Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 43: uriparser Important Unbounded Recursion Fix CVE-2025-67899

fedora
Calendar Grey December 20, 2025
Dist Fedora Esm H88
Fixes critical unbounded recursion issue in uriparser for Fedora 43, enhancing security against stack consumption risk.
Update to uriparser-1.0.0, fixes CVE-2025-67899.

Summary

Uriparser is a strictly RFC 3986 compliant URI parsing library written

in C. uriparser is cross-platform, fast, supports Unicode and is

licensed under the New BSD license.

Update Information:

Update to uriparser-1.0.0, fixes CVE-2025-67899.

Topics%20covered

Topics Covered

security advisory fedora important unbounded recursion stack consumption uriparser

Change Log

* Mon Dec 15 2025 Sandro Mani - 1.0.0-1 - Update to 1.0.0

References


[ 1 ] Bug #2423026 - CVE-2025-67899 uriparser: uriparser: Unbounded recursion and stack consumption via large input [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2423026 [ 2 ] Bug #2423027 - CVE-2025-67899 uriparser: uriparser: Unbounded recursion and stack consumption via large input [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2423027

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5c12420f33' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: uriparser
Product: Fedora 43
Version: 1.0.0
Release: 1.fc43
URL: https://uriparser.github.io/
Summary: URI parsing library - RFC 3986

Topics%20covered

Topics Covered

security advisory fedora important unbounded recursion stack consumption uriparser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here