Debian alert DLA-2883-2 (uriparser)

From:
             
 
Chris Lamb <lamby@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2883-2] uriparser security update
Date:
             
 
Wed, 26 Jan 2022 12:15:37 -0500
Message-ID:
             
 
<164321731101.293061.18273606503338834873@copycat>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2883-2                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                           Chris Lamb
January 26, 2022                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : uriparser
Version        : 0.8.4-1+deb9u4
CVE ID         : CVE-2021-46141

It was discovered that the fix for CVE-2021-46141 released in
uriparser version 0.8.4-1+deb9u3 was incomplete.

We therefore recommend that you upgrade your uriparser packages to
version 0.8.4-1+deb9u4.

For the detailed security status of uriparser please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/uriparser

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmHxgZ0ACgkQHpU+J9Qx
HljWmhAAtHyNsRshK0IrEvTVmEPP+JrzVQpnbH9Tjpj9QL/NYD0+yZyZdI21tE/X
pfJWBrpexTw4ccq6fPiJsZQaCRBPf9OQU7zGtv6szTr0WBOKncxSf2jHuH53VJgt
gOb9bFypnvTIzXx08lzwB+6S5E92FQFkO4Xs/Zcriwrke7Z5d78TqTjqoEIXdXVD
jSP4s4G/w38jbEYyXhCCaCMpwUmmwwWyvhG+1bHdKW8eUWWA712idtTz/VyNNLDU
7jC66dPrk3ZyeEA5WkEZH2SNZXhpW4TYtYqXIq7lC89+yh2aTHynKd/At0RtcXaL
BxMjgg3IqNn5e6sC4rP+lKzHzQV8vTmS1SZquA1XfpmE71aTWgoMphuWzuupjr+y
acTTCA4UBrJfYUvzDwbK2cU3X5JtjXqq1hgDbf8ncLUUb6J5AJYgN2NW8PKRqx5Z
qUSZZwwJqIvxWBN2luDmtRfRImsoPuOEiHZe4q57pKn1vyqff7XneqD8i/sAIu+v
XHfBmxF6uEuDagxMWmENZ2hdhMIYsLH5CKSBbPjI/xWeZM1NpM4xz/z+bCkVztZ2
ZFc7/oWeR6cWJFaqZPzPJHzulncnaAZ3rAb//j1zre76Gi5ElM7Td2PrOooQvMAj
FdEXAkxST3fqdyiMei8TEOUcB7U7b7Ub8CfdbDUTT/+2nRKeyfA=
=JajQ
-----END PGP SIGNATURE-----