-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ## ## Patch description of patch a6d9e191df0bd2e6d9f411af0bac98ae ## Kind: security Shortdescription.english: Security update for the Mozilla suite Longdescription.english: Applies to Package: mozilla,mozilla-xmlterm,mozilla-venkman,mozilla-spellchecker ,mozilla-mail,mozilla-irc,mozilla-dom-inspector,mozilla-cale ndar Product(s): Release: 20050125 Obsoletes: 7c9163c638b7795bec6f012e000370ac Indications Everyone using mozilla should update. Contraindications None. Problem description This updates resolves several security bugs in the mozilla web browser. These are tracked by the Mozilla Bug Ids #226669, #245066, #243511, #250862, #254303, #231083, #235781, #253241, #263460, #262689, #258173, #257431, #258173, #264959, #265181, #265404, #249332, #124750, #265055, #265456, #157994, #244177 and fix various buffer overflows, javascript problems, NNTP handling and similar. Also a packaging problem within the SUSE Mozilla packages was fixed which could lead to non-working Mozilla plugins after update of those plugins. Solution Please install the updates provided at the location noted below. Installation notes This update is provided as an RPM package that can easily be installed onto a running system by using this command: rpm -Fvh mozilla.rpm mozilla-xmlterm.rpm mozilla-venkman.rpm mozilla- spellchecker.rpm mozilla-mail.rpm mozilla-irc.rpm mozilla-dom-inspect or.rpm mozilla-calendar.rpm Hsilgne.noitpircsedgnol: Size: 12190 MinYaST1Version: MinYaST2Version: UpdateOnlyInstalled: true Packages: ## ## -----> mozilla <----- ## Filename: mozilla.rpm Label: The OpenSource version of the Netscape browser Series: i586 Size: 30731535 9503226 PatchRpmBasedOn: 1.0.1-38 1.4-120 1.4.1-17 1.4.1-17 1.4.1-2 1.4.1-21 1.4.1-23 1.4.1-6 1.4.1-7 PatchRpmSize: 30731535 9503959 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Productivity/Networking/Web/Browsers Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: libstdc++ fileutils textutils /bin/sh /bin/bash /bin/sh ld-linux.so.2 libICE.so.6 libSM.so.6 libX11.so.6 libXext.so.6 libXi.so.6 libXp.so.6 libXt.so.6 libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.2) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.2) libdl.so.2 libdl.so.2(GLIBC_2.0) libdl.so.2(GLIBC_2.1) libgcc_s.so.1 libgcc_s.so.1(GLIBC_2.0) libgdk-1.2.so.0 libgkgfx.so libglib-1.2.so.0 libgmodule-1.2.so.0 libgtk-1.2.so.0 libgtksuperwin.so libgtkxtbin.so libjpeg.so.62 libjsj.so liblcms.so libldap50.so libm.so.6 libm.so.6(GLIBC_2.0) libmng.so.1 libmoz_art_lgpl.so libmozjs.so libnspr4.so libnss3.so libnss3.so(NSS_3.2) libnss3.so(NSS_3.3) libnss3.so(NSS_3.3.1) libnss3.so(NSS_3.4) libnss3.so(NSS_3.5) libnss3.so(NSS_3.6) libnss3.so(NSS_3.7) libnss3.so(NSS_3.8) libnss3.so(NSS_3.9) libplc4.so libplds4.so libpng12.so.0 libprldap50.so libpthread.so.0 libpthread.so.0(GLIBC_2.0) libpthread.so.0(GLIBC_2.1) libpthread.so.0(GLIBC_2.2) libsmime3.so libsmime3.so(NSS_3.2) libsmime3.so(NSS_3.4) libsmime3.so(NSS_3.4.1) libsmime3.so(NSS_3.6) libsoftokn3.so libsoftokn3.so(NSS_3.4) libssl3.so libssl3.so(NSS_3.2) libssl3.so(NSS_3.4) libstdc++.so.5 libstdc++.so.5(CXXABI_1.2) libstdc++.so.5(GLIBCPP_3.2) libxlibrgb.so libxpcom.so libxpcom_compat.so libz.so.1 rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: web_browser libaccessibility.so libaccessibility.so(EXPORTED) libaccessibility.so(libaccessibility.so) libappcomps.so libappcomps.so(EXPORTED) libappcomps.so(libappcomps.so) libautoconfig.so libautoconfig.so(EXPORTED) libautoconfig.so(libautoconfig.so) libcaps.so libcaps.so(EXPORTED) libcaps.so(libcaps.so) libchrome.so libchrome.so(EXPORTED) libchrome.so(libchrome.so) libcomposer.so libcomposer.so(EXPORTED) libcomposer.so(libcomposer.so) libcookie.so libcookie.so(EXPORTED) libcookie.so(libcookie.so) libdocshell.so libdocshell.so(EXPORTED) libdocshell.so(libdocshell.so) libeditor.so libeditor.so(EXPORTED) libeditor.so(libeditor.so) libembedcomponents.so libembedcomponents.so(EXPORTED) libembedcomponents.so(libembedcomponents.so) libfileview.so libfileview.so(EXPORTED) libfileview.so(libfileview.so) libgfx_gtk.so libgfx_gtk.so(EXPORTED) libgfx_gtk.so(libgfx_gtk.so) libgfxps.so libgfxps.so(EXPORTED) libgfxps.so(libgfxps.so) libgfxxprint.so libgfxxprint.so(EXPORTED) libgfxxprint.so(libgfxxprint.so) libgkgfx.so libgklayout.so libgklayout.so(EXPORTED) libgklayout.so(libgklayout.so) libgkplugin.so libgkplugin.so(EXPORTED) libgkplugin.so(libgkplugin.so) libgtkembedmoz.so libgtksuperwin.so libgtkxtbin.so libhtmlpars.so libhtmlpars.so(EXPORTED) libhtmlpars.so(libhtmlpars.so) libi18n.so libi18n.so(EXPORTED) libi18n.so(libi18n.so) libimglib2.so libimglib2.so(EXPORTED) libimglib2.so(libimglib2.so) libimgmng.so libimgmng.so(EXPORTED) libimgmng.so(libimgmng.so) libjar50.so libjar50.so(EXPORTED) libjar50.so(libjar50.so) libjsd.so libjsd.so(EXPORTED) libjsd.so(libjsd.so) libjsdom.so libjsdom.so(EXPORTED) libjsdom.so(libjsdom.so) libjsj.so libldap50.so libmork.so libmork.so(EXPORTED) libmork.so(libmork.so) libmoz_art_lgpl.so libmozfind.so libmozfind.so(EXPORTED) libmozfind.so(libmozfind.so) libmozjs.so libmozldap.so libmozldap.so(EXPORTED) libmozldap.so(libmozldap.so) libnecko.so libnecko.so(EXPORTED) libnecko.so(libnecko.so) libnecko2.so libnecko2.so(EXPORTED) libnecko2.so(libnecko2.so) libnsappshell.so libnsappshell.so(EXPORTED) libnsappshell.so(libnsappshell.so) libnspr4.so libnsprefm.so libnsprefm.so(EXPORTED) libnsprefm.so(libnsprefm.so) libnss3.so libnss3.so(NSS_3.2) libnss3.so(NSS_3.2.1) libnss3.so(NSS_3.3) libnss3.so(NSS_3.3.1) libnss3.so(NSS_3.4) libnss3.so(NSS_3.5) libnss3.so(NSS_3.6) libnss3.so(NSS_3.7) libnss3.so(NSS_3.7.1) libnss3.so(NSS_3.8) libnss3.so(NSS_3.9) libnss3.so(libnss3.so) libnssckbi.so libnssckbi.so(NSS_3.1) libnssckbi.so(libnssckbi.so) libnullplugin.so liboji.so liboji.so(EXPORTED) liboji.so(liboji.so) libp3p.so libp3p.so(EXPORTED) libp3p.so(libp3p.so) libpipboot.so libpipboot.so(EXPORTED) libpipboot.so(libpipboot.so) libpipnss.so libpipnss.so(EXPORTED) libpipnss.so(libpipnss.so) libpippki.so libpippki.so(EXPORTED) libpippki.so(libpippki.so) libplc4.so libplds4.so libpref.so libpref.so(EXPORTED) libpref.so(libpref.so) libprldap50.so libprofile.so libprofile.so(EXPORTED) libprofile.so(libprofile.so) librdf.so librdf.so(EXPORTED) librdf.so(librdf.so) libsmime3.so libsmime3.so(NSS_3.2) libsmime3.so(NSS_3.2.1) libsmime3.so(NSS_3.3) libsmime3.so(NSS_3.4) libsmime3.so(NSS_3.4.1) libsmime3.so(NSS_3.6) libsmime3.so(NSS_3.7) libsmime3.so(NSS_3.7.2) libsmime3.so(NSS_3.8) libsmime3.so(NSS_3.9) libsmime3.so(libsmime3.so) libsoftokn3.so libsoftokn3.so(NSS_3.4) libsoftokn3.so(libsoftokn3.so) libssl3.so libssl3.so(NSS_3.2) libssl3.so(NSS_3.2.1) libssl3.so(NSS_3.4) libssl3.so(NSS_3.7.4) libssl3.so(libssl3.so) libtransformiix.so libtransformiix.so(EXPORTED) libtransformiix.so(libtransformiix.so) libtxmgr.so libtxmgr.so(EXPORTED) libtxmgr.so(libtxmgr.so) libtypeaheadfind.so libtypeaheadfind.so(EXPORTED) libtypeaheadfind.so(libtypeaheadfind.so) libuconv.so libuconv.so(EXPORTED) libuconv.so(libuconv.so) libucvmath.so libucvmath.so(EXPORTED) libucvmath.so(libucvmath.so) libuniversalchardet.so libuniversalchardet.so(EXPORTED) libuniversalchardet.so(libuniversalchardet.so) libwallet.so libwallet.so(EXPORTED) libwallet.so(libwallet.so) libwalletviewers.so libwalletviewers.so(EXPORTED) libwalletviewers.so(libwalletviewers.so) libwebbrwsr.so libwebbrwsr.so(EXPORTED) libwebbrwsr.so(libwebbrwsr.so) libwebsrvcs.so libwebsrvcs.so(EXPORTED) libwebsrvcs.so(libwebsrvcs.so) libwidget_gtk.so libwidget_gtk.so(EXPORTED) libwidget_gtk.so(libwidget_gtk.so) libxlibrgb.so libxmlextras.so libxmlextras.so(EXPORTED) libxmlextras.so(libxmlextras.so) libxpcom.so libxpcom_compat.so libxpcom_compat_c.so libxpcom_compat_c.so(EXPORTED) libxpcom_compat_c.so(libxpcom_compat_c.so) libxpconnect.so libxpconnect.so(EXPORTED) libxpconnect.so(libxpconnect.so) libxpinstall.so libxpinstall.so(EXPORTED) libxpinstall.so(libxpinstall.so) libxpistub.so libxremote_client.so libxremote_client.so(EXPORTED) libxremote_client.so(libxremote_client.so) libxremoteservice.so libxremoteservice.so(EXPORTED) libxremoteservice.so(libxremoteservice.so) ## ## -----> mozilla-calendar <----- ## Filename: mozilla-calendar.rpm Label: Mozilla's calendar implementation Series: i586 Size: 1881830 481924 PatchRpmBasedOn: 1.4-98 1.4.1-17 1.4.1-21 1.4.1-6 PatchRpmSize: 1881830 348338 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Productivity/Networking/Web/Browsers Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh ld-linux.so.2 libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libdl.so.2 libgcc_s.so.1 libgcc_s.so.1(GLIBC_2.0) libm.so.6 libnspr4.so libplc4.so libplds4.so libpthread.so.0 libpthread.so.0(GLIBC_2.0) libstdc++.so.5 libstdc++.so.5(GLIBCPP_3.2) libxpcom.so rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: mozilla:/opt/mozilla/lib/chrome/calendar.jar libxpical.so libxpical.so(EXPORTED) libxpical.so(libxpical.so) ## ## -----> mozilla-dom-inspector <----- ## Filename: mozilla-dom-inspector.rpm Label: Mozilla's DOM inspector Series: i586 Size: 670795 132656 PatchRpmBasedOn: 1.4-98 1.4.1-17 1.4.1-21 1.4.1-6 PatchRpmSize: 670795 125662 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Development/Tools/Navigators Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh ld-linux.so.2 libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libdl.so.2 libgcc_s.so.1 libgkgfx.so libm.so.6 libnspr4.so libplc4.so libplds4.so libpng12.so.0 libpthread.so.0 libstdc++.so.5 libstdc++.so.5(GLIBCPP_3.2) libxpcom.so libz.so.1 rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: mozilla:/opt/mozilla/chrome/inspector.jar libinspector.so libinspector.so(EXPORTED) libinspector.so(libinspector.so) ## ## -----> mozilla-irc <----- ## Filename: mozilla-irc.rpm Label: IRC for Mozilla Series: i586 Size: 564167 116370 PatchRpmBasedOn: 1.4-98 1.4.1-17 1.4.1-17 1.4.1-2 1.4.1-21 1.4.1-23 1.4.1-6 1.4.1-7 PatchRpmSize: 564167 111014 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Productivity/Networking/IRC Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: mozilla:/opt/mozilla/chrome/chatzilla.jar ## ## -----> mozilla-mail <----- ## Filename: mozilla-mail.rpm Label: Mozilla's Mailclient Series: i586 Size: 6758583 1896379 PatchRpmBasedOn: 1.0.1-38 1.4-120 1.4.1-17 1.4.1-17 1.4.1-2 1.4.1-21 1.4.1-23 1.4.1-6 1.4.1-7 PatchRpmSize: 6758583 1896664 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Productivity/Networking/Email/Clients Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh ld-linux.so.2 libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libdl.so.2 libgcc_s.so.1 libgcc_s.so.1(GLIBC_2.0) libm.so.6 libmozjs.so libmsgbaseutil.so libnspr4.so libplc4.so libplds4.so libpthread.so.0 libstdc++.so.5 libstdc++.so.5(CXXABI_1.2) libstdc++.so.5(GLIBCPP_3.2) libxpcom.so libxpcom_compat.so rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: mozilla:/opt/mozilla/chrome/messenger.jar libaddrbook.so libaddrbook.so(EXPORTED) libaddrbook.so(libaddrbook.so) libbayesflt.so libbayesflt.so(EXPORTED) libbayesflt.so(libbayesflt.so) libenigmime.so libenigmime.so(EXPORTED) libenigmime.so(libenigmime.so) libimpComm4xMail.so libimpComm4xMail.so(EXPORTED) libimpComm4xMail.so(libimpComm4xMail.so) libimpText.so libimpText.so(EXPORTED) libimpText.so(libimpText.so) libimport.so libimport.so(EXPORTED) libimport.so(libimport.so) liblocalmail.so liblocalmail.so(EXPORTED) liblocalmail.so(liblocalmail.so) libmailnews.so libmailnews.so(EXPORTED) libmailnews.so(libmailnews.so) libmailview.so libmailview.so(EXPORTED) libmailview.so(libmailview.so) libmime.so libmime.so(EXPORTED) libmime.so(libmime.so) libmimeemitter.so libmimeemitter.so(EXPORTED) libmimeemitter.so(libmimeemitter.so) libmsgbaseutil.so libmsgcompose.so libmsgcompose.so(EXPORTED) libmsgcompose.so(libmsgcompose.so) libmsgdb.so libmsgdb.so(EXPORTED) libmsgdb.so(libmsgdb.so) libmsgimap.so libmsgimap.so(EXPORTED) libmsgimap.so(libmsgimap.so) libmsgmdn.so libmsgmdn.so(EXPORTED) libmsgmdn.so(libmsgmdn.so) libmsgnews.so libmsgnews.so(EXPORTED) libmsgnews.so(libmsgnews.so) libmsgsmime.so libmsgsmime.so(EXPORTED) libmsgsmime.so(libmsgsmime.so) libvcard.so libvcard.so(EXPORTED) libvcard.so(libvcard.so) ## ## -----> mozilla-spellchecker <----- ## Filename: mozilla-spellchecker.rpm Label: Spellchecker for Mozilla Series: i586 Size: 112 22289 PatchRpmBasedOn: 1.4-98 1.4.1-17 1.4.1-21 1.4.1-6 PatchRpmSize: 112 22428 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Productivity/Networking/Web/Browsers Copyright: MPL AuthorName: http://spellchecker.mozdev.org/ AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: ## ## -----> mozilla-venkman <----- ## Filename: mozilla-venkman.rpm Label: Mozilla's JavaScript debugger Series: i586 Size: 849352 197520 PatchRpmBasedOn: 1.4-98 1.4.1-17 1.4.1-21 1.4.1-6 PatchRpmSize: 849352 191456 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Development/Tools/Debuggers Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: mozilla:/opt/mozilla/chrome/venkman.jar ## ## -----> mozilla-xmlterm <----- ## Filename: mozilla-xmlterm.rpm Label: Mozilla's XML Terminalemulation Series: i586 Size: 307937 133063 PatchRpmBasedOn: 1.4-98 1.4.1-17 1.4.1-21 1.4.1-6 PatchRpmSize: 307937 125487 Buildtime: 1106233452 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Productivity/Networking/Web/Browsers Copyright: MPL AuthorName: Ramiro Estrugo AuthorAddress: Version: 1.4.1-29 StartCommand: Obsoletes: Requires: rpmlib(VersionedDependencies) <= 3.0.3-1 mozilla = 1.4.1-29 /bin/sh /bin/sh /usr/bin/perl ld-linux.so.2 libX11.so.6 libXext.so.6 libXi.so.6 libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1.3) libdl.so.2 libgcc_s.so.1 libgdk-1.2.so.0 libgkgfx.so libglib-1.2.so.0 libgmodule-1.2.so.0 libgtk-1.2.so.0 libm.so.6 libnspr4.so libplc4.so libplds4.so libpthread.so.0 libpthread.so.0(GLIBC_2.0) libstdc++.so.5 libstdc++.so.5(GLIBCPP_3.2) libxpcom.so rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: mozilla:/opt/mozilla/chrome/xmlterm.jar libxmlterm.so libxmlterm.so(EXPORTED) libxmlterm.so(libxmlterm.so) Segakcap: -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQFB+NyAqE7a6JyACsoRAqk+AJ4iXzijOYpnfRLwPyieWsuS255DKgCf RPZhyXyocFEsmWXPhRfjVXOk9dE= =Fju6 -----END PGP SIGNATURE-----