Errata overview
Errata ID 298
Date 2015-09-02
Source package icu
Fixed in version 4.8.1.1-12.25.201508281703
Description
Multiple security vulnerabilities have been fixed in icu:
* Glyph table issue (CVE-2013-1569)
* Glyph table issue (CVE-2013-2383)
* Font layout issue (CVE-2013-2384)
* Font processing issue (CVE-2013-2419)
* Out-of-bounds read (CVE-2014-6585)
* Additional out-of-bounds reads (CVE-2014-6591)
* Memory corruption in regular expression comparison (CVE-2014-7923)
* Memory corruption in regular expression comparison (CVE-2014-7926)
* Uninitialized memory (CVE-2014-7940)
* More regular expression flaws (CVE-2014-9654).
* Missing boundary checks in layout engine (CVE-2015-4760)
* Heap overflow via incorrect isolateCount (CVE-2014-8146)
* Integer truncation in the resolveImplicitLevels function
  (CVE-2014-8147)
Additional notes
CVE ID CVE-2013-1569
CVE-2013-2383
CVE-2013-2384
CVE-2013-2419
CVE-2014-6585
CVE-2014-6591
CVE-2014-7923
CVE-2014-7926
CVE-2014-7940
CVE-2014-9654
CVE-2015-4760
CVE-2014-8146
CVE-2014-8147
UCS Bug number #37629