https://bugzilla.redhat.com/show_bug.cgi?id=2006950
Bug ID: 2006950
Summary: CVE-2020-21913 icu: Use after free in
pkg_createWithAssemblyCode function in
tools/pkgdata/pkgdata.cpp
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: ahughes(a)redhat.com, aileenc(a)redhat.com,
bdettelb(a)redhat.com, bmontgom(a)redhat.com,
caillon+fedoraproject(a)gmail.com, chazlett(a)redhat.com,
dbhole(a)redhat.com, denis.arnaud_fedora(a)m4x.org,
drieden(a)redhat.com, eng-i18n-bugs(a)redhat.com,
eparis(a)redhat.com, erack(a)redhat.com,
erik-fedora(a)vanpienbroek.nl, fnasser(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
hhorak(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jdowland(a)redhat.com,
jkang(a)redhat.com, jnakfour(a)redhat.com,
jochrist(a)redhat.com, jokerman(a)redhat.com,
jorton(a)redhat.com, jvanek(a)redhat.com, jwon(a)redhat.com,
kaycoth(a)redhat.com, krzysztof.daniel(a)gmail.com,
lef(a)fedoraproject.org, loganjerry(a)gmail.com,
manisandro(a)gmail.com, mcatanza(a)redhat.com,
mfabian(a)redhat.com, mizdebsk(a)redhat.com,
mrunge(a)redhat.com, neugens(a)redhat.com,
nodejs-maint(a)redhat.com,
nodejs-sig(a)lists.fedoraproject.org,
nsantos(a)redhat.com, nstielau(a)redhat.com,
patrickm(a)redhat.com, pjindal(a)redhat.com,
psegedy(a)redhat.com, rh-spice-bugs(a)redhat.com,
rhughes(a)redhat.com, rstrode(a)redhat.com,
sandmann(a)redhat.com, sgallagh(a)redhat.com,
sponnaga(a)redhat.com, tchollingsworth(a)gmail.com,
thrcka(a)redhat.com, tpopela(a)redhat.com, tuxator(a)o2.pl,
vkumar(a)redhat.com, walter.pete(a)yandex.com,
zsvetlik(a)redhat.com
Target Milestone: ---
Classification: Other
International Components for Unicode (ICU-20850) v66.1 was discovered to
contain a use after free bug in the pkg_createWithAssemblyCode function in the
file tools/pkgdata/pkgdata.cpp.
References:
https://github.com/unicode-org/icu/pull/886
https://unicode-org.atlassian.net/browse/ICU-20850
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2006950