[USN-6666-1] libuv vulnerability

-----BEGIN PGP SIGNATURE-----
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=HvPX
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6666-1
February 28, 2024

libuv1 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

libuv could be made to truncate certain hostnames.

Software Description:
- libuv1: asynchronous event notification library

Details:

It was discovered that libuv incorrectly truncated certain hostnames. A
remote attacker could possibly use this issue with specially crafted
hostnames to bypass certain checks.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
libuv1 1.44.2-1ubuntu0.1

Ubuntu 22.04 LTS:
libuv1 1.43.0-1ubuntu0.1

Ubuntu 20.04 LTS:
libuv1 1.34.2-1ubuntu1.5

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6666-1
CVE-2024-24806

Package Information:
https://launchpad.net/ubuntu/+source/libuv1/1.44.2-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libuv1/1.43.0-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libuv1/1.34.2-1ubuntu1.5