summaryrefslogtreecommitdiff
path: root/libicuuc/README-DEV
diff options
context:
space:
mode:
authorKaren Arutyunov <karen@codesynthesis.com>2020-04-07 21:21:28 +0300
committerKaren Arutyunov <karen@codesynthesis.com>2020-04-08 15:03:08 +0300
commitb7b91802a7d16cd9a435bcede5f31d2e3ccee653 (patch)
treed938999381f0d81032c3244501392ec753056c0c /libicuuc/README-DEV
parent3f87de068e8081598466018523b734543ae53ac0 (diff)
Release version 65.1.0+3v65.1.0+3
Fix the Debian-reported security issue CVE-2020-10531
Diffstat (limited to 'libicuuc/README-DEV')
-rw-r--r--libicuuc/README-DEV7
1 files changed, 7 insertions, 0 deletions
diff --git a/libicuuc/README-DEV b/libicuuc/README-DEV
index b52452a..daebd4e 100644
--- a/libicuuc/README-DEV
+++ b/libicuuc/README-DEV
@@ -13,6 +13,13 @@ so we patch it:
$ cp libicu/uc/ucasemap.cpp libicu
$ patch -p0 <libicu/ucasemap.cpp.patch
+Also we fix a security issue CVE-2020-10531 reported by Debian using the
+upstream's fix (commit b7d08bc04a4296982fcef8b6b8a354a9e4e7afca) as a base
+(dropping the test changes):
+
+$ cp libicu/uc/unistr.cpp libicu
+$ patch -p0 <libicu/unistr.cpp.patch
+
Copy the required upstream auto-generated libicudata source files into
libicu/data/, replacing '65' with a major version. Here we assume that the
upstream package is built on the ASCII-based platform with the little-endian