<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for icu.691</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2021:4063-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-12-14T12:58:15Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-12-14T12:58:15Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-12-14T12:58:15Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for icu.691</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for icu.691 fixes the following issues:


- Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. (jsc#SLE-17893)
- Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder'

- Update to release 69.1
  - For Norwegian, 'no' is back to being the canonical code, with
    'nb' treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  - Binary prefixes in measurement units (KiB, MiB, etc.)
  - Time zone offsets from local time with new APIs.
- Don't disable testsuite under 'qemu-linux-user'
- Fixed an issue when ICU test on 'aarch64 fails. (bsc#1182645)
- Drop 'SUSE_ASNEEDED' as the issue was in binutils. (bsc#1182252)
- Fix 'pthread' dependency issue. (bsc#1182252)

- Update to release 68.2
  - Fix memory problem in 'FormattedStringBuilder'
  - Fix assertion when 'setKeywordValue w/' long value.
  - Fix UBSan breakage on 8bit of rbbi
  - fix int32_t overflow in listFormat
  - Fix memory handling in MemoryPool::operator=()
  - Fix memory leak in AliasReplacer

- Add back icu.keyring.
- Update to release 68.1
  - PluralRules selection for ranges of numbers
  - Locale ID canonicalization now conforms to the CLDR spec including edge cases
  - DateIntervalFormat supports output options such as capitalization
  - Measurement units are normalized in skeleton string output
  - Time zone data (tzdata) version 2020d

- Add the provides for libicu to Make .Net core can install successfully. (bsc#1167603, bsc#1161007) 
- Update to version 67.1
  - Unicode 13 (ICU-20893, same as in ICU 66)
    - Total of 5930 new characters
    - 4 new scripts
    - 55 new emoji characters, plus additional new sequences
    - New CJK extension, first characters in plane 3: U+30000..U+3134A
    - New language at Modern coverage: Nigerian Pidgin
    - New languages at Basic coverage: Fulah (Adlam), Maithili,
      Manipuri, Santali, Sindhi (Devanagari), Sundanese
    - Region containment: EU no longer includes GB
    - Unicode 13 root collation data and Chinese data for collation and transliteration
  - DateTimePatternGenerator now obeys the 'hc' preference in the locale identifier
  - Various other improvements for ECMA-402 conformance
  - Number skeletons have a new 'concise' form that can be used in MessageFormat strings
  - Currency formatting options for formal and other currency display name variants
  - ListFormatter: new public API to select the style &amp; type
  - ListFormatter now selects the proper “and”/“or” form for Spanish &amp; Hebrew.
  - Locale ID canonicalization upgraded to implement the complete CLDR spec.
  - LocaleMatcher: New option to ignore one-way matches
  - acceptLanguage() reimplemented via LocaleMatcher
  - Data build tool: tzdbNames.res moved from the 'zone_tree' category to the 'zone_supplemental' category
  - Fixed uses of u8'literals' broken by the C++20 introduction of the incompatible char8_t type
  - and added a few API overloads to reduce the need for reinterpret_cast.
  - Support for manipulating CLDR 37 unit identifiers in MeasureUnit.

- Drop icu-versioning. (bsc#1159131)
- Update to version 66.1
  - Unicode 13 support
  - Fix uses of u8'literals' broken by C++20 introduction of incompatible char8_t type.

- Fixed an issue when Qt apps can't handle non-ASCII filesystem path. ([bsc#1162882)
- Remove '/usr/lib(64)/icu/current'. (bsc#1158955)

</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">openSUSE-SLE-15.3-2021-4063</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6RFJJGOGAP5YKMLXG2AX5Q3DJQF46QIT/</URL>
      <Description>E-Mail link for openSUSE-SU-2021:4063-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1158955</URL>
      <Description>SUSE Bug 1158955</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1159131</URL>
      <Description>SUSE Bug 1159131</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1161007</URL>
      <Description>SUSE Bug 1161007</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1162882</URL>
      <Description>SUSE Bug 1162882</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1167603</URL>
      <Description>SUSE Bug 1167603</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182252</URL>
      <Description>SUSE Bug 1182252</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182645</URL>
      <Description>SUSE Bug 1182645</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE Leap 15.3">
      <Branch Type="Product Name" Name="openSUSE Leap 15.3">
        <FullProductName ProductID="openSUSE Leap 15.3" CPE="cpe:/o:opensuse:leap:15.3">openSUSE Leap 15.3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="icu.691-69.1-7.3.2">
      <FullProductName ProductID="icu.691-69.1-7.3.2">icu.691-69.1-7.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="icu.691-devel-69.1-7.3.2">
      <FullProductName ProductID="icu.691-devel-69.1-7.3.2">icu.691-devel-69.1-7.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="icu.691-doc-69.1-7.3.2">
      <FullProductName ProductID="icu.691-doc-69.1-7.3.2">icu.691-doc-69.1-7.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libicu69-69.1-7.3.2">
      <FullProductName ProductID="libicu69-69.1-7.3.2">libicu69-69.1-7.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libicu69-bedata-69.1-7.3.2">
      <FullProductName ProductID="libicu69-bedata-69.1-7.3.2">libicu69-bedata-69.1-7.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libicu69-ledata-69.1-7.3.2">
      <FullProductName ProductID="libicu69-ledata-69.1-7.3.2">libicu69-ledata-69.1-7.3.2</FullProductName>
    </Branch>
    <Relationship ProductReference="icu.691-69.1-7.3.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:icu.691-69.1-7.3.2">icu.691-69.1-7.3.2 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="icu.691-devel-69.1-7.3.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:icu.691-devel-69.1-7.3.2">icu.691-devel-69.1-7.3.2 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="icu.691-doc-69.1-7.3.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:icu.691-doc-69.1-7.3.2">icu.691-doc-69.1-7.3.2 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libicu69-69.1-7.3.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:libicu69-69.1-7.3.2">libicu69-69.1-7.3.2 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libicu69-bedata-69.1-7.3.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:libicu69-bedata-69.1-7.3.2">libicu69-bedata-69.1-7.3.2 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libicu69-ledata-69.1-7.3.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.3">
      <FullProductName ProductID="openSUSE Leap 15.3:libicu69-ledata-69.1-7.3.2">libicu69-ledata-69.1-7.3.2 as a component of openSUSE Leap 15.3</FullProductName>
    </Relationship>
  </ProductTree>
</cvrfdoc>
