{"id":"openSUSE-SU-2021:4063-1","aliases":[],"status":"published","title":"Security update for icu.691","description":"This update for icu.691 fixes the following issues:\n\n\n- Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. (jsc#SLE-17893)\n- Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder'\n\n- Update to release 69.1\n  - For Norwegian, 'no' is back to being the canonical code, with\n    'nb' treated as equivalent. This aligns handling of Norwegian\n    with other macro language codes.\n  - Binary prefixes in measurement units (KiB, MiB, etc.)\n  - Time zone offsets from local time with new APIs.\n- Don't disable testsuite under 'qemu-linux-user'\n- Fixed an issue when ICU test on 'aarch64 fails. (bsc#1182645)\n- Drop 'SUSE_ASNEEDED' as the issue was in binutils. (bsc#1182252)\n- Fix 'pthread' dependency issue. (bsc#1182252)\n\n- Update to release 68.2\n  - Fix memory problem in 'FormattedStringBuilder'\n  - Fix assertion when 'setKeywordValue w/' long value.\n  - Fix UBSan breakage on 8bit of rbbi\n  - fix int32_t overflow in listFormat\n  - Fix memory handling in MemoryPool::operator=()\n  - Fix memory leak in AliasReplacer\n\n- Add back icu.keyring.\n- Update to release 68.1\n  - PluralRules selection for ranges of numbers\n  - Locale ID canonicalization now conforms to the CLDR spec including edge cases\n  - DateIntervalFormat supports output options such as capitalization\n  - Measurement units are normalized in skeleton string output\n  - Time zone data (tzdata) version 2020d\n\n- Add the provides for libicu to Make .Net core can install successfully. (bsc#1167603, bsc#1161007) \n- Update to version 67.1\n  - Unicode 13 (ICU-20893, same as in ICU 66)\n    - Total of 5930 new characters\n    - 4 new scripts\n    - 55 new emoji characters, plus additional new sequences\n    - New CJK extension, first characters in plane 3: U+30000..U+3134A\n    - New language at Modern coverage: Nigerian Pidgin\n    - New languages at Basic coverage: Fulah (Adlam), Maithili,\n      Manipuri, Santali, Sindhi (Devanagari), Sundanese\n    - Region containment: EU no longer includes GB\n    - Unicode 13 root collation data and Chinese data for collation and transliteration\n  - DateTimePatternGenerator now obeys the 'hc' preference in the locale identifier\n  - Various other improvements for ECMA-402 conformance\n  - Number skeletons have a new 'concise' form that can be used in MessageFormat strings\n  - Currency formatting options for formal and other currency display name variants\n  - ListFormatter: new public API to select the style \u0026 type\n  - ListFormatter now selects the proper “and”/“or” form for Spanish \u0026 Hebrew.\n  - Locale ID canonicalization upgraded to implement the complete CLDR spec.\n  - LocaleMatcher: New option to ignore one-way matches\n  - acceptLanguage() reimplemented via LocaleMatcher\n  - Data build tool: tzdbNames.res moved from the 'zone_tree' category to the 'zone_supplemental' category\n  - Fixed uses of u8'literals' broken by the C++20 introduction of the incompatible char8_t type\n  - and added a few API overloads to reduce the need for reinterpret_cast.\n  - Support for manipulating CLDR 37 unit identifiers in MeasureUnit.\n\n- Drop icu-versioning. (bsc#1159131)\n- Update to version 66.1\n  - Unicode 13 support\n  - Fix uses of u8'literals' broken by C++20 introduction of incompatible char8_t type.\n\n- Fixed an issue when Qt apps can't handle non-ASCII filesystem path. ([bsc#1162882)\n- Remove '/usr/lib(64)/icu/current'. (bsc#1158955)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-12-14T12:58:15Z","modified":"2021-12-14T12:58:15Z","fixes":[{"ecosystem":"openSUSE:Leap 15.3","package":"icu.691","fixed_in":["69.1-7.3.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"icu.691","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"69.1-7.3.2"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6RFJJGOGAP5YKMLXG2AX5Q3DJQF46QIT/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1158955","tags":["report"]},{"url":"https://bugzilla.suse.com/1159131","tags":["report"]},{"url":"https://bugzilla.suse.com/1161007","tags":["report"]},{"url":"https://bugzilla.suse.com/1162882","tags":["report"]},{"url":"https://bugzilla.suse.com/1167603","tags":["report"]},{"url":"https://bugzilla.suse.com/1182252","tags":["report"]},{"url":"https://bugzilla.suse.com/1182645","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2021:4063-1","title":"Security update for icu.691","description":"This update for icu.691 fixes the following issues:\n\n\n- Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. (jsc#SLE-17893)\n- Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder'\n\n- Update to release 69.1\n  - For Norwegian, 'no' is back to being the canonical code, with\n    'nb' treated as equivalent. This aligns handling of Norwegian\n    with other macro language codes.\n  - Binary prefixes in measurement units (KiB, MiB, etc.)\n  - Time zone offsets from local time with new APIs.\n- Don't disable testsuite under 'qemu-linux-user'\n- Fixed an issue when ICU test on 'aarch64 fails. (bsc#1182645)\n- Drop 'SUSE_ASNEEDED' as the issue was in binutils. (bsc#1182252)\n- Fix 'pthread' dependency issue. (bsc#1182252)\n\n- Update to release 68.2\n  - Fix memory problem in 'FormattedStringBuilder'\n  - Fix assertion when 'setKeywordValue w/' long value.\n  - Fix UBSan breakage on 8bit of rbbi\n  - fix int32_t overflow in listFormat\n  - Fix memory handling in MemoryPool::operator=()\n  - Fix memory leak in AliasReplacer\n\n- Add back icu.keyring.\n- Update to release 68.1\n  - PluralRules selection for ranges of numbers\n  - Locale ID canonicalization now conforms to the CLDR spec including edge cases\n  - DateIntervalFormat supports output options such as capitalization\n  - Measurement units are normalized in skeleton string output\n  - Time zone data (tzdata) version 2020d\n\n- Add the provides for libicu to Make .Net core can install successfully. (bsc#1167603, bsc#1161007) \n- Update to version 67.1\n  - Unicode 13 (ICU-20893, same as in ICU 66)\n    - Total of 5930 new characters\n    - 4 new scripts\n    - 55 new emoji characters, plus additional new sequences\n    - New CJK extension, first characters in plane 3: U+30000..U+3134A\n    - New language at Modern coverage: Nigerian Pidgin\n    - New languages at Basic coverage: Fulah (Adlam), Maithili,\n      Manipuri, Santali, Sindhi (Devanagari), Sundanese\n    - Region containment: EU no longer includes GB\n    - Unicode 13 root collation data and Chinese data for collation and transliteration\n  - DateTimePatternGenerator now obeys the 'hc' preference in the locale identifier\n  - Various other improvements for ECMA-402 conformance\n  - Number skeletons have a new 'concise' form that can be used in MessageFormat strings\n  - Currency formatting options for formal and other currency display name variants\n  - ListFormatter: new public API to select the style \u0026 type\n  - ListFormatter now selects the proper “and”/“or” form for Spanish \u0026 Hebrew.\n  - Locale ID canonicalization upgraded to implement the complete CLDR spec.\n  - LocaleMatcher: New option to ignore one-way matches\n  - acceptLanguage() reimplemented via LocaleMatcher\n  - Data build tool: tzdbNames.res moved from the 'zone_tree' category to the 'zone_supplemental' category\n  - Fixed uses of u8'literals' broken by the C++20 introduction of the incompatible char8_t type\n  - and added a few API overloads to reduce the need for reinterpret_cast.\n  - Support for manipulating CLDR 37 unit identifiers in MeasureUnit.\n\n- Drop icu-versioning. (bsc#1159131)\n- Update to version 66.1\n  - Unicode 13 support\n  - Fix uses of u8'literals' broken by C++20 introduction of incompatible char8_t type.\n\n- Fixed an issue when Qt apps can't handle non-ASCII filesystem path. ([bsc#1162882)\n- Remove '/usr/lib(64)/icu/current'. (bsc#1158955)\n\n","status":"published","published":"2021-12-14T12:58:15Z","modified":"2021-12-14T12:58:15Z","updated_at":"2026-11-02T16:58:32.266854Z"}]}}