DSA-4646: -1 icu -- security update

Published Mar 25, 2020

Updated

Andre Bargull discovered an integer overflow in the International Components for Unicode (ICU) library which could result in denial of service and potentially the execution of arbitrary code.

Affected Software

2 affected components

debian/icu

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade icu to a version that resolves this vulnerability.
Patch DSA-4646-1

Event History

Mar 25, 2020

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-10531

Frequently Asked Questions

What could an attacker achieve by exploiting this issue?

The integer overflow could cause a denial of service and may potentially allow arbitrary code execution.

Which software should be prioritized for review?

Systems using the Debian ICU package should be reviewed, as the advisory identifies debian/icu as the affected software.