Debian: DSA-5638-1: libuv1 security update

It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may result in bypass of security measures on internal APIs or SSRF attacks.

apis asynchronous attacks bypass debian dsa event function internal library may notification result security security measures security update ssrf truncated update