=========================================================================Ubuntu Security Notice USN-5156-1
November 24, 2021

A security issue was fixed in ICU
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 21.04
- Ubuntu 20.04 LTS

Summary:

ICU could be made to crash if it received specially crafted
input.

Software Description:
- icu: International Components for Unicode library

Details:

It was discovered that ICU contains a double free issue.
An attacker could use this issue to cause a denial of service or 
possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
icu-devtools 67.1-6ubuntu2.1
libicu-dev 67.1-6ubuntu2.1
libicu67 67.1-6ubuntu2.1

Ubuntu 20.04 LTS:
icu-devtools 66.1-2ubuntu2.1
libicu-dev 66.1-2ubuntu2.1
libicu66 66.1-2ubuntu2.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-5156-1
CVE-2021-30535

Package Information:
https://launchpad.net/ubuntu/+source/icu/67.1-6ubuntu2.1
https://launchpad.net/ubuntu/+source/icu/66.1-2ubuntu2.1

Ubuntu 5156-1: ICU vulnerability

November 24, 2021
ICU could be made to crash if it received specially crafted input.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 21.04: icu-devtools 67.1-6ubuntu2.1 libicu-dev 67.1-6ubuntu2.1 libicu67 67.1-6ubuntu2.1 Ubuntu 20.04 LTS: icu-devtools 66.1-2ubuntu2.1 libicu-dev 66.1-2ubuntu2.1 libicu66 66.1-2ubuntu2.1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5156-1

CVE-2021-30535

Severity
November 24, 2021

Package Information

https://launchpad.net/ubuntu/+source/icu/67.1-6ubuntu2.1 https://launchpad.net/ubuntu/+source/icu/66.1-2ubuntu2.1

Related News