[USN-5172-1] uriparser vulnerabilities

========================================================================== Ubuntu Security Notice USN-5172-1 December 06, 2021
uriparser vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in uriparser.
Software Description: – uriparser: Strictly RFC 3986 compliant URI parsing library
Details:
It was discovered that uriparser mishandled certain input. An attacker could use this vulnerability to cause uriparser to crash or possibly execute arbitrary code. (CVE-2018-19198, CVE-2018-19199, CVE-2018-19200)
It was discovered that uriparser incorrectly handled certain URIs. An attacker could use this vulnerability to cause a crash or possibly leak sensitive information. (CVE-2018-20721)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04 LTS: liburiparser1 0.8.4-1+deb9u2build0.18.04.1
In general, a standard system update will make all the necessary changes.
References: ubuntu.com/security/notices/USN-5172-1 CVE-2018-19198, CVE-2018-19199, CVE-2018-19200, CVE-2018-20721
Package Information: launchpad.net/ubuntu/+source/uriparser/0.8.4-1+deb9u2build0.18.04.1