Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v10.x] deps: backport ICU-20958 to fix CVE-2020-10531 #33572

Closed
wants to merge 3 commits into from

Commits on Apr 17, 2020

  1. build: allow clang 10+ in configure.py

    Detected on NetBSD/amd64.
    
    Fixes: nodejs#29536
    
    PR-URL: nodejs#29541
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
    Reviewed-By: David Carlier <devnexen@gmail.com>
    Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Richard Lau <riclau@uk.ibm.com>
    krytarowski authored and richardlau committed Apr 17, 2020
    Configuration menu
    Copy the full SHA
    1b5adbc View commit details
    Browse the repository at this point in the history
  2. build: move doc versions JSON file out of out/doc

    Move the generated previous doc versions JSON file out of `out/doc` to
    prevent it being included in the distributed packages.
    
    Signed-off-by: Richard Lau <riclau@uk.ibm.com>
    
    PR-URL: nodejs#32728
    Fixes: nodejs/build#2276
    Reviewed-By: Shelley Vohr <codebytere@gmail.com>
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
    Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
    richardlau committed Apr 17, 2020
    Configuration menu
    Copy the full SHA
    a85721a View commit details
    Browse the repository at this point in the history

Commits on May 27, 2020

  1. deps: backport ICU-20958 to fix CVE-2020-10531

    Add floating patch for ICU 64.2 from unicode-org/icu@18b212f.
    
    Original commit message:
        ICU-21032 Backport to 64.x: ICU-20958 Prevent SEGV_MAPERR in append
    
        See nodejs#971
    
        (cherry picked from commit b7d08bc04a4296982fcef8b6b8a354a9e4e7afca)
    
    Refs: https://unicode-org.atlassian.net/browse/ICU-20958
    Refs: unicode-org/icu#1155
    richardlau committed May 27, 2020
    Configuration menu
    Copy the full SHA
    530dea3 View commit details
    Browse the repository at this point in the history