Advisories » MGASA-2025-0249

Updated icu packages fix security vulnerability

Publication date: 27 Oct 2025
Modification date: 27 Oct 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-5222

Description

A stack buffer overflow was found in Internationl components for unicode
(ICU ). While running the genrb binary, the 'subtag' struct overflowed
at the SRBRoot::addTag function. This issue may lead to memory
corruption and local arbitrary code execution.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34442
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB5WTHV4QSRRUVG6KMSV4Z2FIQKSWR54/
• https://lists.debian.org/debian-security-announce/2025/msg00115.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5222

SRPMS

9/core

• icu-73.2-1.2.mga9