Lucene search

DebianDEBIAN:DLA-2784-1:29D8D

HistoryOct 12, 2021 - 10:39 a.m.

[SECURITY] [DLA 2784-1] icu security update

2021-10-1210:39:23

lists.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

Debian LTS Advisory DLA-2784-1 [email protected]
https://www.debian.org/lts/security/ Chris Lamb
October 12, 2021 https://wiki.debian.org/LTS

Package : icu
Version : 57.1-6+deb9u5
CVE ID : CVE-2020-21913

It was discovered that there was a potential use-after-free
vulnerability in icu, a library which provides Unicode and locale
functionality.

For Debian 9 "Stretch", this problem has been fixed in version
57.1-6+deb9u5.

We recommend that you upgrade your icu packages.

For the detailed security status of icu please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/icu

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10mips64ellibicu63-dbgsym< 63.1-6+deb10u2libicu63-dbgsym_63.1-6+deb10u2_mips64el.deb
Debian10arm64libicu63-dbgsym< 63.1-6+deb10u2libicu63-dbgsym_63.1-6+deb10u2_arm64.deb
Debian10s390xlibicu63-dbgsym< 63.1-6+deb10u2libicu63-dbgsym_63.1-6+deb10u2_s390x.deb
Debian9armellibicu-dev< 57.1-6+deb9u5libicu-dev_57.1-6+deb9u5_armel.deb
Debian9arm64libicu57-dbg< 57.1-6+deb9u5libicu57-dbg_57.1-6+deb9u5_arm64.deb
Debian9i386libicu57-dbg< 57.1-6+deb9u5libicu57-dbg_57.1-6+deb9u5_i386.deb
Debian9arm64icu-devtools-dbg< 57.1-6+deb9u5icu-devtools-dbg_57.1-6+deb9u5_arm64.deb
Debian10amd64libicu63< 63.1-6+deb10u2libicu63_63.1-6+deb10u2_amd64.deb
Debian10ppc64ellibicu63-dbgsym< 63.1-6+deb10u2libicu63-dbgsym_63.1-6+deb10u2_ppc64el.deb
Debian10armhficu-devtools-dbgsym< 63.1-6+deb10u2icu-devtools-dbgsym_63.1-6+deb10u2_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	mips64el	libicu63-dbgsym	< 63.1-6+deb10u2	libicu63-dbgsym_63.1-6+deb10u2_mips64el.deb
Debian	10	arm64	libicu63-dbgsym	< 63.1-6+deb10u2	libicu63-dbgsym_63.1-6+deb10u2_arm64.deb
Debian	10	s390x	libicu63-dbgsym	< 63.1-6+deb10u2	libicu63-dbgsym_63.1-6+deb10u2_s390x.deb
Debian	9	armel	libicu-dev	< 57.1-6+deb9u5	libicu-dev_57.1-6+deb9u5_armel.deb
Debian	9	arm64	libicu57-dbg	< 57.1-6+deb9u5	libicu57-dbg_57.1-6+deb9u5_arm64.deb
Debian	9	i386	libicu57-dbg	< 57.1-6+deb9u5	libicu57-dbg_57.1-6+deb9u5_i386.deb
Debian	9	arm64	icu-devtools-dbg	< 57.1-6+deb9u5	icu-devtools-dbg_57.1-6+deb9u5_arm64.deb
Debian	10	amd64	libicu63	< 63.1-6+deb10u2	libicu63_63.1-6+deb10u2_amd64.deb
Debian	10	ppc64el	libicu63-dbgsym	< 63.1-6+deb10u2	libicu63-dbgsym_63.1-6+deb10u2_ppc64el.deb
Debian	10	armhf	icu-devtools-dbgsym	< 63.1-6+deb10u2	icu-devtools-dbgsym_63.1-6+deb10u2_armhf.deb