch: empty strings are not valid
       IDNA in test/test-idna.c.
     - CVE-2024-24806
   * debian/patches/riscv64-skip-tcp-timeout.patch: skip unstable test on
     riscv64 that keeps causing a FTBFS.
Checksums-Sha1:
 998f891e826351d034c3b3ba27ed67aadb7b3d4a 204200 libuv1-dbgsym_1.34.2-1ubuntu1.5_arm64.ddeb
 cb896753d1875d830c576306b06d4d0cbabe9c82 98992 libuv1-dev_1.34.2-1ubuntu1.5_arm64.deb
 384ee53550739baa06b8f7864702fe3052a39291 5837 libuv1_1.34.2-1ubuntu1.5_arm64.buildinfo
 c3dcd0b44aaf875c1773046e8d52462736a374b9 74968 libuv1_1.34.2-1ubuntu1.5_arm64.deb
Checksums-Sha256:
 2b6598140fdf51f8d5838a03b98406638d95eeeb6b8eb4bf684048520386032a 204200 libuv1-dbgsym_1.34.2-1ubuntu1.5_arm64.ddeb
 d91b426d1c8fc57fe4fdd96ada4d554d78b812bdc3588c3ff633840d115536c1 98992 libuv1-dev_1.34.2-1ubuntu1.5_arm64.deb
 bcf03bc9a52e9f74e2a314732a0234690267c3183cb4e3a90b2111d4936b41b7 5837 libuv1_1.34.2-1ubuntu1.5_arm64.buildinfo
 2c2e3ce80b9cea25b00c7d8a7462af8be34f1ee4376b80a87bd5ba623f18c96a 74968 libuv1_1.34.2-1ubuntu1.5_arm64.deb
Files:
 513ec1ccaeb29a853c3295e54a2951aa 204200 debug optional libuv1-dbgsym_1.34.2-1ubuntu1.5_arm64.ddeb
 f6741a2ce24ca2e45b49868ad3bf2e14 98992 libdevel optional libuv1-dev_1.34.2-1ubuntu1.5_arm64.deb
 fba6417fc0e8f6db54ad1a2e6d6b36c4 5837 libs optional libuv1_1.34.2-1ubuntu1.5_arm64.buildinfo
 2523e5f247f5572ef685a2c59e11d3ce 74968 libs optional libuv1_1.34.2-1ubuntu1.5_arm64.deb
Original-Maintainer: Dominique Dumont <dod@debian.org>