<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="dc6c4ede98a83e45868508bd87a1f74d"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="133">
  <id>postfix</id>
  <title>postfix: local privilege escalation (CVE-2008-2936 and CVE-2008-2937)</title>
  <release>openSUSE 11.0</release>
  <issued date="1217857471"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=409120" id="409120" title="bug number 409120" type="bugzilla"/>
  </references>
  <description>A (local) privilege escalation vulnerability as well as a
mailbox ownership problem has been fixed in postfix.
CVE-2008-2936 and CVE-2008-2937 have been assigned to this
problem.
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.5.1" release="28.3">
          <filename>postfix-2.5.1-28.3.i586.rpm</filename>
        </package>
        <package name="postfix" arch="ppc" version="2.5.1" release="28.3">
          <filename>postfix-2.5.1-28.3.ppc.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.5.1" release="28.3">
          <filename>postfix-2.5.1-28.3.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.5.1" release="28.3">
          <filename>postfix-devel-2.5.1-28.3.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="ppc" version="2.5.1" release="28.3">
          <filename>postfix-devel-2.5.1-28.3.ppc.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.5.1" release="28.3">
          <filename>postfix-devel-2.5.1-28.3.x86_64.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.5.1" release="28.3">
          <filename>postfix-mysql-2.5.1-28.3.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="ppc" version="2.5.1" release="28.3">
          <filename>postfix-mysql-2.5.1-28.3.ppc.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.5.1" release="28.3">
          <filename>postfix-mysql-2.5.1-28.3.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.5.1" release="28.3">
          <filename>postfix-postgresql-2.5.1-28.3.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="ppc" version="2.5.1" release="28.3">
          <filename>postfix-postgresql-2.5.1-28.3.ppc.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.5.1" release="28.3">
          <filename>postfix-postgresql-2.5.1-28.3.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
