==========================================================================
Ubuntu Security Notice USN-3274-1
May 02, 2017

icu vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.04
– Ubuntu 16.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in ICU.

Software Description:
– icu: International Components for Unicode library

Details:

It was discovered that ICU incorrectly handled certain memory operations
when processing data. If an application using ICU processed crafted data,
a remote attacker could possibly cause it to crash or potentially execute
arbitrary code with the privileges of the user invoking the program.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
libicu57 57.1-5ubuntu0.1

Ubuntu 16.10:
libicu57 57.1-4ubuntu0.2

Ubuntu 16.04 LTS:
libicu55 55.1-7ubuntu0.2

Ubuntu 14.04 LTS:
libicu52 52.1-3ubuntu0.6

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-3274-1
CVE-2017-7867, CVE-2017-7868

Package Information:
https://launchpad.net/ubuntu/+source/icu/57.1-5ubuntu0.1
https://launchpad.net/ubuntu/+source/icu/57.1-4ubuntu0.2
https://launchpad.net/ubuntu/+source/icu/55.1-7ubuntu0.2
https://launchpad.net/ubuntu/+source/icu/52.1-3ubuntu0.6

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iQIcBAEBCgAGBQJZCOEJAAoJEGVp2FWnRL6TsEwQALRNEIiHrT0BHd4C0Y37TlZo
yWVOLsxFve7b268u7QWNTo9qpFmjIclJ/T+QhcKc9secrfpW21k6GM8864sRXPAG
6xMK8wCIXJs4hWbLv6DHHtPnvotWxdO2P64ipNP3u8OqY875pufpOBMMu+2cVxTH
jfhviWBfeXhFTCiuAnL+TM0i5uP6mAVWb7pla/AnDcFU6x2ImZa6nAUQOjZwK7vp
e0d66bwsWtpB8vpsuo4uaHUobD6FabXm52m4eJRnMR9UKPO0mRuPXm1SIlhCrnnc
PM0BL9a1AYZIt/T2xnRYx+ENMLhWguTZpjkJsDmAPbAwdFyDfxgrvJOPPzm2t1yQ
Pk/bFnFgriP7J9KnOILz9M/bxmTPP7GyDaW4iuXiUrUpDmja+kUkP58fk8uQJ8m7
QzNoFOdGzM7Szz/o+9cEWZg3pnjz4qOj/2JBmVDbOFjH25S6SV4AVLOkdb0pmOHc
DfFZgBGF4i38NrwgZq7OVPRGsZn8hQ/qOEa9DQDXO+SeYGqPpH6WM0Qg5z49QP99
HShUOjEqMAuPSCAq8Hf6k60RrCacH2C5SD1i+gtCbOvybSguV9MzrmX953thjK5f
ESLG2qMxkHglCdgAsLFpQHqFNV2H7TKEGb6BqVpIR2vzEwS8f5qloXP82M4jEkSN
6BclPI1GrPqNx2OsR7oi
=eEcp
—–END PGP SIGNATURE—–
—