International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913
Reference (s):
- DEBIAN:DSA-5014
- URL: https://www.debian.org/security/2021/dsa-5014
- https://github.com/unicode-org/icu/pull/886
- https://unicode-org.atlassian.net/browse/ICU-20850
- MLIST:[debian-lts-announce] 20211012 [SECURITY] [DLA 2784-1] icu security update