Apply openSUSE-SU-2014:0764-1
openSUSE Security Update: openssl: update to version 1.0.1h

Description:

   The openssl library was updated to version 1.0.1h fixing various security
   issues and bugs:

   Security issues fixed:
   - CVE-2014-0224: Fix for SSL/TLS MITM flaw. An attacker using a carefully
     crafted handshake can force the use of weak keying material in OpenSSL
     SSL/TLS clients and servers.
   - CVE-2014-0221: Fix DTLS recursion flaw. By sending an invalid DTLS
     handshake to an OpenSSL DTLS client the code can be made to recurse
     eventually crashing in a DoS attack.
   - CVE-2014-0195: Fix DTLS invalid fragment vulnerability. A buffer
     overrun attack can be triggered by sending invalid DTLS fragments to an
      OpenSSL DTLS client or server. This is potentially exploitable to run
      arbitrary code on a vulnerable client or server.
   - CVE-2014-3470: Fix bug in TLS code where clients enable anonymous ECDH
     ciphersuites are subject to a denial of service attack.

Bump PKGREVISION.
Updated emulators/suse131_openssl to 13.1nb8
+ chicken-4.9.0, doclifter-2.15, fotoxx-14.06, gcompris-14.05,
  gettext-0.19, gif2png-2.5.9, gnupg2-2.0.23, grep-2.20, irssi-0.8.16
  [pkg/48866], libmicrohttpd-0.9.37, samba-4.1.8, sun-jdk7-7.0.60,
  sun-jre7-7.0.60, tor-0.2.4.22, xterm-305.
Update KAKASI to 2.3.6.
(in addtion to backported patches, dropped prototype patch of kakasi_do().
 Its committer doesn't know the reason anymore, and implemented part patches
 had been merged long time ago with
   "patch-aa and patch-ac patched the same file.  Merge them"
 but patch-aa was for lib/libkakasi.c, and patch-ac is for src/kakasi.c.
 From no problem reportes, it is considered this patch set is not relevant).

Changes from KAKASI 2.3.5 to 2.3.6

* Check runtime environment for test codes, and skip impossible tests.

* With configure, check compiler supported option.
  (for the issue old gcc cannot accept -Wno-unused-result option)

* Fixed to check iconv availability at configure instead of autconf.

* Fixed and added manual (by Osamu Aoki).

* Fixed a bug to ouput redundant delimiter at wakatigaki if the line
  start with ASCII character.

* Changed unitptr_t from macro to typedef (to avoid the issue that
  come compilers cannot handle such macro)

* Fixed missing iconv related casts.

Changes from KAKASI 2.3.4 to 2.3.5

* Added UTF-8 input/output support (iconv is required)

* Improve handling of japanese long-vowel.

* Fixed bug of do_kakasi(), may return invald memory area.

* Fixed a wrong entriy in kakasidict.

* Fixed bad hepburn romaji table.

* Added use_old_romaji_table variable and -t option.

* Fixed segfault on invalid SS2 sequences.

* Fixes warnings at compile.

* Added a test script.

* Added -S option for mutable separator (with -w or -s option).

* Added -l and -L option for level furigana and hiragana conversion.
  (See doc/README.level for more information)

* Newly added -F option for mutable parentheses around furigana
  (with -JH -f or -L option).

* Added -y option to display all yomi per one Kanji.

* Add endian independent dictionary format support.

* Fixed bad hepburn romaji table.
  (specify -t option fo use  old romaji table)
Updated textproc/kakasi to 2.3.6
Update to 0.18

Upstream changes:
--0.18--
Released December 31, 2013

Linear algebra:
* added qr() for matrix QR factorization (contributed by Ken Allen)
* added functions eigsy(), eighe(), eig() to compute matrix
  eigenvalues (contributed by Timo Hartmann)
* added functions svd(), svd_r(), svd_c() for singular value
  decomposition of matrices (contributed by Timo Hartmann)
* added calculation of Gaussian quadrature rules for various weight
  functions (contributed by Timo Hartmann)
* improved precision selection in exp_pade() (contributed by
  Mario Pernici)

Special functions:
* fixed ellippi() to return an inf instead of raising an exception
* fixed a crash in zeta() with huge arguments
* added functions for computing Stirling numbers
  (stirling1(), stirling2())
* improved the computation of zeros of zeta at high precision
  (contributed by Juan Arias de Reyna)
* fixed zeta(-x) raising an exception for tiny x
* recognize when lerchphi() can call zeta() or polylog(),
  handling those cases faster

Compatibility:
* fixed gmpy2 compatibility issues (contributed by Case Van Horsen)
* better solutions for python 2/3 compatibility,
  using Benjamin Peterson's six.py
* fixes to allow mpmath to run in non-sage mode when sage is available
* support abstract base classes (contributed by Stefan Krastanov)
* use new-style classes to improve pypy performance

Other:
* added Levin, Sidi-S and Cohen/Villegas/Zagier series
  transformations (contributed by Timo Hartmann)
* added isfinite() utility function
* fixed a problem with bisection root-finding
* fixed several documentation errors
* corrected number of coefficients returned by diffs() with
  method='quad'
* fixed repr(constant) being slow at high precision
* made intervals hashable
Updated math/py-mpmath to 0.18
Update to 305:

This release reviewed/improved features reset on "hard reset" and
implemented four SGRs, for completeness. There were several other
minor fixes/improvements.
Updated x11/xterm to 305
Update to 0.20.12:

0.20.12
=======

Changes since 0.20.11:

- Several documentation fixes.
- Fix warning from clang.
- Prevent a critical if there's no DBus available and a DBus-based context
  manager is used.
- Don't try to use a DBus context manager if we don't have a system bus.
- Use g_return_val_if_fail.
- Fix a small leak of CallbackData in GUPnPServiceProxy.
- Add a gupnp_service_proxy_add_notify_full variant to be nice to
  gobject-introspection.
- Several code cleanups.
- Fix a reference leak in ACL.
- Make "document" property of GUPnPDeviceInfo readable.
- Add gupnp_service_proxy_add_raw_notify which can be used to get the raw
  xmlDoc received through notification.

Bugs fixed in this release:
 - https://bugzilla.gnome.org/show_bug.cgi?id=701446
 - https://bugzilla.gnome.org/show_bug.cgi?id=706123
 - https://bugzilla.gnome.org/show_bug.cgi?id=706127
 - https://bugzilla.gnome.org/show_bug.cgi?id=727709
 - https://bugzilla.gnome.org/show_bug.cgi?id=729827
 - https://bugzilla.gnome.org/show_bug.cgi?id=730359
 - https://bugzilla.gnome.org/show_bug.cgi?id=730690

All contributors to this release:
 - Jens Georg <mail@jensge.org>
 - Philip Withnall <philip.withnall@collabora.co.uk>

0.20.11
=======

Changes since 0.20.10:

- Disable the Unix context manager on Android.
- Fix Windows compilation.
- Fix a memory leak in Linux context manager.
- Fix libuuid dependencies in pkg-config files.
- Implement a simple ACL infrastructure.


Bugs fixed in this release:
 - https://bugzilla.gnome.org/show_bug.cgi?id=711027
 - https://bugzilla.gnome.org/show_bug.cgi?id=723715
 - https://bugzilla.gnome.org/show_bug.cgi?id=727539
 - https://bugzilla.gnome.org/show_bug.cgi?id=728889

All contributors to this release:
 - Philip Withnall <philip.withnall@collabora.co.uk>
 - Jens Georg <mail@jensge.org>
 - Olivier Crête <olivier.crete@collabora.com>
 - Luciana Fujii <luciana.fujii@collabora.com>
Updated net/gupnp to 0.20.12
Update to 3.8:

3.8
---

* Issue #22: Deprecated loading of config from current directory. Support for
  loading the config in this manner will be removed in a future version.
* Issue #131: Keyring now will prefer ``pywin32-ctypes
  <https://pypi.python.org/pypi/pywin32-ctypes>``_ to pywin32 if available.
Updated security/py-keyring to 3.8
Don't use set literal syntax not supported by Python 2.6.
Python 3.x build needs expat.
Dictionary comprehension is not supported by Python 2.6, avoid.
ASCIIfy for Python 3.x.
Update to 7.0.60

* PLIST.linux-i386 and PLIST.linux-x86_64 are confirmed.

Changelog: http://www.oracle.com/technetwork/java/javase/7u60-relnotes-2200106.html
Java SE Development Kit 7, Update 60 (JDK 7u60)

The full version string for this update release is 1.7.0_60-b19 (where "b" means "build"). The version number is 7u60.
Highlights

This update release contains several enhancements and changes including the following:

  Java Mission Control
  New Features and Changes

IANA Data 2014b

JDK 7u60 contains IANA time zone data version 2014b. For more information, refer to Timezone Data Versions in the JRE Software.

JavaFX

This JDK release includes JavaFX version 2.2.60.
Java Mission Control

This JDK release includes Java Mission Control(JMC) version 5.3. For more information, see JMC 5.3 Release Notes.
New Features and Changes

Java ignores deployment.expiration.check.enabled property for first launch

If you have an older version of Java and expiration check is turned off through deployment.properties file, Java may ignore this property for first launch.

To ensure that expiration check is disabled, use the following Java Web Start command:
javaws -userConfig deployment.expiration.check.enabled false

If this property is changed in the deployment.properties file, open the Java Control Panel before starting an application to ensure that the native cache is synchronized with the file. For more information, see Deployment Configuration File and Properties.
New flags added to Java Management API

The flags MinHeapFreeRatio and MaxHeapFreeRatio have been made manageable. This means they can be changed at runtime using the management API in Java. Support for these flags have also been added to the ParallelGC as part of the adaptive size policy.
Bug Fixes

For a list of bug fixes included in this release, see JDK 7u60 Bug Fixes page.

The following are some of the notable bug fixes in this release:

Area: security-libs/java.security
Synopsis: Realm.getRealmsList returns realms list in wrong order

Java does not support the [capaths] section in krb5.conf correctly if there are more then one intermediate realm between the client realm and the server realm.

See 8012615.
Updated sun-{jre,jdk}7 to 7.0.60
Added net/grive version 0.3.0.20130502

The purpose of this project is to provide an independent open
source implementation of Google Drive client for GNU/Linux. It
uses the Google Document List API to talk to the servers in Google.
The code is written in standard C++.

Currently as of version 0.2.0, grive can do two-side synchronization
between the Google Drive and local directory. It can download and
upload changed files. New directories in Google Drive and local
directory will also be downloaded/uploaded.