Changelog for acroread-9.4.7-0.2.1.i586.rpm :
Wed Jan 11 13:00:00 2012 biliAATTsuse.com
- Update to 9.4.7 for bnc#735275(swampid#44853).
CVE-2011-4369

Fri Nov 11 13:00:00 2011 biliAATTsuse.com
- Update to 9.4.6 for bnc#717724(swampid#44054).
CVE-2011-1353, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433,
CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437,
CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441,
CVE-2011-2442

Mon Feb 28 13:00:00 2011 biliAATTnovell.com
- Update to 9.4.2 for bnc#669550 (swampid#38967).
CVE Numbers: CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0564,
CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0568, CVE-2011-0570,
CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589,
CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594,
CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600,
CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0605, CVE-2011-0606

Fri Dec 3 13:00:00 2010 biliAATTnovell.com
- Update to 9.4.1 for bnc#651232 (swampid#37028).
Fix a memory corruption vulnerability that could potentially
lead to code execution (CVE-2010-4091).

Wed Oct 6 14:00:00 2010 mrdocsAATTopensuse.org
- Update to 9.4 for security fixes bnc#638466 swampid#36257
- CVE-2010-2883 CVE-2010-2884 CVE-2010-2887 CVE-2010-2888
- CVE-2010-2889 CVE-2010-2890 CVE-2010-3619 CVE-2010-3620
- CVE-2010-3621 CVE-2010-3622 CVE-2010-3623 CVE-2010-3624
- CVE-2010-3625 CVE-2010-3626 CVE-2010-3627 CVE-2010-3628
- CVE-2010-3629 CVE-2010-3630 CVE-2010-3631 CVE-2010-3632
- CVE-2010-3658 CVE-2010-3656 CVE-2010-3657

Thu Aug 26 14:00:00 2010 biliAATTnovell.com
- Update to 9.3.4 for integer overflow(bnc#629134, swampid#35325).
CVE-2010-2862, CVE-2010-1240.
- Dismiss many nasty symlink messages(bnc#627964).
- Add the manual for acroread(bnc#631267).
- Fix prints dirname error upon start(bnc#574580).

Thu Jul 1 14:00:00 2010 biliAATTsuse.de
- Update to 9.3.3 for security fixes(bnc#612064, swampid#34217).
CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295,
CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203,
CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207,
CVE-2010-2208, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211,
CVE-2010-2212.

Mon Apr 19 14:00:00 2010 biliAATTsuse.de
- Update to 9.3.2 for security fixes(bnc#595108, swampid#32589).
CVE-2010-0190, CVE-2010-0191, CVE-2010-0192, CVE-2010-0193,
CVE-2010-0194, CVE-2010-0195, CVE-2010-0196, CVE-2010-0197,
CVE-2010-0198, CVE-2010-0199, CVE-2010-0201, CVE-2010-0202,
CVE-2010-0203, CVE-2010-0204, CVE-2010-1241

Fri Jan 22 13:00:00 2010 biliAATTsuse.de
- Update to 9.3 for security fixes(bnc#564742, swampid#29655).
CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956,
CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324

Mon Oct 19 14:00:00 2009 pthAATTsuse.de
- Update to 9.2 because of security fixes (bnc#546083)

Wed Sep 2 14:00:00 2009 pthAATTsuse.de
- Add a Source: entry for the rpmlintrc file.

Thu Aug 27 14:00:00 2009 pthAATTsuse.de
- Update to 9.1.3
- Add an rpmlintrc file
- Don\'t list acroread.patch as a patch but rather as Source: so
that rpmlint won\'t complain.

Tue May 19 14:00:00 2009 crrodriguezAATTsuse.de
- VUL-0: acroread: Adobe Reader \'getAnnots()\'
Javascript Function Remote Code Execution [bnc#499097]

Wed Mar 25 13:00:00 2009 crrodriguezAATTsuse.de
- VUL-0: acroread security update [bnc#488619]

Mon Jan 19 13:00:00 2009 mfabianAATTsuse.de
- bnc#457928: add the workaround to copy the xulrunner-1.9
directory to the home directory of the user if libgtkembedmoz.so
is not available (see comment#24 of bnc#457928).

Mon Jan 19 13:00:00 2009 mfabianAATTsuse.de
- bnc#467195: require UTF-16.so and ISO8859-1.so in order to
get the package glibc-locale-32bit required when acroead is
installed on a 64bit system.

Thu Dec 11 13:00:00 2008 hvogelAATTsuse.de
- bnc#457928: temporarily get rid of the libgtkembedmoz.so
requirement. xulrunner-181 got dropped

Wed Nov 5 13:00:00 2008 mfabianAATTsuse.de
- bnc#441739, bnc#397839: update to 8.1.3 for security reasons:
http://www.adobe.com/support/security/bulletins/apsb08-19.html
CVE-2008-2992, CVE-2008-2549, CVE-2008-4812, CVE-2008-4813,
CVE-2008-4817, CVE-2008-4816, CVE-2008-4814, CVE-2008-4815

Wed Aug 13 14:00:00 2008 roAATTsuse.de
- add exclusivearch

Mon Jul 21 14:00:00 2008 mfabianAATTsuse.de
- bnc#404976: security update, CVS-2008-2641.
- remove hunks to use mktemp from acroread.patch, the problem
has been fixed upstream now, mktemp is used if available.

Mon Apr 28 14:00:00 2008 mfabianAATTsuse.de
- bnc#382739: use more robust code in the startscript to find
libgtkembedmoz.so. Only use the value found in ~/.adobe/
if it really points to a libgtkembedmoz.so, if not search
anew in the system.

Wed Apr 23 14:00:00 2008 mfabianAATTsuse.de
- bnc#382777: do not replace the libcurl.so.3.0.0 which comes
with the acroread tarball with symbolic links to
libcurl.so.4.0.0 in the system, apparently these are
*not
*
compatible.

Fri Apr 4 14:00:00 2008 mfabianAATTsuse.de
- bnc#375551: use LD_PRELOAD to prevent acroread from using
XGrabServer and XUngrabServer.
- bnc#373590: add symlinks to libicu
*.so.34 for suse_version
< 1030 where libicu
* has been deleted from the acroread package.

Mon Mar 17 13:00:00 2008 mfabianAATTsuse.de
- bnc#370330 and bnc#353251: add a workaround to the start script
/usr/bin/acroread to make input via XIM work when acroread
is started in an UTF-8 locale (.UTF-8 is cut off from the
locale name then to “fix” the problem).

Wed Feb 20 13:00:00 2008 mfabianAATTsuse.de
- bnc#362926: use \"mktemp\" to create temporary files in a secure
way.
- detect the correct directory for the 32bit libgtkembedmoz.so on
x86_64 systems.

Wed Feb 20 13:00:00 2008 mfabianAATTsuse.de
- bnc#353251: remove duplicated system libraries (because of
security considerations and compatibility problems).

Thu Feb 14 13:00:00 2008 mfabianAATTsuse.de
- bnc#358438 comment #31-#33: Workaround to make acroread start
when XInputExtension is missing on an X-server (this is missing
on VNC X-servers) and the theme package gtk-qt-engine is
installed.

Thu Feb 7 13:00:00 2008 mfabianAATTsuse.de
- bnc#275088, commment #134-#139: set ACRO_ENABLE_FONT_CONFIG=1
in the acroread start script.

Tue Feb 5 13:00:00 2008 mfabianAATTsuse.de
- update to final release of 8.1.2.
Fixes bnc#358438, bnc#275088, bnc#353927.
Official announcement by Adobe is here:
http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html
“Version 8.1.2 contains scores of bug fixes including security
vulnerability fixes.”

Fri Jan 11 13:00:00 2008 mfabianAATTsuse.de
- use fdupes only for openSUSE >= 10.3.

Fri Jan 11 13:00:00 2008 mfabianAATTsuse.de
- update to 8.1.2 (fixes bugzilla #275088).

Tue Nov 20 13:00:00 2007 mfabianAATTsuse.de
- apply patch to start script again to use XIM and to add the
most important directories to PSRESOURCEPATH.
- use fdupes only in %INSTALL_DIR (/usr/lib) to avoid hardlinks
to /usr/share which might be on a different partition.

Tue Oct 16 14:00:00 2007 mfabianAATTsuse.de
- add \"Requires: libgtkembedmoz.so\".

Mon Oct 8 14:00:00 2007 mfabianAATTsuse.de
- update to 8.1.1.
- fix automatic provides and requires.
- use fdupes.

Fri Aug 31 14:00:00 2007 mfabianAATTsuse.de
- Bugzilla #275088: add important font directories to the default
PSRESOURCEPATH.

Thu Jul 5 14:00:00 2007 cooloAATTsuse.de
- adding desktop file and icon to the package instead of relying
on kde\'s pool

Thu Apr 12 14:00:00 2007 ghorlacherAATTnovell.com
- Added BuildRequires: openldap2-client for mbuild to work.

Thu Apr 12 14:00:00 2007 ghorlacherAATTnovell.com
- Updated patch to acroread script for bug #197929.
Added Requires: openldap2-client and created symbolic links for
libldap and liblber to avoid error \'PPKLite.api\' Bug #261555.

Thu Feb 1 13:00:00 2007 ghorlacherAATTsuse.de
- Bug 234534 - acroread doesn\'t work after last factory upgrade
Added patch suggested in Bug.

Wed Jan 24 13:00:00 2007 roAATTsuse.de
- move from /usr/X11R6 to /usr

Sat Jan 20 13:00:00 2007 ghorlacherAATTsuse.de
- Updated acroread.patch for bug: 197929 - acroread: line 493:
[: -ge: unary operator expected.

Wed Jan 17 13:00:00 2007 ghorlacherAATTnovell.com
- Updated to security patch 7.0.9 from Adobe. Readme.htm and help/
about reader still show 7.0.8 - varified from Adobe that they
did not update the revision for this release internally.