<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6c0719fc3abbdae964757ea22f821543"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="util-linux-4552"
    timestamp="1192207810"
    engine="1.0">
  <yum:name>util-linux</yum:name>
  <summary lang="en">util-linux security update</summary>
  <summary lang="de">util-linux Sicherheitsupdate</summary>
  <description lang="en">Insufficient length checks when reading the passphrase for
encrypted paritions in the mount program could cause a
buffer overflow that could potentially be exploited to gain
root privileges.

When executing helper program 'mount' didn't check the
return value of setuid(). Therefore helper program could
potenially run as root (CVE-2007-5191).
</description>
  <description lang="de">Ein Pufferüberlauf beim einlesen der Passphrase für
verschlüsselte Partitionen im mount-Programm konnte
möglicherweise ausgenutzt werden um root-Rechte zu erlangen.

Beim Ausführen von Hilfprogrammen hat &quot;mount&quot; ausserdem den
Rückgabewert von setuid() nicht überprüft wodurch unter
Umständen Hilfsprogramme mit root Rechten liefen
(CVE-2007-5191).
</description>
  <yum:version ver="4552" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="util-linux" epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>util-linux</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2"/>
      <checksum type="sha" pkgid="YES">e239d017e6102681afed342b003e670074e07ee1</checksum>
      <time file="1192578530" build="1192207810"/>
      <size package="1444503" installed="4810571" archive="4840216"/>
      <location href="rpm/i586/util-linux-2.12r+2.13rc2+git20070725-24.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="util-linux" epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="util-linux"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/util-linux-2.12r+2.13rc2+git20070725-24.2.i586.patch.rpm"/>
          <checksum type="sha">bf5eab13f5833050a6d31f7dcead3b1d905541b8</checksum>
          <time file="1192579216" build="1192207810"/>
          <size package="291673" archive="754260"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/util-linux-2.12r+2.13rc2+git20070725-24_24.2.i586.delta.rpm"/>
          <checksum type="sha">afe1fe8bde6cae6dfdd24abfb27529bb723417af</checksum>
          <time file="1192579221" build="1192207810"/>
          <size package="109001" archive="0"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24" md5sum="dae07b1fda3c56b5391694b4d6fd7c91" buildtime="1190418027" sequence_info="util-linux-2.12r+2.13rc2+git20070725-24-e11004f21c93f579d498bd419ce9198d638a1c1bd1"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>util-linux</name>
      <arch>ppc</arch>
      <version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2"/>
      <checksum type="sha" pkgid="YES">529848dee73629e711b70c6fda3a90d16606bb5f</checksum>
      <time file="1192578499" build="1192200552"/>
      <size package="1518016" installed="5022321" archive="5050548"/>
      <location href="rpm/ppc/util-linux-2.12r+2.13rc2+git20070725-24.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="util-linux" epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="util-linux"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/util-linux-2.12r+2.13rc2+git20070725-24.2.ppc.patch.rpm"/>
          <checksum type="sha">14b2630af795bd1152e9168edebb4099c1f6b4a0</checksum>
          <time file="1192579226" build="1192200552"/>
          <size package="460939" archive="1386504"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="18"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/util-linux-2.12r+2.13rc2+git20070725-24_24.2.ppc.delta.rpm"/>
          <checksum type="sha">40febf03b18fcb9251c28cd1c5e2db5f478d58c5</checksum>
          <time file="1192579228" build="1192200552"/>
          <size package="105252" archive="0"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24" md5sum="d3a9ceff0a4f4e8f1e8297d936a683ca" buildtime="1190451394" sequence_info="util-linux-2.12r+2.13rc2+git20070725-24-ef0b9d8d41108ed5ebd0881b75b45db763b91c1ec1"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>util-linux</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2"/>
      <checksum type="sha" pkgid="YES">458c7619b4205f4bb224c1d38dbf1d7bff7b1688</checksum>
      <time file="1192578616" build="1192207697"/>
      <size package="1461734" installed="4972715" archive="5002360"/>
      <location href="rpm/x86_64/util-linux-2.12r+2.13rc2+git20070725-24.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="util-linux" epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="util-linux"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/util-linux-2.12r+2.13rc2+git20070725-24.2.x86_64.patch.rpm"/>
          <checksum type="sha">3674b4d90c718a74340f12b692016879f4f5244b</checksum>
          <time file="1192579231" build="1192207697"/>
          <size package="170269" archive="320380"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/util-linux-2.12r+2.13rc2+git20070725-24_24.2.x86_64.delta.rpm"/>
          <checksum type="sha">2fc364dabeac9d8eb8631746a8053d9692204974</checksum>
          <time file="1192579234" build="1192207697"/>
          <size package="108354" archive="0"/>
          <base-version epoch="0" ver="2.12r+2.13rc2+git20070725" rel="24" md5sum="12d1f6b565a6e56b10245416287e1641" buildtime="1190403818" sequence_info="util-linux-2.12r+2.13rc2+git20070725-24-f6efe75790de7420d090fe61e0c8d6a4638a1c1bd1"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
