[libuv][ANN] libuv 0.10.34 released with a security fix

108 views
Skip to first unread message

Saúl Ibarra Corretgé

unread,
Feb 24, 2015, 5:04:13 AM2/24/15
to li...@googlegroups.com
Hi all,

libuv version 0.10.34 has been released and is available
for immediate download.

The changelog is quite small so I'll inline it here:

* unix: add atomic-ops.h
* unix: fix for uv_async data race
* unix: call setgoups before calling setuid/setgid (CVE-2015-0278)

Users are encouraged to upgrade since this release contains a security
fix for CVE-2015-0278. v1.x versions are not affected since they contain
the fix already.

Download:

http://dist.libuv.org/dist/v0.10.34/

--
Saúl Ibarra Corretgé
bettercallsaghul.com


signature.asc
Reply all
Reply to author
Forward
0 new messages