{"schemaVersion":3,"id":"MGASA-2015-0102","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated icu packages fix security vulnerability\n\nIt was discovered that ICU incorrectly handled memory operations when\nprocessing fonts. If an application using ICU processed crafted data, an\nattacker could cause it to crash or potentially execute arbitrary code with\nthe privileges of the user invoking the program (CVE-2014-6585,\nCVE-2014-6591).","dates":{"published":"2015-03-10T16:48:25.000Z","modified":"2026-04-16T06:25:11.889Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"icu","name":"icu","label":"icu","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/icu","purlType":"rpm","versions":[{"text":"< 52.1-2.2.mga4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 52.1-2.2.mga4","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2015-0102.html","label":"advisories.mageia.org/MGASA-2015-0102.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15435","label":"bugs.mageia.org/show_bug.cgi?id=15435","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://www.ubuntu.com/usn/usn-2522-1/","label":"www.ubuntu.com/usn/usn-2522-1/","hostname":"www.ubuntu.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2014-6585","CVE-2014-6591"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2015-03-10T16:48:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:25:11.889Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:26:17.038Z","stale":false,"partial":false}}