[ubuntu/groovy-proposed] libuv1 1.38.0-2ubuntu2 (Accepted)

Leonidas S. Barbosa leo.barbosa at canonical.com
Mon Sep 28 15:05:11 UTC 2020


libuv1 (1.38.0-2ubuntu2) groovy; urgency=medium

  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2020-8252.patch: fix buffer overruns when
      processing very long paths in uv_fs_readlink() in src/unix/internal.h.
    - CVE-2020-8252

Date: Fri, 25 Sep 2020 10:39:29 -0300
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libuv1/1.38.0-2ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2020 10:39:29 -0300
Source: libuv1
Architecture: source
Version: 1.38.0-2ubuntu2
Distribution: groovy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Leonidas S. Barbosa <leo.barbosa at canonical.com>
Changes:
 libuv1 (1.38.0-2ubuntu2) groovy; urgency=medium
 .
   * SECURITY UPDATE: Buffer overflow
     - debian/patches/CVE-2020-8252.patch: fix buffer overruns when
       processing very long paths in uv_fs_readlink() in src/unix/internal.h.
     - CVE-2020-8252
Checksums-Sha1:
 484becabc88b9fd962fdc50f3b705ec4739ad519 2104 libuv1_1.38.0-2ubuntu2.dsc
 116f3824ccad24ac2e810ae514b1cd197f40013e 23264 libuv1_1.38.0-2ubuntu2.debian.tar.xz
 bc7ca19e85d626610b84fd39df7bac93810a19ba 7545 libuv1_1.38.0-2ubuntu2_source.buildinfo
Checksums-Sha256:
 8440df48c782a6468f38caf83ca6bc0c36e13021b445ebf14ed0a44a2ac1e64e 2104 libuv1_1.38.0-2ubuntu2.dsc
 ee3a5cb037300ad4eed68ed9f8c48291fd7ee4cf207c23e4c6b8033f0688d053 23264 libuv1_1.38.0-2ubuntu2.debian.tar.xz
 1f7709902f3591a09fd4cd7304aea93510f4b6f7b6b050374521548da108d7e4 7545 libuv1_1.38.0-2ubuntu2_source.buildinfo
Files:
 6890fbdb6723bc12a8c54b03e78b6730 2104 libs optional libuv1_1.38.0-2ubuntu2.dsc
 6412e44860974415bf4071c1891598a7 23264 libs optional libuv1_1.38.0-2ubuntu2.debian.tar.xz
 c03325003a0a063d7969a11b1bf07f6b 7545 libs optional libuv1_1.38.0-2ubuntu2_source.buildinfo
Original-Maintainer: Dominique Dumont <dod at debian.org>

-----BEGIN PGP SIGNATURE-----
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=fGD9
-----END PGP SIGNATURE-----


More information about the Groovy-changes mailing list