Update for ImageMagick, ImageMagick.256, Mozilla... security moderate

update for whois

- update to 5.0.26 [bnc#848594]
* Added the .cf TLD server.
* Updated the .bi TLD server.
* Added a new ASN allocation.
- includes changes from 5.0.25
* Added the .ax, .bn, .iq, .pw and .rw TLD servers.
* Updated one or more translations.
- includes updates changes 5.0.24:
* Merged documentation fixes and the whois.conf(5) man page
* Added a new ASN allocation.
* Updated one or more translations.
- includes changes from 5.0.23
* whois.nic.or.kr switched from EUC-KR to UTF-8.
- includes changes from 5.0.22
* Fixed cross-compiling
- includes changes from 5.0.21
* Fixed parsing of 6to4 addresses
* Added the .xn--j1amh (.укр, Ukraine) TLD server.
* Updated the .bi, .se and .vn TLD servers.
* Removed whois.pandi.or.id from the list of servers which support the
RIPE extensions, since it does not anymore and queries are broken.
* Updated some disclaimer suppression strings.
* Respect DEB_HOST_GNU_TYPE when selecting CC for cross-compiling.
- includes changes form 5.0.20
* Updated the .by, .ng, .om, .sm, .tn, .ug and .vn TLD servers.
* Added the .bw, .td, .xn--mgb9awbf (عمان., Oman), .xn--mgberp4a5d4ar
(.السعودية, Saudi Arabia) and .xn--mgbx4cd0ab (ï»¢ï» ï»´ïº´ï»³ïº., Malaysia)
TLD servers.
* Removed the .kp, .mc, .rw and .xn--mgba3a4f16a (ایران., Iran) TLD servers.
- includes changes from 5.0.19
* Added the .post TLD server.
* Updated the .co.za SLD servers.
* Added the .alt.za, .net.za and .web.za SLD servers.
* whois.ua changed (?) the encoding to utf-8.
* Fixed the parsing of 6to4 addresses like whois 2002:xxxx::.
- includes changes from 5.0.18
* Updated the .ae and .xn--mgbaam7a8h (.امارات, United Arabs Emirates)
TLDs.
* Updated the server charset table for .fr and .it.
- includes changes from whois 5.0.17
* Updated the .bi, .fo, .gr and .gt TLD servers.
* Removed support for recursion of .org queries, it has been a thick
registry since 2005.
- includes changes from 5.0.16
* Added the .xn--80ao21a (.ҚАЗ, Kazakhstan) TLD server.
* Updated the .ec and .ee TLD servers.
* Removed the .xn--mgbc0a9azcg (.المغرب, Morocco) and .xn--mgberp4a5d4ar
(.السعودية, Saudi Arabia) TLD servers.
* Added a new ASN allocation.
* Updated one or more translations.
- includes changes from 5.0.15
* Added the .xn--mgba3a4f16a (ایران., Iran) TLD server.
* Updated the .pe TLD server, this time for real.
* Updated one or more translations.
- includes changes from 5.0.14
* Added the .sx TLD server.
* Updated the .pe TLD server.
- includes changes from 5.0.13
* Updated the .hr TLD server.
* Improved the package description
* Updated the FSF address in licenses.
- includes changes from 5.0.12
* Recursion disabled when the query string contains spaces, because
probably the query format will not be compatible with the referral
server (e.g. whois to rwhois or ARIN to RIPE).
* Add the "+" flag by default to queries to whois.arin.net if the
argument looks like an IP address. Also add the "a" and "n" flags.
No thanks to ARIN for breaking every whois client.
* Added the .cv, .lk, .mq, .sy, .so, .biz.ua, .co.ua, .pp.ua, .qa,
.xn--3e0b707e (.한국, Korea), .xn--45brj9c (.ভারত, India, Bengali),
.xn--90a3ac (.СРБ, Serbia), .xn--clchc0ea0b2g2a9gcd (.சிங்கப்பூர்,
Singapore, Tamil), .xn--fpcrj9c3d (.భారత్, India, Telugu), .xn--fzc2c9e2c
(.ලංකා, Sri Lanka, Sinhala), .xn--gecrj9c (.ભારત, India, Gujarati),
.xn--h2brj9c (.भारत, India, Hindi), .xn--lgbbat1ad8j (.الجزائر, Algeria),
.xn--mgbayh7gpa (.الاردن, Jordan), .xn--mgbbh1a71e (.بھارت, India, Urdu),
.xn--mgbc0a9azcg (.المغرب, Morocco), .xn--ogbpf8fl (.سورية, Syria),
.xn--s9brj9c (.ਭਾਰਤ, India, Punjabi), .xn--xkc2al3hye2a (.இலங்கை, Sri
Lanka, Tamil), .xn--wgbl6a (.قطر, Qatar), .xn--xkc2dl3a5ee0h
(.இந்தியா, India, Tamil), .xn--yfro4i67o (.æ–°åŠ å¡, Singapore, Chinese) and
.xxx TLD servers. (Closes: #642424),
* Added the .priv.at pseudo-SLD server.
* Updated the .co, .gf, .gp, .kr, .li, .rs, .ru, .su, .sv, .ua and
.xn--p1ai TLD servers. (Closes: #590425, #634830, #627478)
* Added a new ASN allocation.
* Fixed a typo and -t syntax in whois(1). (Closes: #614973, #632588)
* Made whois return an error in some cases, code contributed by
David Souther.
* Split HAVE_LINUX_CRYPT_GENSALT from HAVE_XCRYPT to support SuSE,
which has it builtin in the libc. Added untested support for Solaris'
crypt_gensalt(3). This and the following changes have been contributed
by Ludwig Nussel of SuSE.
* mkpasswd: stop rejecting non-ASCII characters.
* mkpasswd: added support for the 2y algorithm, which fixes CVE-2011-2483.
* mkpasswd: raised the number of rounds for 2a/2y from 4 to 5, which is
the current default.
* mkpasswd: removed support for 2 and {SHA}, which actually are not
supported by FreeBSD and libxcrypt.
- packaging changes
* removed patches accepted upstream:
whois-5.0.11-mkpasswd-support-Owl-patched-libcrypt.diff
whois-5.0.11-mkpasswd-crypt_gensalt-might-change-the-prefix.diff
whois-5.0.11-mkpasswd-support-8bit-characters.diff
whois-5.0.11-mkpasswd-add-support-for-the-new-2y-blowfish-tag-CVE-2011-2483.diff
whois-5.0.11-mkpasswd-set-default-blowfish-rounds-to-5.diff
whois-5.0.11-mkpasswd-remove-obsolete-settings.diff
* removed patches no longer required:
whois-5.0.11-mkpasswd-fix-compiler-warnings.diff
* updated patches:
whois-4.7.33-nb.patch to whois-5.0.25-nb.patch
* verify source signatures
- crypt_gensalt moved to separate library libowcrypt (fate#314945)

- update to 5.0.26 [bnc#848594]
* Added the .cf TLD server.
* Updated the .bi TLD server.
* Added a new ASN allocation.
- includes changes from 5.0.25
* Added the .ax, .bn, .iq, .pw and .rw TLD servers.
* Updated one or more translations.
- includes updates changes 5.0.24:
* Merged documentation fixes and the whois.conf(5) man page
* Added a new ASN allocation.
* Updated one or more translations.
- includes changes from 5.0.23
* whois.nic.or.kr switched from EUC-KR to UTF-8.
- includes changes from 5.0.22
* Fixed cross-compiling
- includes changes from 5.0.21
* Fixed parsing of 6to4 addresses
* Added the .xn--j1amh (.укр, Ukraine) TLD server.
* Updated the .bi, .se and .vn TLD servers.
* Removed whois.pandi.or.id from the list of servers which support the
RIPE extensions, since it does not anymore and queries are broken.
* Updated some disclaimer suppression strings.
* Respect DEB_HOST_GNU_TYPE when selecting CC for cross-compiling.
- includes changes form 5.0.20
* Updated the .by, .ng, .om, .sm, .tn, .ug and .vn TLD servers.
* Added the .bw, .td, .xn--mgb9awbf (عمان., Oman), .xn--mgberp4a5d4ar
(.السعودية, Saudi Arabia) and .xn--mgbx4cd0ab (ï»¢ï» ï»´ïº´ï»³ïº., Malaysia)
TLD servers.
* Removed the .kp, .mc, .rw and .xn--mgba3a4f16a (ایران., Iran) TLD servers.
- includes changes from 5.0.19
* Added the .post TLD server.
* Updated the .co.za SLD servers.
* Added the .alt.za, .net.za and .web.za SLD servers.
* whois.ua changed (?) the encoding to utf-8.
* Fixed the parsing of 6to4 addresses like whois 2002:xxxx::.
- includes changes from 5.0.18
* Updated the .ae and .xn--mgbaam7a8h (.امارات, United Arabs Emirates)
TLDs.
* Updated the server charset table for .fr and .it.
- includes changes from whois 5.0.17
* Updated the .bi, .fo, .gr and .gt TLD servers.
* Removed support for recursion of .org queries, it has been a thick
registry since 2005.
- includes changes from 5.0.16
* Added the .xn--80ao21a (.ҚАЗ, Kazakhstan) TLD server.
* Updated the .ec and .ee TLD servers.
* Removed the .xn--mgbc0a9azcg (.المغرب, Morocco) and .xn--mgberp4a5d4ar
(.السعودية, Saudi Arabia) TLD servers.
* Added a new ASN allocation.
* Updated one or more translations.
- includes changes from 5.0.15
* Added the .xn--mgba3a4f16a (ایران., Iran) TLD server.
* Updated the .pe TLD server, this time for real.
* Updated one or more translations.
- includes changes from 5.0.14
* Added the .sx TLD server.
* Updated the .pe TLD server.
- includes changes from 5.0.13
* Updated the .hr TLD server.
* Improved the package description
* Updated the FSF address in licenses.
- includes changes from 5.0.12
* Recursion disabled when the query string contains spaces, because
probably the query format will not be compatible with the referral
server (e.g. whois to rwhois or ARIN to RIPE).
* Add the "+" flag by default to queries to whois.arin.net if the
argument looks like an IP address. Also add the "a" and "n" flags.
No thanks to ARIN for breaking every whois client.
* Added the .cv, .lk, .mq, .sy, .so, .biz.ua, .co.ua, .pp.ua, .qa,
.xn--3e0b707e (.한국, Korea), .xn--45brj9c (.ভারত, India, Bengali),
.xn--90a3ac (.СРБ, Serbia), .xn--clchc0ea0b2g2a9gcd (.சிங்கப்பூர்,
Singapore, Tamil), .xn--fpcrj9c3d (.భారత్, India, Telugu), .xn--fzc2c9e2c
(.ලංකා, Sri Lanka, Sinhala), .xn--gecrj9c (.ભારત, India, Gujarati),
.xn--h2brj9c (.भारत, India, Hindi), .xn--lgbbat1ad8j (.الجزائر, Algeria),
.xn--mgbayh7gpa (.الاردن, Jordan), .xn--mgbbh1a71e (.بھارت, India, Urdu),
.xn--mgbc0a9azcg (.المغرب, Morocco), .xn--ogbpf8fl (.سورية, Syria),
.xn--s9brj9c (.ਭਾਰਤ, India, Punjabi), .xn--xkc2al3hye2a (.இலங்கை, Sri
Lanka, Tamil), .xn--wgbl6a (.قطر, Qatar), .xn--xkc2dl3a5ee0h
(.இந்தியா, India, Tamil), .xn--yfro4i67o (.æ–°åŠ å¡, Singapore, Chinese) and
.xxx TLD servers. (Closes: #642424),
* Added the .priv.at pseudo-SLD server.
* Updated the .co, .gf, .gp, .kr, .li, .rs, .ru, .su, .sv, .ua and
.xn--p1ai TLD servers. (Closes: #590425, #634830, #627478)
* Added a new ASN allocation.
* Fixed a typo and -t syntax in whois(1). (Closes: #614973, #632588)
* Made whois return an error in some cases, code contributed by
David Souther.
* Split HAVE_LINUX_CRYPT_GENSALT from HAVE_XCRYPT to support SuSE,
which has it builtin in the libc. Added untested support for Solaris'
crypt_gensalt(3). This and the following changes have been contributed
by Ludwig Nussel of SuSE.
* mkpasswd: stop rejecting non-ASCII characters.
* mkpasswd: added support for the 2y algorithm, which fixes CVE-2011-2483.
* mkpasswd: raised the number of rounds for 2a/2y from 4 to 5, which is
the current default.
* mkpasswd: removed support for 2 and {SHA}, which actually are not
supported by FreeBSD and libxcrypt.
- packaging changes
* removed patches accepted upstream:
whois-5.0.11-mkpasswd-support-Owl-patched-libcrypt.diff
whois-5.0.11-mkpasswd-crypt_gensalt-might-change-the-prefix.diff
whois-5.0.11-mkpasswd-support-8bit-characters.diff
whois-5.0.11-mkpasswd-add-support-for-the-new-2y-blowfish-tag-CVE-2011-2483.diff
whois-5.0.11-mkpasswd-set-default-blowfish-rounds-to-5.diff
whois-5.0.11-mkpasswd-remove-obsolete-settings.diff
* removed patches no longer required:
whois-5.0.11-mkpasswd-fix-compiler-warnings.diff
* updated patches:
whois-4.7.33-nb.patch to whois-5.0.25-nb.patch
* verify source signatures
- crypt_gensalt moved to separate library libowcrypt (fate#314945)

Fixed bugs
CVE-CVE-2011-2483
crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by
bnc#848594
whois 5.0.26 maintenance release
Selected Binaries
openSUSE Build Service is sponsored by