CVE catalog

CVE-2020-21913

icu affected and fixed versions

[CVE catalog]

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.21% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixieicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debiantrixieicu76.1-4Fixed[CVE-2020-21913]
Debiansidicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debiansidicu78.3-2Fixed[CVE-2020-21913]
Debianforkyicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debianforkyicu78.3-2Fixed[CVE-2020-21913]
Debianbookworm-securityicu72.1-3+deb12u1Fixed[CVE-2020-21913]
Debianbookwormicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debianbookwormicu72.1-3+deb12u1Fixed[CVE-2020-21913]

Showing 9 fix observations. All 76 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.15icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.16icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.17icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.18icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.19icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.20icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.21icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.22icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.23icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Alpine3.24icu66.1-r0UnknownSource applicability is not established[ALPINE-CVE-2020-21913]
Debianbookwormicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debianbookwormicu72.1-3+deb12u1Fixed[CVE-2020-21913]
Debianbookworm-securityicu72.1-3+deb12u1Fixed[CVE-2020-21913]
Debianforkyicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debianforkyicu78.3-2Fixed[CVE-2020-21913]
Debiansidicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debiansidicu78.3-2Fixed[CVE-2020-21913]
Debiantrixieicu67.1-2FixedDistribution-reported fixed boundary[CVE-2020-21913]
Debiantrixieicu76.1-4Fixed[CVE-2020-21913]
Opensuseleap 15.3icu60.2-150000.3.12.1UnknownSource applicability is not established[SUSE-SU-2022:3141-1]
Opensuseleap 15.3icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Opensuseleap 15.4icu60.2-150000.3.12.1UnknownSource applicability is not established[SUSE-SU-2022:3141-1]
Opensuseleap 15.4icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Opensuseleap 15.6icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Opensuseleap micro 5.2icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suseenterprise storage 7.1icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise high performance computing 15 sp3-ltssicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise high performance computing 15 sp4-esposicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise high performance computing 15 sp4-ltssicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise high performance computing 15 sp5-esposicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise high performance computing 15 sp5-ltssicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise micro 5.1icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise micro 5.1icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suselinux enterprise micro 5.2icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise micro 5.2icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suselinux enterprise micro 5.3icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise micro 5.4icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise module for basesystem 15 sp3icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suselinux enterprise module for basesystem 15 sp4icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suselinux enterprise module for basesystem 15 sp6icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise module for basesystem 15 sp7icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise module for legacy 15 sp3icu60.2-150000.3.12.1UnknownSource applicability is not established[SUSE-SU-2022:3141-1]
Suselinux enterprise module for legacy 15 sp4icu60.2-150000.3.12.1UnknownSource applicability is not established[SUSE-SU-2022:3141-1]
Suselinux enterprise module for package hub 15 sp3icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suselinux enterprise module for package hub 15 sp4icu65.1-150200.4.5.1UnknownSource applicability is not established[SUSE-SU-2022:3142-1]
Suselinux enterprise module for package hub 15 sp6icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise module for package hub 15 sp7icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise server 12 sp5icu52.1-8.13.1UnknownSource applicability is not established[SUSE-SU-2022:3140-1]
Suselinux enterprise server 15 sp3-ltssicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise server 15 sp4-ltssicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise server 15 sp5-ltssicu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise server for sap applications 12 sp5icu52.1-8.13.1UnknownSource applicability is not established[SUSE-SU-2022:3140-1]
Suselinux enterprise server for sap applications 15 sp3icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise server for sap applications 15 sp4icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise server for sap applications 15 sp5icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Suselinux enterprise software development kit 12 sp5icu52.1-8.13.1UnknownSource applicability is not established[SUSE-SU-2022:3140-1]
Suselinux enterprise workstation extension 12 sp5icu52.1-8.13.1UnknownSource applicability is not established[SUSE-SU-2022:3140-1]
Susemanager proxy 4.3icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Susemanager server 4.3icu65.1-150200.4.15.1UnknownSource applicability is not established[SUSE-SU-2025:02079-1]
Ubuntu18.04icu57.1-6UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu59.1-3ubuntu1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu60.1-1ubuntu2UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu60.2-1ubuntu1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu60.2-3ubuntu1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu60.2-3ubuntu3UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu60.2-3ubuntu3.1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntu18.04icu60.2-3ubuntu3.2UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-4ubuntu1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-6ubuntu1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7ubuntu0.1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7ubuntu0.2UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7ubuntu0.3UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7ubuntu0.4UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7ubuntu0.5UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Ubuntuproicu55.1-7ubuntu0.5+esm1UnknownSource applicability is not established[USN-5133-1][UBUNTU-CVE-2020-21913]
Original provider fields
{
  "package_releases": [
    {
      "name": "icu",
      "status": "fixed",
      "release": "sid",
      "version": "78.3-2"
    },
    {
      "name": "icu",
      "status": "fixed",
      "release": "forky",
      "version": "78.3-2"
    },
    {
      "name": "icu",
      "status": "fixed",
      "release": "trixie",
      "version": "76.1-4"
    },
    {
      "name": "icu",
      "status": "fixed",
      "release": "bookworm",
      "version": "72.1-3+deb12u1"
    },
    {
      "name": "icu",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "72.1-3+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "icu",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "67.1-2"
    },
    {
      "bug": null,
      "name": "icu",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "67.1-2"
    },
    {
      "bug": null,
      "name": "icu",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "67.1-2"
    },
    {
      "bug": null,
      "name": "icu",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "67.1-2"
    }
  ],
  "distribution_packages": [
    {
      "name": "international_components_for_unicode",
      "ranges": [
        {
          "fixed": "66.1",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-21913",
      "fixed_version": "66.1",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2020-21913",
      "provider_updated_at": "2026-10-14T10:17:32.143"
    },
    {
      "name": "debian_linux",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-21913",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2020-21913",
      "provider_updated_at": "2026-10-14T10:17:32.143"
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "66.1-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-21913",
      "fixed_version": "66.1-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-21913",
      "provider_updated_at": "2026-10-26T11:17:55.148627800Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "55.1-7ubuntu0.5+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "55.1-4ubuntu1",
        "55.1-6ubuntu1",
        "55.1-7",
        "55.1-7ubuntu0.1",
        "55.1-7ubuntu0.2",
        "55.1-7ubuntu0.3",
        "55.1-7ubuntu0.4",
        "55.1-7ubuntu0.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5133-1",
      "fixed_version": "55.1-7ubuntu0.5+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-5133-1",
      "provider_updated_at": "2026-06-29T13:49:34.684453709Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.2-3ubuntu3.2"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "57.1-6",
        "59.1-3ubuntu1",
        "60.1-1ubuntu2",
        "60.2-1ubuntu1",
        "60.2-3ubuntu1",
        "60.2-3ubuntu3",
        "60.2-3ubuntu3.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5133-1",
      "fixed_version": "60.2-3ubuntu3.2",
      "provider_source": "pypi",
      "provider_record_id": "USN-5133-1",
      "provider_updated_at": "2026-06-29T13:49:34.684453709Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "55.1-7ubuntu0.5+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "55.1-4ubuntu1",
        "55.1-6ubuntu1",
        "55.1-7",
        "55.1-7ubuntu0.1",
        "55.1-7ubuntu0.2",
        "55.1-7ubuntu0.3",
        "55.1-7ubuntu0.4",
        "55.1-7ubuntu0.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-21913",
      "fixed_version": "55.1-7ubuntu0.5+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-21913",
      "provider_updated_at": "2026-04-22T12:33:35.807529Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.2-3ubuntu3.2"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "57.1-6",
        "59.1-3ubuntu1",
        "60.1-1ubuntu2",
        "60.2-1ubuntu1",
        "60.2-3ubuntu1",
        "60.2-3ubuntu3",
        "60.2-3ubuntu3.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-21913",
      "fixed_version": "60.2-3ubuntu3.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-21913",
      "provider_updated_at": "2026-04-22T12:33:35.807529Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "manager server 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.15.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02079-1",
      "fixed_version": "65.1-150200.4.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02079-1",
      "provider_updated_at": "2026-03-23T04:46:26.447609Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.2-150000.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for legacy 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3141-1",
      "fixed_version": "60.2-150000.3.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3141-1",
      "provider_updated_at": "2026-02-04T03:51:44.946977Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.2-150000.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for legacy 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3141-1",
      "fixed_version": "60.2-150000.3.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3141-1",
      "provider_updated_at": "2026-02-04T03:51:44.946977Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.2-150000.3.12.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3141-1",
      "fixed_version": "60.2-150000.3.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3141-1",
      "provider_updated_at": "2026-02-04T03:51:44.946977Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.2-150000.3.12.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3141-1",
      "fixed_version": "60.2-150000.3.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3141-1",
      "provider_updated_at": "2026-02-04T03:51:44.946977Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.1-8.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3140-1",
      "fixed_version": "52.1-8.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3140-1",
      "provider_updated_at": "2026-02-04T03:36:49.233398Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.1-8.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3140-1",
      "fixed_version": "52.1-8.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3140-1",
      "provider_updated_at": "2026-02-04T03:36:49.233398Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.1-8.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3140-1",
      "fixed_version": "52.1-8.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3140-1",
      "provider_updated_at": "2026-02-04T03:36:49.233398Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "52.1-8.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3140-1",
      "fixed_version": "52.1-8.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3140-1",
      "provider_updated_at": "2026-02-04T03:36:49.233398Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    },
    {
      "name": "icu",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "65.1-150200.4.5.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3142-1",
      "fixed_version": "65.1-150200.4.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3142-1",
      "provider_updated_at": "2026-02-04T03:23:04.145307Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [icu-devtools]Unknown

    Source package: [icu]

    Details (4)

    • 72.1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

  • [icu-doc]Unknown

    Source package: [icu]

    Details (4)

    • 72.1-3+deb12u1 · all · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · all · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · all · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · all · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

  • [libicu72]Unknown

    Source package: [icu]

    Details (4)

    • 72.1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

  • [libicu-dev]Unknown

    Source package: [icu]

    Details (4)

    • 72.1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

    • 72.1-3+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 67.1-2

      dsa · icu · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]