[ glsa 201710-03 ] icu

[GLSA]

Gentoo Linux Security Advisory

Title: ICU: Multiple vulnerabilities (GLSA 201710-03)
Severity: normal
Exploitable: remote
Date: 2017-10-08
Bug(s): #616468
ID: 201710-03

Synopsis

Multiple vulnerabilities have been found in ICU, the worst of which
could allow remote code execution.


Background

ICU is a mature, widely used set of C/C++ and Java libraries providing
Unicode and Globalization support for software applications.


Affected Packages

Package: dev-libs/icu
Vulnerable: < 58.2-r1
Unaffected: >= 58.2-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in ICU. Please review the
referenced CVE identifiers for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All ICU users should upgrade to the latest version: