libuv1 (1.43.0-1ubuntu0.1) jammy-security; urgency=medium
* SECURITY UPDATE: hostname restriction bypass via truncation
- debian/patches/CVE-2024-24806-1.patch: always zero-terminate idna
output in src/idna.c, test/test-idna.c.
- debian/patches/CVE-2024-24806-2.patch: reject zero-length idna inputs
in src/idna.c, test/test-idna.c.
- debian/patches/CVE-2024-24806-3.patch: empty strings are not valid
IDNA in test/test-idna.c.
- CVE-2024-24806
-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 14 Feb 2024 12:38:02 -0500
libuv1 (1.43.0-1) unstable; urgency=medium
* new upstream version
* control:
* declare compliance with policy 4.6.0
* remove conflicts on ancient libuv0.10-dev package
* update copyright with cme
* do not install cmake files
* update symbols file
* README.source.org: add quilt pop -a instruction
-- Dominique Dumont <dod@debian.org> Sat, 15 Jan 2022 18:15:17 +0100
libuv1 (1.42.0-1) unstable; urgency=medium
* new upstream version
* update fill.copyright.blanks
* update copyright with cme
* removed patch for CVE (applied upstream)
* refresh patch
* control:
* declare compliance with policy 4.5.1
* use debhelper 13
* set Rules-Requires-Root to no
* watch: watch github and use v4
* rules: remove obsolete dbgsym-migration instructions
* update symbols file
* converted README.source to org-mode
-- Dominique Dumont <dod@debian.org> Sat, 11 Sep 2021 18:50:00 +0200
libuv1 (1.40.0-2) unstable; urgency=medium
* add patch for CVE-2021-22918 (Closes: #990561)
-- Dominique Dumont <dod@debian.org> Sun, 04 Jul 2021 09:43:38 +0200
libuv1 (1.40.0-1) unstable; urgency=medium
* new upstream version
* update copyright with cme
* refreshed patch
* update symbol file
-- Dominique Dumont <dod@debian.org> Sat, 31 Oct 2020 18:43:46 +0100
libuv1 (1.39.0-1) unstable; urgency=medium
* new upstream version
* update copyright with cme
* refreshed patch
* update symbol file
-- Dominique Dumont <dod@debian.org> Sun, 13 Sep 2020 17:27:18 +0200
libuv1 (1.38.0-3) unstable; urgency=medium
* rules: increase timeout of time sensitive tests for all arch
-- Dominique Dumont <dod@debian.org> Sun, 28 Jun 2020 15:27:10 +0200
libuv1 (1.38.0-2) unstable; urgency=medium
* use cmake instead of autotools to build libuv.
As a consequence:
* control: add cmake build dep
* archive lib is now libuv_a.a
* remove all internal symbols from symbol file
* rules is updated to not run tests in parallel
* remove autopkgtest (Closes: 961878)
-- Dominique Dumont <dod@debian.org> Wed, 10 Jun 2020 19:18:03 +0200
libuv1 (1.38.0-1) unstable; urgency=medium
* new upstream version
* fill.copyright.blanks: add override for files under m4/
* refreshed copyright with cme
* refreshed patches
* update symbols
* rules: increase test timeout for sparc64
-- Dominique Dumont <dod@debian.org> Fri, 22 May 2020 18:55:41 +0200
libuv1 (1.35.0-2) unstable; urgency=medium
* rules: fix increased timeout of time sensitive tests
-- Dominique Dumont <dod@debian.org> Thu, 16 Apr 2020 10:49:47 +0200
# For older changelog entries, run 'apt-get changelog libuv1'
Generated by dwww version 1.14 on Sat Aug 30 17:19:21 CEST 2025.