Ubuntu alert USN-8409-1 (uriparser)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8409-1] uriparser vulnerability
Date:
             
 
Wed, 10 Jun 2026 19:17:33 +0000
Message-ID:
             
 
<E1wXOQf-0003UL-W7@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8409-1
June 09, 2026

uriparser vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

uriparser could be made to crash if it received specially crafted
input.

Software Description:
- uriparser: Strictly RFC 3986 compliant URI parsing library

Details:

It was discovered that uriparser incorrectly handled certain URI strings.
An attacker could possibly use this issue to cause uriparser to crash,
resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  liburiparser1                   0.9.7+dfsg-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  liburiparser1                   0.9.6+dfsg-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  liburiparser1                   0.9.3-2ubuntu0.1~esm4
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  liburiparser1                   0.8.4-1+deb9u2ubuntu0.1+esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  liburiparser1                   0.8.4-1ubuntu0.16.04.1~esm5
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  liburiparser1                   0.7.5-1ubuntu2+esm5
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8409-1
  CVE-2025-67899


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=vh+j
-----END PGP SIGNATURE-----