USN-4305-1: ICU vulnerability
17 March 2020
ICU could be made to execute arbitrary code if it received a specially crafted string.
- icu - International Components for Unicode library
André Bargull discovered that ICU incorrectly handled certain strings.
An attacker could possibly use this issue to execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.