ELA-196-1 icu security update

double free

2019-11-27
Packageicu
Version4.8.1.1-12+deb7u8
Related CVEs CVE-2017-14952


An issue has been found in icu, a package containing International Components for Unicode.

By not doing a double free in createMetazoneMappings() a crash of the application that uses this function can be avoided.



For Debian 7 Wheezy, these problems have been fixed in version 4.8.1.1-12+deb7u8.

We recommend that you upgrade your icu packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.