Errata overview
Errata ID 356
Date 2015-08-21
Source package icu
Fixed in version 4.4.1-8.24.201508172234
Description
Multiple vulnerabilities have been fixed in the International Components
for Unicode library:
 * Race condition in locid.cpp (CVE-2013-0900)
 * Use-after-free issue in csrucode.cpp (CVE-2013-2924)
 * Potential execution of arbitrary code with user privileges due to
   incorrect memory handling while processing fonts (CVE-2013-1569,
   CVE-2013-2383, CVE-2013-2384, and CVE-2013-2419)
 * Out-of-bounds read (CVE-2014-6585)
 * Out-of-bounds reads (CVE-2014-6591)
 * Memory corruption in regular expression comparison (CVE-2014-7923)
 * Memory corruption in regular expression comparison (CVE-2014-7926)
 * Uninitialized memory in i18n/icol.cpp (CVE-2014-7940)
 * Regular expression handling issues (CVE-2014-9654)
 * Fix boundary checks in layout engine (CVE-2015-4760)
Additional notes
CVE ID CVE-2013-0900
CVE-2013-1569
CVE-2013-2383
CVE-2013-2384
CVE-2013-2419
CVE-2013-2924
CVE-2014-6585
CVE-2014-6591
CVE-2014-7923
CVE-2014-7926
CVE-2014-7940
CVE-2014-9654
CVE-2015-4760
UCS Bug number #33284