Test ID:	1.3.6.1.4.1.25623.1.0.704646
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-4646-1)
Summary:	The remote host is missing an update for the Debian 'icu' package(s) announced via the DSA-4646-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'icu' package(s) announced via the DSA-4646-1 advisory. Vulnerability Insight: Andre Bargull discovered an integer overflow in the International Components for Unicode (ICU) library which could result in denial of service and potentially the execution of arbitrary code. For the oldstable distribution (stretch), this problem has been fixed in version 57.1-6+deb9u4. For the stable distribution (buster), this problem has been fixed in version 63.1-6+deb10u1. We recommend that you upgrade your icu packages. For the detailed security status of icu please refer to its security tracker page at: [link moved to references] Affected Software/OS: 'icu' package(s) on Debian 9, Debian 10. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10531 Debian Security Information: DSA-4646 (Google Search) https://www.debian.org/security/2020/dsa-4646 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ https://security.gentoo.org/glsa/202003-15 https://bugs.chromium.org/p/chromium/issues/detail?id=1044570 https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html https://chromium.googlesource.com/chromium/deps/icu/+/9f4020916eb1f28f3666f018fdcbe6c9a37f0e08 https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca https://github.com/unicode-org/icu/pull/971 https://unicode-org.atlassian.net/browse/ICU-20958 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2021.html https://lists.debian.org/debian-lts-announce/2020/03/msg00024.html RedHat Security Advisories: RHSA-2020:0738 https://access.redhat.com/errata/RHSA-2020:0738 SuSE Security Announcement: openSUSE-SU-2020:0459 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00004.html https://usn.ubuntu.com/4305-1/
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.