ALT-PU-2026-9339-1

Package update liburiparser in branch sisyphus_riscv64

Version1.0.2-alt1

Task#0

Published2026-05-27

Max severityMEDIUM

Severity:

Closed issues (2)

MEDIUM5.3

In uriparser before 1.0.2, there is pointer difference truncation to int in various places.

Published: 2026-05-08Modified: 2026-06-17

CVSS 3.xMEDIUM 5.3

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References

https://github.com/uriparser/uriparser/pull/304

MEDIUM5.3

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

Published: 2026-05-08Modified: 2026-06-17

CVSS 3.xMEDIUM 5.3

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References

https://github.com/uriparser/uriparser/pull/305