<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6251b18e050302ebe7fe74294b55c818"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sledp1-mozilla-xulrunner-5118"
    timestamp="1206190011"
    engine="1.0">
  <yum:name>sledp1-mozilla-xulrunner</yum:name>
  <summary lang="en">Security update for epiphany</summary>
  <summary lang="de">Security update for epiphany</summary>
  <description lang="en">This update of the Mozilla XULRunner engine catches up on
all previous security problems found in the XULRunner
engine.

Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <description lang="de">This update of the Mozilla XULRunner engine catches up on
all previous security problems found in the XULRunner
engine.

Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div
  overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via
  stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved
  plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and
  forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via
  chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,
  Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus
  stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of
  memory corruption (rv:1.8.1.12)
</description>
  <yum:version ver="5118" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="epiphany" epoch="0" ver="1.8.5" rel="14.5" flags="EQ"/>
    <rpm:entry kind="atom" name="epiphany-devel" epoch="0" ver="1.8.5" rel="14.5" flags="EQ"/>
    <rpm:entry kind="atom" name="epiphany-doc" epoch="0" ver="1.8.5" rel="14.5" flags="EQ"/>
    <rpm:entry kind="atom" name="gecko-sdk" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="EQ"/>
    <rpm:entry kind="atom" name="mozilla-xulrunner" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="EQ"/>
    <rpm:entry kind="atom" name="mozilla-xulrunner-32bit" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>epiphany</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.8.5" rel="14.5"/>
      <checksum type="sha" pkgid="YES">5315911190f3f6326e8ed9938ffbda8405786754</checksum>
      <time file="1206190504" build="1206190011"/>
      <size package="2882862" installed="8974404" archive="9006140"/>
      <location xml:base="media://#1" href="suse/x86_64/epiphany-1.8.5-14.6.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="epiphany" epoch="0" ver="1.8.5" rel="14.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="epiphany"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>epiphany-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.8.5" rel="14.5"/>
      <checksum type="sha" pkgid="YES">21f477d67f01e78010c7a1c1c5ce006597dc4a8a</checksum>
      <time file="1206190504" build="1206190011"/>
      <size package="23913" installed="97923" archive="104196"/>
      <location xml:base="media://#1" href="suse/x86_64/epiphany-devel-1.8.5-14.6.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="epiphany-devel" epoch="0" ver="1.8.5" rel="14.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="epiphany-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>epiphany-doc</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.8.5" rel="14.5"/>
      <checksum type="sha" pkgid="YES">d86d356534b205b86419d10b3f64125b82e53fb1</checksum>
      <time file="1206190504" build="1206190011"/>
      <size package="37654" installed="326534" archive="331128"/>
      <location xml:base="media://#1" href="suse/x86_64/epiphany-doc-1.8.5-14.6.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="epiphany-doc" epoch="0" ver="1.8.5" rel="14.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="epiphany-doc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>gecko-sdk</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.8.0.14eol" rel="0.2"/>
      <checksum type="sha" pkgid="YES">d4b657d9a0cc0f6a403a3a947fa32abb7b1c379d</checksum>
      <time file="1206189492" build="1206189000"/>
      <size package="3148396" installed="18357897" archive="18754548"/>
      <location xml:base="media://#1" href="suse/x86_64/gecko-sdk-1.8.0.14eol-0.5.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="gecko-sdk" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="gecko-sdk"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>mozilla-xulrunner</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.8.0.14eol" rel="0.2"/>
      <checksum type="sha" pkgid="YES">e0c9ba518145fdcd100d342ef5fa824bc0b81daf</checksum>
      <time file="1206189493" build="1206189000"/>
      <size package="8059375" installed="26995441" archive="27049832"/>
      <location xml:base="media://#1" href="suse/x86_64/mozilla-xulrunner-1.8.0.14eol-0.5.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="mozilla-xulrunner" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="mozilla-xulrunner"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>mozilla-xulrunner-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.8.0.14eol" rel="0.2"/>
      <checksum type="sha" pkgid="YES">b8dbbd42760b742ac94bbfd5d938a7fd3e2c878b</checksum>
      <time file="1206195327" build="1206194997"/>
      <size package="7233575" installed="21138944" archive="21192456"/>
      <location xml:base="media://#1" href="suse/x86_64/mozilla-xulrunner-32bit-1.8.0.14eol-0.5.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="mozilla-xulrunner-32bit" epoch="0" ver="1.8.0.14eol" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="mozilla-xulrunner-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
