Linux · Security advisory · June 26, 2025

DSA-5951-1: icu security update

DSA-5951-1, released June 26, 2025, fixes 1 CVE in icu (version 72.1-3+deb12u1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0044
38th percentile

Fixed package versions

ProductReleaseFixed in
icuDebian 12.15 (bookworm)72.1-3+deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-5222 Icu: stack buffer overflow in the srbroot::addtag function 7.0 0.0044 None reported
Showing 1 to 1 of 1 1