Resolves: rhbz#1510932 CVE-2017-14952

icu.spec

@@ -2,7 +2,7 @@
 
 Name:      icu
 Version:   57.1
-Release:   8%{?dist}
+Release:   9%{?dist}
 Summary:   International Components for Unicode
 
 License:   MIT and UCD and Public Domain
@@ -22,6 +22,7 @@ Patch6: armv7hl-disable-tests.patch
 Patch7: rhbz1360340-icu-changeset-39109.patch
 Patch8: diff-icu_trunk_source_common_locid.cpp-from-39282-to-39384.patch
 Patch9: rhbz1444101-icu-changeset-39671.patch
+Patch10: rhbz1510932-icu-changeset-40324.patch
 
 %description
 Tools and utilities for developing with icu.
@@ -73,6 +74,7 @@ BuildArch: noarch
 %patch7 -p1 -b .rhbz1360340-icu-changeset-39109.patch
 %patch8 -p1 -b .diff-icu_trunk_source_common_locid.cpp-from-39282-to-39384.patch
 %patch9 -p1 -b .rhbz1444101-icu-changeset-39671.patch
+%patch10 -p1 -b .rhbz1510932-icu-changeset-40324.patch
 
 
 %build
@@ -206,6 +208,9 @@ LD_LIBRARY_PATH=lib:stubdata:tools/ctestfw:$LD_LIBRARY_PATH bin/uconv -l
 
 
 %changelog
+* Wed Nov 08 2017 Eike Rathke <erack@redhat.com> - 57.1-9
+- Resolves: rhbz#1510932 CVE-2017-14952
+
 * Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 57.1-8
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
 

rhbz1510932-icu-changeset-40324.patch

@@ -0,0 +1,11 @@
+# https://ssl.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp
+Index: trunk/icu4c/source/i18n/zonemeta.cpp
+===================================================================
+--- icu.orig/source/i18n/zonemeta.cpp
++++ icu/source/i18n/zonemeta.cpp
+@@ -691,5 +691,4 @@
+                     if (U_FAILURE(status)) {
+                         delete mzMappings;
+-                        deleteOlsonToMetaMappingEntry(entry);
+                         uprv_free(entry);
+                         break;