This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============0761723358999193319==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="XJ7lkUiOVn8W3h2qIKAAdxf5wp9rBFfhD"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--XJ7lkUiOVn8W3h2qIKAAdxf5wp9rBFfhD
Content-Type: multipart/mixed;
 boundary="4LBj0dPvn0g36k8VjQHHP7dSgOLAlBBFK"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: "ubuntu-security-announce@lists.ubuntu.com"
 <ubuntu-security-announce@lists.ubuntu.com>
Message-ID: <9f9783a7-db7a-4210-60bc-9da29ac58f06@canonical.com>
Subject: [USN-3274-1] ICU vulnerabilities

--4LBj0dPvn0g36k8VjQHHP7dSgOLAlBBFK
Content-Type: text/plain; charset=utf-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3274-1
May 02, 2017

icu vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 17.04
- Ubuntu 16.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in ICU.

Software Description:
- icu: International Components for Unicode library

Details:

It was discovered that ICU incorrectly handled certain memory operations
when processing data. If an application using ICU processed crafted data,
a remote attacker could possibly cause it to crash or potentially execute
arbitrary code with the privileges of the user invoking the program.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libicu57                        57.1-5ubuntu0.1

Ubuntu 16.10:
  libicu57                        57.1-4ubuntu0.2

Ubuntu 16.04 LTS:
  libicu55                        55.1-7ubuntu0.2

Ubuntu 14.04 LTS:
  libicu52                        52.1-3ubuntu0.6

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-3274-1
  CVE-2017-7867, CVE-2017-7868

Package Information:
  https://launchpad.net/ubuntu/+source/icu/57.1-5ubuntu0.1
  https://launchpad.net/ubuntu/+source/icu/57.1-4ubuntu0.2
  https://launchpad.net/ubuntu/+source/icu/55.1-7ubuntu0.2
  https://launchpad.net/ubuntu/+source/icu/52.1-3ubuntu0.6



--4LBj0dPvn0g36k8VjQHHP7dSgOLAlBBFK--

--XJ7lkUiOVn8W3h2qIKAAdxf5wp9rBFfhD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCgAGBQJZCOEJAAoJEGVp2FWnRL6TsEwQALRNEIiHrT0BHd4C0Y37TlZo
yWVOLsxFve7b268u7QWNTo9qpFmjIclJ/T+QhcKc9secrfpW21k6GM8864sRXPAG
6xMK8wCIXJs4hWbLv6DHHtPnvotWxdO2P64ipNP3u8OqY875pufpOBMMu+2cVxTH
jfhviWBfeXhFTCiuAnL+TM0i5uP6mAVWb7pla/AnDcFU6x2ImZa6nAUQOjZwK7vp
e0d66bwsWtpB8vpsuo4uaHUobD6FabXm52m4eJRnMR9UKPO0mRuPXm1SIlhCrnnc
PM0BL9a1AYZIt/T2xnRYx+ENMLhWguTZpjkJsDmAPbAwdFyDfxgrvJOPPzm2t1yQ
Pk/bFnFgriP7J9KnOILz9M/bxmTPP7GyDaW4iuXiUrUpDmja+kUkP58fk8uQJ8m7
QzNoFOdGzM7Szz/o+9cEWZg3pnjz4qOj/2JBmVDbOFjH25S6SV4AVLOkdb0pmOHc
DfFZgBGF4i38NrwgZq7OVPRGsZn8hQ/qOEa9DQDXO+SeYGqPpH6WM0Qg5z49QP99
HShUOjEqMAuPSCAq8Hf6k60RrCacH2C5SD1i+gtCbOvybSguV9MzrmX953thjK5f
ESLG2qMxkHglCdgAsLFpQHqFNV2H7TKEGb6BqVpIR2vzEwS8f5qloXP82M4jEkSN
6BclPI1GrPqNx2OsR7oi
=eEcp
-----END PGP SIGNATURE-----

--XJ7lkUiOVn8W3h2qIKAAdxf5wp9rBFfhD--


--===============0761723358999193319==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============0761723358999193319==--