openSUSE-SU-2019:0171-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:0171-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2019:0171-1

Related

Published

2019-02-13T17:02:43Z

Modified

2019-02-13T17:02:43Z

Summary

Security update for uriparser

Details

This update for uriparser fixes the following issues:

Security issues fixed:

CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address (bsc#1122193).
CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery* or uriComposeQueryEx* function (bsc#1115722).
CVE-2018-19199: Fixed an integer overflow caused by an unchecked multiplication via the uriComposeQuery* or uriComposeQueryEx* function (bsc#1115723).
CVE-2018-19200: Fixed a operation attempted on NULL input via a uriResetUri* function (bsc#1115724).

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project.

References

Affected packages

SUSE:Package Hub 15 / uriparser

Package

Name: uriparser
Purl: pkg:rpm/suse/uriparser&distro=SUSE%20Package%20Hub%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.5-bp150.2.3.1

Ecosystem specific

{
    "binaries": [
        {
            "liburiparser1": "0.8.5-bp150.2.3.1",
            "liburiparser1-64bit": "0.8.5-bp150.2.3.1",
            "uriparser-devel": "0.8.5-bp150.2.3.1",
            "uriparser": "0.8.5-bp150.2.3.1"
        }
    ]
}