AZL-35886 CVE-2024-22017 affecting package libuv for versions less than 1.48.0-1
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...