Skip to content
OpenAdvisories
Medium ELSA-2025-11888 1 CVE

Moderate: icu security update (Oracle Linux 10)

Published Jul 28, 2025 · Updated Jul 28, 2025

Summary

[74.2-5]
- ICU-22973 Fix buffer overflow by using CharString
Resolves: RHEL-96667

[74.2-4]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018

[74.2-3]
- Resolves: RHEL-59365 Fix coverity warnings

[74.2-2]
- Bump release for June 2024 mass rebuild

[74.2-1]
- Update to 74.2

[74.1-1]
- Update to 74.1

[73.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[73.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[73.2-3]
- Fix broken TestHebrewCalendarInTemporalLeapYear

[73.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[73.2-1]
- Update to 73.2

[72.1-3]
- migrated to SPDX license IDs

[72.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[72.1-1]
- Update to 72.1

[71.1-2]
- Update timezone data to 2022b

[71.1-1]
- Update to 71.1

[69.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[69.1-6]
- Update timezone data to 2022a

[69.1-5]
- Introduce use_tzdata_update flag

[69.1-4]
- Update timezone data to 2021a4

[69.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[69.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[69.1-1]
- Update to 69.1

[67.1-6]
- Rebuilt for removed libstdc++ symbol (#1937698)

[67.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[67.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[67.1-3]
- Replace unversioned %{__python} macro with %{__python3}

[67.1-2]
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

[67.1-1]
- Update to 67.1

[65.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[65.1-1]
- Update to 65.1
- Add a patch from gentoo to fix the build on s390x
- Drop arm test disabling patches as they are no longer needed

[63.2-4]
- Build with Python 3

[63.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[63.2-2]
- Resolves: rhbz#1708935 temporarily roll back to 63.1

[63.2-1]
- Update to 63.2

[63.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[63.1-1]
- Update to 63.1

[62.1-3]
- Resolves: rhbz#1646703 CVE-2018-18928

[62.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[62.1-1]
- Update to 62.1

[61.1-2]
- Resolves: rhbz#1582611 Add riscv64 to icu-config.sh

[61.1-1]
- Update to 61.1

[60.2-3]
- Update Python 2 dependency declarations to new packaging standards
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

[60.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[60.2-1]
- Update to 60.2

[60.1-2]
- Resolves: rhbz#1524820 CVE-2017-17484

[60.1-1]
- Update to 60.1

[57.1-9]
- Resolves: rhbz#1510932 CVE-2017-14952

[57.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[57.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[57.1-6]
- Resolves: rhbz#1444101 CVE-2017-7867 CVE-2017-7868

[57.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[57.1-4]
- dist.rpmgrill: 'Percent signs in specfile changelog should be escaped'

[57.1-3]
- Resolves: rhbz#1377362 CVE-2016-7415

[57.1-2]
- Resolves: rhbz#1360340 CVE-2016-6293

[57.1-1]
- upgrade to upstream ICU 57.1

[56.1-7]
- make check failure is fatal again

[56.1-6]
- remove icu-56.1-codes-cache-extend.patch

[56.1-5]
- even more verbosity and debug output
- add path to extend ICU's internal cache of codes
- use license macro
- provide samples in devel subpackage
- modernize generally

[56.1-4]
- %build: make VERBOSE=1
- %check: keep 'make check' non-fatal while investigating rhbz#1307633

[56.1-3]
- Resolves: rhbz#1307633 FTBFS, disable check to get build through for now

[56.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[56.1-1]
- Resolves: rhbz#1271353 upgrade to ICU 56.1

[54.1-5]
- Workaround rhbz#1239574 disabling offending tests on armv7hl

[54.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[54.1-3]
- Resolves: rhbz#1190131 CVE-2014-7923 CVE-2014-7926 CVE-2014-9654
- Resolves: rhbz#1184811 CVE-2014-6585 CVE-2014-6591

[54.1-2]
- Rebuilt for Fedora 23 Change
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[54.1-1]
- Resolves: rhbz#1185433 upgrade to upstream ICU 54.1

[53.1-1]
- Resolves: rhbz#1130771 upgrade to upstream ICU 53.1

[52.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[52.1-3]
- Resolves: rhbz#1106793 bad 2-digit year test case

[52.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[52.1-1]
- upgrade to upstream ICU 52.1
- Resolves: rhbz#1049265 icu-52.1 is available
- Resolves: rhbz#1050063 Trivial change to icu-config to support ppc64le
- drop icu-51-layout-fix-10107.tgz source
- drop integrated icu.10318.CVE-2013-2924_changeset_34076.patch
- drop integrated icu.10143.memory.leak.crash.patch

[50.1.2-10]
- Resolves: rhbz#1015594 CVE-2013-2924 use-after-free

[50.1.2-9]
- added %{?_isa} to Requires for multi-arch systems

[50.1.2-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[50.1.2-7]
- Resolves: rhbz#986814 install icu-config.sh from source2

[50.1.2-6]
- Resolves: rhbz#966141 various flaws in Layout Engine font processing
- Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper

[50.1.2-5]
- added manpages for gennorm2 and icuinfo, rhbz#884035 related

[50.1.2-4]
- Resolves: fdo#52519 crash on typing some Malayalam

[50.1.2-3]
- Resolves: rhbz#856594 roll back and build without --disable-renaming again

[50.1.2-2]
- Resolves: rhbz#856594 include content of icu/source/uconfig.h.prepend

[50.1.2-1]
- Update to 50.1.2
- Resolves: rhbz#856594 to-do add --disable-renaming on next soname bump
- removed upstream applied icu.9283.regexcmp.crash.patch

[49.1.1-7]
- Related: rhbz#856594 reenable icu symbol renaming

[49.1.1-6]

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 icu 0:74.2-5.el10_0
Oracle Linux · 10 libicu 0:74.2-5.el10_0
Oracle Linux · 10 libicu-devel 0:74.2-5.el10_0

Vulnerabilities 1