Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-10531: An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. 1807349: CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | icu | 0:50.2-4.amzn2 |
| Amazon Linux · 2 | icu-debuginfo | 0:50.2-4.amzn2 |
| Amazon Linux · 2 | libicu | 0:50.2-4.amzn2 |
| Amazon Linux · 2 | libicu-devel | 0:50.2-4.amzn2 |
| Amazon Linux · 2 | libicu-doc | 0:50.2-4.amzn2 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, lead…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-10531.html