<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6251b18e050302ebe7fe74294b55c818"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sdkp1-mozilla-xulrunner-5118"
    timestamp="1206197301"
    engine="1.0">
  <yum:name>sdkp1-mozilla-xulrunner</yum:name>
  <summary lang="en">Security update for epiphany</summary>
  <summary lang="de">Security update for epiphany</summary>
  <description lang="en">This update of the Mozilla XULRunner engine catches up on
all previous security problems found in the XULRunner
engine.

Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <description lang="de">This update of the Mozilla XULRunner engine catches up on
all previous security problems found in the XULRunner
engine.

Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <yum:version ver="5118" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="epiphany" epoch="0" ver="1.8.5" rel="14.5" flags="EQ"/>
    <rpm:entry kind="atom" name="epiphany-devel" epoch="0" ver="1.8.5" rel="14.5" flags="EQ"/>
    <rpm:entry kind="atom" name="epiphany-doc" epoch="0" ver="1.8.5" rel="14.5" flags="EQ"/>
    <rpm:entry kind="atom" name="gecko-sdk" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>epiphany</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.8.5" rel="14.5"/>
      <checksum type="sha" pkgid="YES">cc3a5d9146d0a47437beaa10796e0790079257f9</checksum>
      <time file="1206197786" build="1206197301"/>
      <size package="2848958" installed="8883624" archive="8915352"/>
      <location xml:base="media://#1" href="suse/i586/epiphany-1.8.5-14.6.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="epiphany" epoch="0" ver="1.8.5" rel="14.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="epiphany"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>epiphany-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.8.5" rel="14.5"/>
      <checksum type="sha" pkgid="YES">c3e50f12b14a7aee1b6db35878d416272acf441d</checksum>
      <time file="1206197786" build="1206197301"/>
      <size package="23910" installed="97917" archive="104184"/>
      <location xml:base="media://#1" href="suse/i586/epiphany-devel-1.8.5-14.6.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="epiphany-devel" epoch="0" ver="1.8.5" rel="14.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="epiphany-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>epiphany-doc</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.8.5" rel="14.5"/>
      <checksum type="sha" pkgid="YES">a3ca049e8d0fe2b22d494b877bfd4025a415be08</checksum>
      <time file="1206197786" build="1206197301"/>
      <size package="37744" installed="326534" archive="331128"/>
      <location xml:base="media://#1" href="suse/i586/epiphany-doc-1.8.5-14.6.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="epiphany-doc" epoch="0" ver="1.8.5" rel="14.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="epiphany-doc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>gecko-sdk</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.8.0.14eol" rel="0.2"/>
      <checksum type="sha" pkgid="YES">e824cf112e3faea274830d0acb88cf9e9e4aced0</checksum>
      <time file="1206195326" build="1206194871"/>
      <size package="3144486" installed="18272575" archive="18669180"/>
      <location xml:base="media://#1" href="suse/i586/gecko-sdk-1.8.0.14eol-0.5.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="gecko-sdk" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="gecko-sdk"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
