There are 2 open security issues in bookworm.
2 issues left for the package maintainer to handle:
- CVE-2024-34402:
(needs triaging)
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.
- CVE-2024-34403:
(needs triaging)
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
You can find information about how to handle these issues in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/u/uriparser.png){kind=link}