Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Ubuntu 21.04, 20.04 LTS USN-5156-1 Critical: ICU Denial of Service

ubuntu
Calendar Grey November 24, 2021
Dist Ubuntu Esm H88
An important vulnerability affecting ICU has been resolved in Ubuntu distributions, eliminating potential crashes from malicious input. Updating is advised.
ICU could be made to crash if it received specially crafted input.

Summary

ICU could be made to crash if it received specially crafted

input.

Software Description:

- icu: International Components for Unicode library

Details:

It was discovered that ICU contains a double free issue.

An attacker could use this issue to cause a denial of service or

possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service update critical software patch Ubuntu ICU

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
icu-devtools 67.1-6ubuntu2.1
libicu-dev 67.1-6ubuntu2.1
libicu67 67.1-6ubuntu2.1

Ubuntu 20.04 LTS:
icu-devtools 66.1-2ubuntu2.1
libicu-dev 66.1-2ubuntu2.1
libicu66 66.1-2ubuntu2.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5156-1

CVE-2021-30535

Severity
critical
Lowest
Low
Medium
High
Critical

November 24, 2021

Topics%20covered

Topics Covered

security advisory denial of service update critical software patch Ubuntu ICU

Package Information

https://launchpad.net/ubuntu/+source/icu/67.1-6ubuntu2.1
https://launchpad.net/ubuntu/+source/icu/66.1-2ubuntu2.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.