On Thu, 08 Feb 2024 20:51:30 +0100 Salvatore Bonaccorso <car...@debian.org>
wrote:
> Note, that the advisory at [1] mentions that affected versions are
> only > 1.45.x. Looking at the git changes, is it not introduced after
> 6dd44caa35b4 ("unix,win: support IDNA 2008 in uv_getaddrinfo()") in
> v1.24.0?
The advisory has been changed and list v1.24.0 as affected version.
I'm going to pacakge v1.48 to fix this issue in unstable.
I'm still pondering what should be done for stable which ships a libuv 1.44.2
All the best
