GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — vulnerability in libuv v1.46.0 · Issue #615 · MagicStack/uvloop

vulnerability in libuv v1.46.0 #615

New issue
Copy link
New issue
Copy link
Closed
Closed
vulnerability in libuv v1.46.0#615
Copy link

Description

@javaccar
javaccar
opened on Aug 13, 2024
Issue body actions
  • uvloop version: 0.19.0
  • Python version: 3.11
  • Platform: linux
  • Can you reproduce the bug with PYTHONASYNCIODEBUG in env?: n/a
  • Does uvloop behave differently from vanilla asyncio? How?: n/a

uvloop uses libuv v1.46.0, which has a security vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-24806
the vulnerability was fixed in libuv v1.48.0 but uvloop is still using v1.46.0.

Activity

  1. fantix commented on Aug 14, 2024

    @fantix
    fantix
    on Aug 14, 2024
    Member
    More actions

    #600 would fix this

  2. javaccar commented on Aug 15, 2024

    @javaccar
    javaccar
    on Aug 15, 2024
    Author
    More actions

    Thanks @fantix ! Appreciate the quick response. I see #600 was just merged. Plans to cut a release and publish to pypi?

  3. fantix commented on Aug 15, 2024

    @fantix
    fantix
    on Aug 15, 2024
    Member
    More actions

    No problem! Yes, I'll cut it tomorrow.

    Reacted by Jason Vaccaro
  4. fantix
    added a commit that references this issue on Aug 15, 2024

    uvloop 0.20.0

    2d35f10
  5. javaccar
    closed this as completedon Aug 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions
      You are visitor 01402503 — GeezerVison does not store the pages you look up.
      Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.