------------------------------------------------------------------ --- Changelog.all ----------- Wed Mar 2 13:52:34 UTC 2011 ------ ------------------------------------------------------------------ ------------------------------------------------------------------ ------------------ 2011-3-1 - Mar 1 2011 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.4.2 (bnc#669550). CVE Numbers: CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0564, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0568, CVE-2011-0570, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0605, CVE-2011-0606 - use source service ------------------------------------------------------------------ ------------------ 2011-2-10 - Feb 10 2011 ------------------- ------------------------------------------------------------------ ++++ sesam_srv: - bnc#660444 - sesam_srv is not installable ------------------------------------------------------------------ ------------------ 2011-2-9 - Feb 9 2011 ------------------- ------------------------------------------------------------------ ++++ flash-player: - updated to 10.2.152.26 (bnc#670531): * CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, * CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, * CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, * CVE-2011-0608 * http://www.adobe.com/support/security/bulletins/apsb11-02.html ------------------------------------------------------------------ ------------------ 2011-2-3 - Feb 3 2011 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 11.01 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1101/ - fixes [bnc#667639], CVE-2011-0681 - CVE-2011-0687 ------------------------------------------------------------------ ------------------ 2011-2-1 - Feb 1 2011 ------------------- ------------------------------------------------------------------ ++++ suse-ami-tools: - Initial build in OBS ------------------------------------------------------------------ ------------------ 2011-1-5 - Jan 5 2011 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - Update to 6u23 (bnc#662459) http://www.oracle.com/technetwork/java/javase/6u23releasenotes-191058.html ++++ unrar: - Update to 4.0.4 and remade updated man page with help2man - Upstream changes : * previous beta versions could truncate some of files, extracted from ISO 9660 archives. * Version 4.00 beta 3 * Now switch -ep3 converts not only disk letters, but also UNC paths. So \\server\share will be converted to __server\share when archiving and restored to the original \\server\share when extracting with -ep3. * previous beta could fail to unpack self-extracting and multivolume CAB archives; * "Create a new folder" command always created new folders in the root archive folder; * "Remove redundant folders from extraction path" option did not work; * previous beta crashed when displaying archive comments with ANSI escape sequences; * switches -cl and -cu did not work. * Version 4.00 beta 2 * If you enabled "Use for all archives" option when entering the default password (Ctrl+P) and specified the empty password, extract and test commands will skip all encrypted archives. * Version 4.00 beta 1 * RAR decompression speed is improved. Depending on data type, decompression can be up to 30% faster than in previous versions. Both the general RAR algorithm and most of special RAR multimedia methods benefit from this improvement. The only module of RAR algorithm, which is not affected, is "Text compression" method. * UDF support is upgraded to UDF 2.50 revision. It makes possible to unpack most of Blu-ray ISO files; * Changes in -x switch syntax. Now you can specify a wildcard exclusion mask for folders. Such mask must have the trailing '\' character, like -x*tmp*\ or -x*\temp\ * New error code 10 ("no files") is added to list of error codes returned in command line mode by RAR and WinRAR. This new code can be returned by archive, extract, delete and repair commands. It means that RAR did not find any files matched the specified file or archive mask. * Now switch -ep3 converts not only disk letters, but also UNC paths. So \\server\share will be converted to __server\share when archiving and restored to the original \\server\share when extracting with -ep3. * renaming a file in archive could also rename all other files with the same name in other folders of the same archive; * previous versions displayed the wrong total packed size in "Info" command for multivolume CAB archives; - See "http://www.rarlab.com/rarnew.htm" for more details ------------------------------------------------------------------ ------------------ 2010-12-16 - Dec 16 2010 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 11.00 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1100/ - fixes [bnc#659882] - drop ppc build as upstream is not creating packages anymore ------------------------------------------------------------------ ------------------ 2010-12-3 - Dec 3 2010 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.4.1 for bnc#651232 (swampid#37028). Fix a memory corruption vulnerability that could potentially lead to code execution (CVE-2010-4091). ------------------------------------------------------------------ ------------------ 2010-11-4 - Nov 4 2010 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.1.102.64 (bnc#650145): * CVE-2010-3654 ------------------------------------------------------------------ ------------------ 2010-10-24 - Oct 24 2010 ------------------- ------------------------------------------------------------------ ++++ opera: - subpackages (gtk,kde4) should require main package ------------------------------------------------------------------ ------------------ 2010-10-18 - Oct 18 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fix bnc#46073 - VUL-0: java-1_6_0-sun Security Update to u22 CVE-2010-3556 CVE-2010-3562 CVE-2010-3565 CVE-2010-3566 CVE-2010-3567 CVE-2010-3571 CVE-2010-3554 CVE-2010-3563 CVE-2010-3568 CVE-2010-3569 CVE-2010-3558 CVE-2010-3552 CVE-2010-3559 CVE-2010-3572 CVE-2010-3553 CVE-2010-3555 CVE-2010-3550 CVE-2010-3570 CVE-2010-3561 CVE-2009-3555 CVE-2010-1321 CVE-2010-3549 CVE-2010-3557 CVE-2010-3541 CVE-2010-3573 CVE-2010-3574 CVE-2010-3548 CVE-2010-3551 CVE-2010-3560 ------------------------------------------------------------------ ------------------ 2010-10-12 - Oct 12 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fix bnc#355868: Could not initialize class javax.crypto.SunJCE_b * post install script no longer broke the $JREDIR/lib/security/*policy.jar ++++ opera: - updated to 10.63 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1063/ - updated to 10.62 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1062/ ------------------------------------------------------------------ ------------------ 2010-10-6 - Oct 6 2010 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.4 for security fixes bnc#638466 swampid#36257 - CVE-2010-2883 CVE-2010-2884 CVE-2010-2887 CVE-2010-2888 - CVE-2010-2889 CVE-2010-2890 CVE-2010-3619 CVE-2010-3620 - CVE-2010-3621 CVE-2010-3622 CVE-2010-3623 CVE-2010-3624 - CVE-2010-3625 CVE-2010-3626 CVE-2010-3627 CVE-2010-3628 - CVE-2010-3629 CVE-2010-3630 CVE-2010-3631 CVE-2010-3632 - CVE-2010-3658 CVE-2010-3656 CVE-2010-3657 ------------------------------------------------------------------ ------------------ 2010-9-20 - Sep 20 2010 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.1.85.3 (bnc#639541): * CVE-2010-2884 ------------------------------------------------------------------ ------------------ 2010-9-1 - Sep 1 2010 ------------------- ------------------------------------------------------------------ ++++ gst-fluendo-mp3: - Update to version 12 (released August 27, 2010), and update the source from svn (as of September 1st, 2010). - The binaries have been fetched from the Fluendo shop, as per our agreement with Fluendo. ------------------------------------------------------------------ ------------------ 2010-8-30 - Aug 30 2010 ------------------- ------------------------------------------------------------------ ++++ opera: - split off gtk and kde4 engines [bnc#635360] ------------------------------------------------------------------ ------------------ 2010-8-26 - Aug 26 2010 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.3.4 for integer overflow(bnc#629134, swampid#35325). CVE-2010-2862, CVE-2010-1240. - Dismiss many nasty symlink messages(bnc#627964). - Add the manual for acroread(bnc#631267). - Fix prints dirname error upon start(bnc#574580). ------------------------------------------------------------------ ------------------ 2010-8-23 - Aug 23 2010 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.61 (build 6430) * full changelog available at: http://www.opera.com/docs/changelogs/unix/1061/ * fixes [bnc#630771] ------------------------------------------------------------------ ------------------ 2010-8-18 - Aug 18 2010 ------------------- ------------------------------------------------------------------ ++++ unrar: - update to 3.9.10 * no changelog available ------------------------------------------------------------------ ------------------ 2010-8-10 - Aug 10 2010 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.1.82.76 (bnc#630108): * CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE2010-2215, CVE-2010-2216 ------------------------------------------------------------------ ------------------ 2010-7-22 - Jul 22 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - Update to 6u21 (bnc#624569) ------------------------------------------------------------------ ------------------ 2010-7-7 - Jul 7 2010 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.60 (build 6386) * full changelog available at: http://www.opera.com/docs/changelogs/unix/1060/ * fixes [bnc#583620] [bnc#607823] [bnc#615942] ------------------------------------------------------------------ ------------------ 2010-7-1 - Jul 1 2010 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.3.3 for security fixes(bnc#612064, swampid#34217). CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, CVE-2010-2212. ------------------------------------------------------------------ ------------------ 2010-6-28 - Jun 28 2010 ------------------- ------------------------------------------------------------------ ++++ gst-fluendo-mp3: - Rename the resulting package to gstreamer-0_10-fluendo-mp3 (with appropriate Provides/Obsoletes), to follow the convention for gstreamer packages. - Improve summary and description. ------------------------------------------------------------------ ------------------ 2010-6-11 - Jun 11 2010 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.1.53.64 (bnc#612063): * CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161, CVE-2010-2162, CVE-2010-2163, CVE-2010-2164, CVE-2010-2165, CVE-2010-2166, CVE-2010-2167, CVE-2010-2169, CVE-2010-2170, CVE-2010-2171, CVE-2010-2172, CVE-2010-2173, CVE-2010-2174, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2179, CVE-2010-2180, CVE-2010-2181, CVE-2010-2182, CVE-2010-2183, CVE-2010-2184, CVE-2010-2185, CVE-2010-2186, CVE-2010-2187, CVE-2010-2188, CVE-2010-2189 ------------------------------------------------------------------ ------------------ 2010-5-29 - May 29 2010 ------------------- ------------------------------------------------------------------ ++++ cg: - Don't include examples since they are wrongly linked ------------------------------------------------------------------ ------------------ 2010-4-29 - Apr 29 2010 ------------------- ------------------------------------------------------------------ ++++ cg: - Fix dependency by rebuilding cgfxcat (bnvc #548246). Won't be necessary with next code drop from NVidia. ------------------------------------------------------------------ ------------------ 2010-4-26 - Apr 26 2010 ------------------- ------------------------------------------------------------------ ++++ cg: - Update to 2.2 version of February2010 * Improve EXT_gpu_shader4 handling * Improve handling of extensions on older versions of OpenGL * Performance improvements * Bug fixes ------------------------------------------------------------------ ------------------ 2010-4-20 - Apr 20 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fix bnc#596010 - VUL-0: Java webstart code exec - CVE-2010-0886 codebase parameter in JNLP file is required starting this release - Java SE 6 update 20 - fix bnc#597827 - symlink /usr/bin/javaws to /etc/alternatives/javaws is missing ------------------------------------------------------------------ ------------------ 2010-4-19 - Apr 19 2010 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.3.2 for security fixes(bnc#595108, swampid#32589). CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193, CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197, CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202, CVE-2010-0203, CVE-2010-0204, CVE-2010-1241 ------------------------------------------------------------------ ------------------ 2010-3-31 - Mar 31 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fix bnc#592589 - VUL-0: Sun Java 6 Update 19 CVE-2009-3555, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849, CVE-2010-0850 - fix [bnc#578877] - jvisualvm not present in PATH ------------------------------------------------------------------ ------------------ 2010-2-13 - Feb 13 2010 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.0.45.2 (bnc#578997): * CVE-2010-0186, CVE-2010-0187 ------------------------------------------------------------------ ------------------ 2010-1-28 - Jan 28 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed [bnc#574502] - VUL-0: java-1_6_0-sun update u18 ------------------------------------------------------------------ ------------------ 2010-1-23 - Jan 23 2010 ------------------- ------------------------------------------------------------------ ++++ cg: - Remove dependency to libGLU.so. Really fixes bnc #548246. ------------------------------------------------------------------ ------------------ 2010-1-22 - Jan 22 2010 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.3 for security fixes(bnc#564742, swampid#29655). CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324 ------------------------------------------------------------------ ------------------ 2010-1-14 - Jan 14 2010 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed bnc#570306 - run javaws -viewer from GUI ------------------------------------------------------------------ ------------------ 2009-12-16 - Dec 16 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - also provide libflashsupport, otherwise patch update complains about the obsolete ------------------------------------------------------------------ ------------------ 2009-12-15 - Dec 15 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - don't obsolete libflashsupport for now (bnc#560259) ++++ xv: - Update to jumbo patch enhancment 20081216 from Greg Roelofs. - Forward my patches to Greg Roelofs. - Add my further test cases to xv-tests.tar.bz2 - Add a notify warning about the risks of using XV in the package data base ------------------------------------------------------------------ ------------------ 2009-12-9 - Dec 9 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.0.42.34 (bnc#560259): * CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800, CVE-2009-3951 ------------------------------------------------------------------ ------------------ 2009-11-23 - Nov 23 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.10 (build 4742) * full changelog available at: http://www.opera.com/docs/changelogs/unix/1010/ ------------------------------------------------------------------ ------------------ 2009-11-6 - Nov 6 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - flash player makes no sound in x86_64 if libasound.so.2 is not installed and pulseaudio is disabled. ------------------------------------------------------------------ ------------------ 2009-11-5 - Nov 5 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed [bnc#552586] - VUL-0: java-1_6_0-sun: u17 update ------------------------------------------------------------------ ------------------ 2009-11-3 - Nov 3 2009 ------------------- ------------------------------------------------------------------ ++++ unrar: - updated patches to apply with fuzz=0 ------------------------------------------------------------------ ------------------ 2009-11-2 - Nov 2 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.01 (build 4682) * full changelog available at: http://www.opera.com/docs/changelogs/unix/1001/ ------------------------------------------------------------------ ------------------ 2009-10-30 - Oct 30 2009 ------------------- ------------------------------------------------------------------ ++++ moneyplex: - update to 2009 version ------------------------------------------------------------------ ------------------ 2009-10-20 - Oct 20 2009 ------------------- ------------------------------------------------------------------ ++++ cg: - Update to 2.2 version of October2009 * Performance improvements * Bug fixes - Require Mesa-devel due to usr/bin/cgfxcat being linked against libGLU.so (w/o .1). Fixes bnc #548246. ------------------------------------------------------------------ ------------------ 2009-10-19 - Oct 19 2009 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.2 because of security fixes (bnc#546083) ------------------------------------------------------------------ ------------------ 2009-10-1 - Oct 1 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - fix bnc#539656 - obsolete libflashsupport ------------------------------------------------------------------ ------------------ 2009-9-2 - Sep 2 2009 ------------------- ------------------------------------------------------------------ ++++ acroread: - Add a Source: entry for the rpmlintrc file. ------------------------------------------------------------------ ------------------ 2009-9-1 - Sep 1 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 final (build 4585) * full changelog available at: http://my.opera.com/desktopteam/blog/opera-10-goes-final - replaced icons with upstream ones - hopefully closes bugs [bnc#491876], [bnc#514728], [bnc#522940] ------------------------------------------------------------------ ------------------ 2009-8-27 - Aug 27 2009 ------------------- ------------------------------------------------------------------ ++++ acroread: - Update to 9.1.3 - Add an rpmlintrc file - Don't list acroread.patch as a patch but rather as Source: so that rpmlint won't complain. ------------------------------------------------------------------ ------------------ 2009-8-25 - Aug 25 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 rc (build 4570) * full changelog available at: http://my.opera.com/desktopteam/blog/2009/08/25/opera-10-0-release-candidate ------------------------------------------------------------------ ------------------ 2009-8-13 - Aug 13 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 beta 3 (build 4538) * full changelog available at: http://my.opera.com/desktopteam/blog/2009/08/13/opera-10-0-beta-3 ------------------------------------------------------------------ ------------------ 2009-8-10 - Aug 10 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 (build 4529) * full changelog available at: http://my.opera.com/desktopteam/blog/2009/08/07/whats-with-the-red-dots-on-the-tabs - use Qt4 build for x86 and x86_64 (no ppc Qt4 build yet) ------------------------------------------------------------------ ------------------ 2009-8-6 - Aug 6 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - also provide flash-plugin ++++ opera: - updated to 10.00 (build 4520) * full changelog available at: http://my.opera.com/desktopteam/blog/2009/07/31/tab-thumbnails-on-the-sides-and-opera-unite-improvements ------------------------------------------------------------------ ------------------ 2009-8-5 - Aug 5 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed bnc#528268: VUL-0: sun jdk 5 u20 / jdk 6 u 15 update * Added one new root certificate and removed 3 root certificates from Entrust. (Refer to 6805338.) Added three new root certificates from * Keynectis. (Refer to 6845457.) * Added three new root certificates from Quovadis. (Refer to 6846473.) * JNLPAppletLauncher in blacklist (See Sun Alert 263490.) * + many bugfixes ------------------------------------------------------------------ ------------------ 2009-7-31 - Jul 31 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - update to 10.0.32.18 (bnc#524508): * CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868, CVE-2009-1869, CVE-2009-1870 ------------------------------------------------------------------ ------------------ 2009-7-22 - Jul 22 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 (build 4502) * full changelog available at: http://my.opera.com/desktopteam/blog/2009/07/21/new-snapshot-new-possibilities ------------------------------------------------------------------ ------------------ 2009-7-16 - Jul 16 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 (build 4493) * lots of changes - full list is available at: http://my.opera.com/desktopteam/blog/2009/07/16/more-than-beta-2 - added download script (download.sh, to make updates easier) ------------------------------------------------------------------ ------------------ 2009-7-13 - Jul 13 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 (build 4478) * lots of changes - full list is available at: http://my.opera.com/desktopteam/blog/2009/07/09/snapshot ------------------------------------------------------------------ ------------------ 2009-6-23 - Jun 23 2009 ------------------- ------------------------------------------------------------------ ++++ xv: - In DirW do not move cursor if no filename is there (bnc#506573) ------------------------------------------------------------------ ------------------ 2009-6-22 - Jun 22 2009 ------------------- ------------------------------------------------------------------ ++++ unrar: - added libunrar* and libunrar*-devel subpackage bnc#513804 - added man page from debian - updated to 3.9.4 * no changelog available ------------------------------------------------------------------ ------------------ 2009-6-17 - Jun 17 2009 ------------------- ------------------------------------------------------------------ ++++ flash-player: - fix capitalization of start menu entry ------------------------------------------------------------------ ------------------ 2009-6-15 - Jun 15 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 10.00 (aka build 4440) Opera Unite * a collaborative technology that uses a compact server inside the Opera desktop browser to share data and services User Interface * "Remove From Toolbar" and other toolbar customization options have been moved into a submenu. * The ability to reset toolbar customization has been added. * The search field can now be resized. Mail, News, Chat * A "delete after X number of days" facility has been added. * Mails can now have horizontal scrollbars. * Fixes have been made to mail compose. * The adding of links to HTML mails has been improved. * A recovery mechanism for corrupt mail databases has been added. * Feed progress which sometimes stuck on non-existent resources has been fixed. * Attachments in multipart/mixedpart of multipart/alternative mail are now correctly displayed. * When viewing a message, message subjects are now a text field again instead of a button. * Additional online feed readers have been added to the feed preview page. * Sent mail is now shown when using threading in the e-mail client. * A thread button has been added to the message list toolbar. * Keyboard shortcuts for Go to Thread (D), Watch Thread (Ctrl-D), and Ignore Thread (Ctrl-Shift-D) have been added. * The encoding mismatch dialog has been removed. Display and scripting * Full RGBA support is now included. * Basic Web font support has been added: o font specification (@font-face CSS rule) with the font-family descriptor that controls font choices o src descriptor with local and remote o Truetype (ttf) and Scalable Vector Graphics (svg) font support * Support has been added for the W3C Selectors API. * The objects returned by getClientRects() and getBoundingClientRect() have been renamed to ClientRectList and ClientRect instead of TextRectangle and TextRectangleList. * XMLHttpRequests will now trigger start-loading/end-loading events. * The proprietary window.setDocument method has been removed. * Support has been added for the SVGElement.currentFps and SVGElement.targetFps properties to read and control SVG frames per second. * The load event for scripts is now sent after the script is executed rather than before. * The load event is now sent to frame/iframe/object elements before it is sent to the document. * A highlight will no longer be added when HTMLElement.focus() is called unless keyboard navigation is already activated. Security * Support for TLS 1.2 has been added. * SSL v2 and weak cipher support have been completely removed. Miscellaneous * Opera now supports alpha transparent widget windows on Linux (rounded corners). * The painting of windowless plugins has been fixed. * A Java-related issue has been fixed. * Fixes have been applied to font fallback problems. * Opera no longer recognizes or supports the http://www.w3.org/TR/REC-html40 namespace as an alias of http://www.w3.org/1999/xhtml. * Core fixes, including fixes for getElementsByClassName have been made, which should now work with multiple classes in className. * Regex \b is now correctly not matching the point between a letter and underscore. * Facebook chat has been fixed. * Image downloading has been improved. * Gmail problems have been solved. * Files generated by the Opera installer now use the same naming scheme across different platforms. * Support for UTF-32 encoding has been removed. * User JS files will now be executed in alphabetical order rather than file system order. * The first ID (instead of the last) is now used on pages with duplicate IDs when navigating to fragment IDs. * Support for the altGlyph element in SVGs has been added. * Support for 32-bit alpha in BMP and RLE-encoded BMP images has been added. * Several memory leaks have been plugged. * Several stability issues have been fixed. * Network access for widgets is now opt-in: o All existing widgets must be updated in order to have network access. o All widgets on widgets.opera.com have been given Internet access. o Network access is specified using the network attribute of the widget element: + Widgets that use will have Intranet access only. + Widgets that use will have Intranet and Internet access. - replaced icons with Tango version by Tomas Kebert ------------------------------------------------------------------ ------------------ 2009-6-11 - Jun 11 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed bnc#510016: Chinese fonts display Merged fontconfig.SuSE.properties with openjdk: * used logical font names ("DejaVu Sans") instead of X11 names * use Arphic PL fonts for Chinse, instead of non existent sazanami * use UnDotum and UnBatang fonts for Korean, instead of baekmukttf-batang - fixed bnc#494536: Updating Java overwrites a custom certs Mark the following files as %config(noreplace): * jre/lib/security/cacerts * jre/lib/security/java.policy * jre/lib/security/java.security * jre/lib/security/javaws.security * /usr/lib/jvm-private/java-1_6_0-sun/jce/vanilla/local_policy.jar * /usr/lib/jvm-private/java-1_6_0-sun/jce/vanilla/US_export_policy.jar (don't remove the policy files in jre/lib/security - they're just symlinks) ------------------------------------------------------------------ ------------------ 2009-6-1 - Jun 1 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed bnc#507056: updated to 1.6.0.u14 - Support for blacklisting signed jar files. - Java HotSpot VM 14.0 with more efficient SoftReference processing and improvements to Parallel Compacting garbage collection. Optionally available are two new features - escape analysis and compressed object pointers: * Optimization Using Escape Analysis: -XX:+DoEscapeAnalysis * Compressed Object Pointers: -XX:+UseCompressedOops (improve performance on 64bit JRE) * Garbage First (G1) Garbage Collector: -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC production use of G1 is only permitted where a Java support contract has been purchased, which is not provides by SUSE! - Improvement TreeMap Iteration - JAX WS 2.1.6 and JAXB 2.1.10 - JAX-WS 2.1.6 and JAXB 2.1.10 are integrated into JDK 6u14. You can find more details about the new features in the JAX-WS 2.1.6 changelog and in the JAXB 2.1.10 changelog. - JavaDB 10.4.2.1 - Java VisualVM Updates: * CPU usage and GC activity graph in the Monitor tab * Table view in the Threads tab * Command line options: --openpid, --openjmx, --openfile * Compare Memory Snapshots action in the context menu * Copy To Clipboard / Save To File buttons in the About dialog * Monitoring IBM JVM via JMX connection * Based on NetBeans Platform 6.5 and NetBeans Profiler 6.5 * Faster computation of references, and improved readability of path to GC root in HeapWalker * Improved integration of the Visual GC tool ------------------------------------------------------------------ ------------------ 2009-5-25 - May 25 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed bnc#506730: Sun Java uses own fonts instead of platform fonts ------------------------------------------------------------------ ------------------ 2009-5-19 - May 19 2009 ------------------- ------------------------------------------------------------------ ++++ acroread: - VUL-0: acroread: Adobe Reader 'getAnnots()' Javascript Function Remote Code Execution [bnc#499097] ------------------------------------------------------------------ ------------------ 2009-4-23 - Apr 23 2009 ------------------- ------------------------------------------------------------------ ++++ cg: - Update to Version 2.2 of April 2009: * Tons of changes since 1.5. * Changes 2.1 -> 2.2 are: * DirectX10 and GLSL geometry profiles (gs_4_0 AND glslg) * Support for "latest" profile keyword in CgFX compile statements * Additional API routines (see New API for a complete list) * Support for pack_matrix() pragma * Arrays of shaders can now be used in CgFX files * Libraries for 64 bit Solaris development * Migrated the OpenGL examples onto GLEW * New examples including: examples/Direct3D10/advanced combine_programs gs_shrinky gs_simple examples/OpenGL/advanced cgfx_latest examples/Tools cgfxcat cginfo * New documentation * Updated reference manual pages for new profiles and entry points * Bug fixes ------------------------------------------------------------------ ------------------ 2009-4-20 - Apr 20 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - fixed bnc#496489: added sample to demo package ------------------------------------------------------------------ ------------------ 2009-3-26 - Mar 26 2009 ------------------- ------------------------------------------------------------------ ++++ java-1_6_0-sun: - update to 1.6.0u13 (bnc#488926) - moved new plugin file to -plugin package ------------------------------------------------------------------ ------------------ 2009-3-25 - Mar 25 2009 ------------------- ------------------------------------------------------------------ ++++ acroread: - VUL-0: acroread security update [bnc#488619] ------------------------------------------------------------------ ------------------ 2009-3-4 - Mar 4 2009 ------------------- ------------------------------------------------------------------ ++++ opera: - updated to 9.64 (aka build 2480) * Security * Fixed an issue where specially crafted JPEG images could be used to execute arbitrary code, as reported by Tavis Ormandy of the Google Security Team; see our advisory * Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by Adam Barth; details will be disclosed at a later date. * Fixed a moderately severe issue; details will be disclosed at a later date. * Added Untrusted Rootstore Capability: o Opera downloads only the detailed information about untrusted (blacklisted) certificates when they are encountered o If download fails for certificate information in the list, Opera considers any certificate matching the ID as untrusted * Added version conditional fetching of certificate dependencies from an online repository * Fixed a problem downloading the CRL (Certificate Revocation List) * Fixed a problem that could cause SSL to deadlock in one state, hanging the connection * Fixed a problem that could cause the incorrect calculation of Certificate IDs * Implemented Extended Validation (EV) for cross-signed EV Root Certificates not shipped by default * Implemented preshipping of the Entrust 2048 CA (Certificate Authority) * Implemented Root Certificate fetching from an online repository when an intermediate matches a certificate in the repository * Improved support for weak encryption when importing .p12 private certificates * Prevented security information documents from being written to disk * Miscellaneous * Fixed a problem which created separate feed notifications; Opera now groups them together * Fixed a problem with the backspace key event in the Flash plug-in * Fixed a problem with inline find when no text was entered, and the Enter key was pressed * Fixed an instability error with the 64 bit Linux version