Ubuntu Security Notice 846-1 - It was discovered that ICU did not properly handle invalid byte sequences during Unicode conversion. If an application using ICU processed crafted data, content security mechanisms could be bypassed, potentially leading to cross-site scripting (XSS) attacks.
9dc9721d17a4b5f766ae1766ebd9da0b6c32a9640953dec8efdb6126a34ff18b
Debian Security Advisory 1889-1 - It was discovered that the ICU unicode library performed incorrect processing of invalid multibyte sequences, resulting in potential bypass of security mechanisms.
277aed8c3f2483c166a48f232c68ddb6bd9d03ddca2b3593d77879a6ee12254e