—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA512<\/p>\n
– ————————————————————————-
\nDebian Security Advisory DSA-5638-1 security@debian.org
\nhttps:\/\/www.debian.org\/security\/ Salvatore Bonaccorso
\nMarch 10, 2024 https:\/\/www.debian.org\/security\/faq
\n– ————————————————————————-<\/p>\n
Package : libuv1
\nCVE ID : CVE-2024-24806
\nDebian Bug : 1063484<\/p>\n
It was discovered that the uv_getaddrinfo() function in libuv, an
\nasynchronous event notification library, incorrectly truncated certain
\nhostnames, which may result in bypass of security measures on internal
\nAPIs or SSRF attacks.<\/p>\n
For the oldstable distribution (bullseye), this problem has been fixed
\nin version 1.40.0-2+deb11u1.<\/p>\n
For the stable distribution (bookworm), this problem has been fixed in
\nversion 1.44.2-1+deb12u1.<\/p>\n
We recommend that you upgrade your libuv1 packages.<\/p>\n
For the detailed security status of libuv1 please refer to
\nits security tracker page at:
\nhttps:\/\/security-tracker.debian.org\/tracker\/libuv1<\/p>\n
Further information about Debian Security Advisories, how to apply
\nthese updates to your system and frequently asked questions can be
\nfound at: https:\/\/www.debian.org\/security\/<\/p>\n
Mailing list: debian-security-announce@lists.debian.org
\n—–BEGIN PGP SIGNATURE—–<\/p>\n
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmXtrrFfFIAAAAAALgAo
\naXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
\nNDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
\nz0TOBw\/\/UDY7qqzhavYjzvVxQ6ka9PGfBLJcRXhMjpwH5JxR6T0KOqCQkasoXCxm
\nNTSzczr0zrtU4Hdtv6tb\/E5QfemTpdEfMOtuuKxhQ3jrQNjnqtfDD5ouomrckxMc
\nPtB3SsJ0e1BV97ORDEqrym39VQTIaVgxdZwXU5\/mcqaboZx8uxv8XjaDURhAU1eY
\nz5PDno6bTg\/zL7bSSugTnxSPHwokv4FICxaG8rR6y6drbI7hndsx+LL+sXs426O8
\nxDzro+deanl3i9kdXxQujhTxJA+7vUTeaCl8rLFs7kOyNxDbCVADYc+Cc0h8Z0xn
\nv\/xNDYkIMprGcUx2QgW9mwfDgKGxDVtltPwb6oIBsKzrYBF\/gVUqM5aym3VquS8n
\n+lL7+uA0ZHKMxeQRrCtHCIoDUAhjVarQPqbxIX92tftSIRHU7e8Qfmyo7PdbPs9U
\nC4zUUwIwQ6UtRR8OWIKE8IFa+BRxL2\/3KCDjDvpK60VUfanRqdF7zcvifFQMw9mq
\nJ\/s\/IIY6Unhvk9\/6QSKrNiaLnFBOVBZ4E4A5OU6W1KAKvixlH8bmv0XCgrlDr2fx
\n\/7+Xn8wNA86qPAd9\/t6DAVzyjdlis+P6LYzAfrAguWQQS0xkDW+5OQqV3wyKvK1m
\n9PRJK4vfmiX5kw+VclGbJM4ToaKOLbSlns\/QNhHuRw2RDem0\/+s=
\n=ai3N
\n—–END PGP SIGNATURE—–<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 – ————————————————————————- Debian Security Advisory DSA-5638-1 security@debian.org https:\/\/www.debian.org\/security\/ Salvatore Bonaccorso March 10, 2024 https:\/\/www.debian.org\/security\/faq – ————————————————————————- Package : libuv1 CVE ID : CVE-2024-24806 Debian Bug : 1063484 It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-55284","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/55284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=55284"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/55284\/revisions"}],"predecessor-version":[{"id":55308,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/55284\/revisions\/55308"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=55284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=55284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=55284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}