<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="b2b5779b3105842f8b7ea5b6992883ad"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sledp1-yast2-core-4623"
    timestamp="1194318304"
    engine="1.0">
  <yum:name>sledp1-yast2-core</yum:name>
  <summary lang="en">Security update for YaST2</summary>
  <summary lang="de">Security update for YaST2</summary>
  <description lang="en">This update fixes a security bug in yast2-core that allowed
local attackers to provide malicious yast2 modules to yast2
that are executed with root privileges. To trigger this
vulnerability root has to execute yast2 in an untrusted
directory (i.e. /tmp).  Thanks to Stefan Nordhausen for
reporting this to us.
</description>
  <description lang="de">This update fixes a security bug in yast2-core that allowed
local attackers to provide malicious yast2 modules to yast2
that are executed with root privileges. To trigger this
vulnerability root has to execute yast2 in an untrusted
directory (i.e. /tmp).  Thanks to Stefan Nordhausen for
reporting this to us.
</description>
  <yum:version ver="4623" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="yast2-core" epoch="0" ver="2.13.41" rel="0.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>yast2-core</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.13.41" rel="0.2"/>
      <checksum type="sha" pkgid="YES">aae6b60b90cd3b9734f40e8c0b4c067df62271d7</checksum>
      <time file="1194319798" build="1194318304"/>
      <size package="1321718" installed="3692577" archive="3702796"/>
      <location xml:base="media://#1" href="suse/i586/yast2-core-2.13.41-0.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="yast2-core" epoch="0" ver="2.13.41" rel="0.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="yast2-core"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
