USN-3610-1: ICU vulnerability
It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libicu57to a version that resolves this vulnerability.Fixed in 57.1-6ubuntu0.3 - Upgrade
Upgrade
ubuntu/libicu55to a version that resolves this vulnerability.Fixed in 55.1-7ubuntu0.4 - Upgrade
Upgrade
ubuntu/libicu52to a version that resolves this vulnerability.Fixed in 52.1-3ubuntu0.8
Event History
Frequently Asked Questions
What is the vulnerability ID for this ICU vulnerability?
The vulnerability ID for this ICU vulnerability is USN-3610-1.
What is the severity of the ICU vulnerability?
The severity of the ICU vulnerability is not mentioned in the provided information.
How does the ICU vulnerability impact applications?
The ICU vulnerability can cause a denial of service if an application using ICU processes crafted data.
Which versions of Ubuntu are affected by the ICU vulnerability?
The versions of Ubuntu affected by the ICU vulnerability are 17.10, 16.04, and 14.04.
How can the ICU vulnerability be fixed?
The ICU vulnerability can be fixed by updating the libicuXX package to the recommended version mentioned in the provided information.