GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Wed May 26, 2021 2:26 pm Post subject: [ glsa 202105-08 ] icu |
|
|
Gentoo Linux Security Advisory
Title: ICU: Multiple vulnerabilities (GLSA 202105-08)
Severity: low
Exploitable: local, remote
Date: 2021-05-26
Bug(s): #755704
ID: 202105-08
Synopsis
Multiple vulnerabilities have been found in ICU, the worst of which
could cause a Denial of Service condition.
Background
ICU is a mature, widely used set of C/C++ and Java libraries providing
Unicode and Globalization support for software applications.
Affected Packages
Package: dev-libs/icu
Vulnerable: < 68.2
Unaffected: >= 68.2
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in ICU. Please review the
upstream bugs referenced below for details.
Impact
Remote attackers could cause a Denial of Service condition or possibly
have other unspecified impacts via unspecified vectors.
Workaround
There is no known workaround at this time.
Resolution
All ICU users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/icu-68.2"
|
References
Chromium Change-Id Iad839ac77d487d5e1b396bcdbc29bc7cd58a7ef8
ICU-21383
ICU-21385 |
|