icu-libs: ICU4C Vulnerable to Denial-of-Service (DoS) via Memory Management Issues in 'FormattedValueStringBuilderImpl' Class
Blackduck security scanner finds in icu-libs 67.1 ICU4C Vulnerable to Denial-of-Service (DoS) via Memory Management Issues in 'FormattedValueStringBuilderImpl' Class
Summary: ICU4C (a C++ implementation of the ICU library) is vulnerable to denial-of-service (DoS) due to memory management issues in certain string manipulation functions. An application that uses ICU4C may crash if the vulnerable functions are triggered during its execution.
Solution: Fixed in 68.2 by this commit: https://github.com/unicode-org/icu/commit/e7f66732f8
May we get an updated/patched version?