diff --git a/libuv-v1.47.0.tar.gz b/libuv-v1.47.0.tar.gz deleted file mode 100644 index afe5853..0000000 --- a/libuv-v1.47.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:20c37a4ca77a2107879473c6c8fa0dc1350e80045df98bfbe78f7cd6d7dd2965 -size 1304259 diff --git a/libuv-v1.47.0.tar.gz.sign b/libuv-v1.47.0.tar.gz.sign deleted file mode 100644 index f73cd6a..0000000 --- a/libuv-v1.47.0.tar.gz.sign +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEEz7ucqaW+r9cOKzxaeaZ8VaNnnIsFAmVJLkMACgkQeaZ8VaNn -nIulpw/+PDclC7vdL8iYxgPIcUrkktfeg2bNLreuh8X18vl+9pkm6L2pyHD5oczm -SOuH7l5XWSWUU9TcFH57TMb79e4PQLGQ66+8jNkNb9GDHu4ccKi0Zbke5MXscUsZ -EaG4pjpIOcmE0UopVpIh0qfAli3pO31xJzymAh0/Wz8bWwQ415VEpkAJ+N9a1bWa -Lztf0VfKNjoT5omSuxJ0xwfbc8msDnivY9fKbaHOWLeUkZ7sZ9CBbVAixCfEvGil -81imUmKpNVHjMw1+k0Z7Fw2VrFi7sPh1uOVUuKGImN7ga/tfZscLLNtH+oE3JjIw -Kg2qQDM4VU620SsXYywLZEOsuavzadbOK/2PqBNYVsZ1YOToAItaaNaXmLCVEUla -7t4Dq9W+aR7dtsgcvbS8hEc7goBvMYYLJ6h+Lf/YCTlkDxaKciDGxTEmGsPikbxk -kVjAmW6y1LHiHMw8Ob4DKuv+RMo5oH12ouN8SdSlV8xKyM+Toysv/bwynsC+92Xv -3M0EcVbj32c/9At8xfi1eRFXDPNC3Tu6ibh4qch0Jm9sgJIrzEEKmgR+f+uqAg07 -gHVCQMma+Sch+6sUt8/sM1+2r+Epol0/6L5hsstrnLiUVGIyrTawzq6VJFXmc7vA -pxEgUBl/ff2tRS/RlqSNb5YIbIRo0hccuG0qepgMCeahl/UVS/k= -=URgL ------END PGP SIGNATURE----- diff --git a/libuv-v1.48.0.tar.gz b/libuv-v1.48.0.tar.gz new file mode 100644 index 0000000..da1b651 --- /dev/null +++ b/libuv-v1.48.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7f1db8ac368d89d1baf163bac1ea5fe5120697a73910c8ae6b2fffb3551d59fb +size 1314877 diff --git a/libuv-v1.48.0.tar.gz.sign b/libuv-v1.48.0.tar.gz.sign new file mode 100644 index 0000000..b7a1bcd --- /dev/null +++ b/libuv-v1.48.0.tar.gz.sign @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEYS8OrZQBYiN530QC8ow8jaM8A74FAmXD5iAACgkQ8ow8jaM8 +A77Erw/+KSsWKi47qakBDtkjOsUY/PmvX9nPQn1wHvwABWSx/8vNkAjcENbAkEuX +U4gM2kqjyoe12tRhvVwriHYbRgIAkjkcRPYM1eAib7RT47fm7nGD3pPFoTylQCxH +sk+cJuWKTvEXqzDaUKG9nTx3WXU869Tq4T35a8PD7qTqfKnWIRI/xalyPd4b7RUT +/CURuvLrNH2UDwNFk7qF+So07TfABWbqNzdACV4+N+RyyJdy7/ct6LYIwy+ltwB/ +1R0dGkGyaMN0YFB/5rMLKH5Qy0dHjGV+MOmnEGp/JhPLvJGSHZZr8FXs8q+VUgrB +PogI74wWul83mRCFE0JDGPNeuDvDqUPKxcH1OhjVlkC/gwslHgQgui0fz+TKJSHj +dTXZu+R8rYULn+wgPCR3ND2xTayFS/AQejmLHPk9dfAGGlZGJOjw8IIMh70tts6V +hX3dGybLvKFOGFKZzx1TSJQOB3+tkkjgFPVzDRXm50w5YS2IH7sWoP2KUa4XmdMG +ymknB6PE5zhP/HfsfOL5vAcpCYkRb19YvActbfC8/kV+/Rid4r1jIC86HhuzFXYf +oCBTKQ5xN7SphhGNMOYPoYKCV8ttHYsuOVs9ZkV9OCTfMVJOy1o8/31YP27G4SDi +KrfPD/q1jP1g6qV5NQBDbuzDBgKWGr+YwjPmPR6f3QK4oB0TnLU= +=6mql +-----END PGP SIGNATURE----- diff --git a/libuv.changes b/libuv.changes index 78ed7db..7167920 100644 --- a/libuv.changes +++ b/libuv.changes @@ -1,3 +1,56 @@ +------------------------------------------------------------------- +Thu Mar 14 02:46:20 UTC 2024 - jun wang + +- Update to version 1..48.0 + * CVE-2024-24806: Improper Domain Lookup that potentially leads + to SSRF attacks (bsc#1219724) + * misc: remove deprecated stalebot file + * misc: ignore libuv-release-tool files + * build,win: remove extraneous -lshell32 + * build,win: work around missing uuid.dll on MinGW + * build: disable windows asan buildbot + * build: add .cache clangd folder to .gitignore + * build: re-enable msvc-asan job on CI + * linux: disable io_uring on hppa below kernel 6.1.51 + * linux: remove HAVE_IFADDRS_H macro + * linux: fix bind/connect for abstract sockets + * linux: retry fs op if unsupported by io_uring + * linux: disable io_uring on ppc64 and ppc64le + * unix,win: utility for setting priority for thread + * unix,win: fix read past end of pipe name buffer + * unix,win: fix busy loop with zero timeout timers + * unix,win: reset the timer queue on stop + * unix: ignore ifaddrs with NULL ifa_addr + * unix: unbreak macOS < 10.14 + * unix: correct pwritev conditional + * unix: support full TCP keep-alive on Solaris + * unix: optimize uv__tcp_keepalive cpp directives + * freebsd: fix F_KINFO file path handling + * freebsd: fix build on non-intel archs + * aix: disable ipv6 link local + * aix,ibmi: use uv_interface_addresses instead of getifaddrs + * win: remove check for UV_PIPE_NO_TRUNCATE + * win: honor NoDefaultCurrentDirectoryInExePath env var + * win: stop using deprecated names + * win: replace c99 comments with c89 comments + * win: fix ESRCH implementation + * win/spawn: optionally run executable paths with no file + extension + * test: don't run tcp_writealot under msan + * test: check if ipv6 link-local traffic is routable + * test: skip tcp-write-in-a-row on IBM i + * test: empty strings are not valid IDNA + * test_fs.c: Fix issue on 32-bit systems using btrfs + * idna: fix compilation warning + * pipe: add back error handling to connect / bind + * fix: always zero-terminate idna output + * fix: reject zero-length idna inputs + * doc: move cjihrig to emeriti + * doc: add very basic Security Policy document + * Merge pull request from GHSA-f74f-cvh7-c6q6 +- Remove ppc64-disable-liburing.patch because it was applied + in the current source code + ------------------------------------------------------------------- Mon Jan 15 07:45:35 UTC 2024 - Dirk Müller diff --git a/libuv.spec b/libuv.spec index 0d36cbd..96aabcd 100644 --- a/libuv.spec +++ b/libuv.spec @@ -18,7 +18,7 @@ %define somajor 1 Name: libuv -Version: 1.47.0 +Version: 1.48.0 Release: 0 Summary: Asychronous I/O support library License: MIT @@ -29,8 +29,6 @@ Source1: https://dist.libuv.org/dist/v%{version}/libuv-v%{version}.tar.gz Source2: %{name}.keyring Source3: baselibs.conf Patch1: fix_tests.patch -# PATCH-FIX-UPSTREAM: gh#libuv/libuv#4285 -Patch2: ppc64-disable-liburing.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool diff --git a/ppc64-disable-liburing.patch b/ppc64-disable-liburing.patch deleted file mode 100644 index d090d7e..0000000 --- a/ppc64-disable-liburing.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 08f4fb449048e22be034b26fa41fb0723189f2b8 Mon Sep 17 00:00:00 2001 -From: Brad King -Date: Fri, 12 Jan 2024 15:02:22 -0500 -Subject: [PATCH] linux: disable io_uring on ppc64 and ppc64le - -Since `io_uring` support was added, libuv's signal handler randomly -segfaults on ppc64 when interrupting `epoll_pwait`. Disable it -pending further investigation. - -Issue: https://github.com/libuv/libuv/issues/4283 ---- - src/unix/linux.c | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/src/unix/linux.c b/src/unix/linux.c -index 3c1313e7efc..4164e90dbb0 100644 ---- a/src/unix/linux.c -+++ b/src/unix/linux.c -@@ -463,6 +463,9 @@ static int uv__use_io_uring(void) { - #elif defined(__arm__) && __SIZEOF_POINTER__ == 4 - /* See https://github.com/libuv/libuv/issues/4158. */ - return 0; /* All 32 bits kernels appear buggy. */ -+#elif defined(__powerpc64__) || defined(__ppc64__) -+ /* See https://github.com/libuv/libuv/issues/4283. */ -+ return 0; /* Random SIGSEGV in signal handler. */ - #else - /* Ternary: unknown=0, yes=1, no=-1 */ - static _Atomic int use_io_uring;