Bug#1107856: bookworm-pu: package icu/72.1-3+deb12u1
On Mon, Jun 16, 2025 at 1:05 AM Adrian Bunk <bunk@debian.org> wrote:
> * CVE-2025-5222: Stack-based buffer overflow (Closes: #1106684)
>
> Tagged moreinfo, as question to the security team whether they want
> this in pu or as DSA.
Being the maintainer I have three quick points to add. Thanks for the
update, it seems to be correct. Please note this is a workaround, a
fix for another issue and not the intended security update. I work on
three more security fixes of ICU for Trixie, it is currently in the
testing.
Regards,
Laszlo/GCS
Reply to: