USN-7356-1: uriparser vulnerabilities

USN-7356-1: uriparser vulnerabilities
19 March 2025

Several security issues were fixed in uriparser.

Releases
Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS Ubuntu 18.04 ESM Ubuntu 16.04 ESM Ubuntu 14.04 ESM

Packages
uriparser - Strictly RFC 3986 compliant URI parsing library

Details
It was discovered that uriparser did not correctly handle certain inputs,
which could lead to an integer overflow. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2024-34402, CVE-2024-34403)

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• liburiparser1 - 0.9.7+dfsg-2ubuntu0.1~esm1
  Ubuntu 22.04
  liburiparser1 - 0.9.6+dfsg-1ubuntu0.1~esm1
  Ubuntu 20.04
• liburiparser1 - 0.9.3-2ubuntu0.1~esm3
  Ubuntu 18.04
• liburiparser1 - 0.8.4-1+deb9u2ubuntu0.1+esm1
  Ubuntu 16.04
• liburiparser1 - 0.8.4-1ubuntu0.16.04.1~esm4
  Ubuntu 14.04
• liburiparser1 - 0.7.5-1ubuntu2+esm4
  In general, a standard system update will make all the necessary changes.