<?xml version="1.0" encoding="UTF-8"?>
<updates xmlns="http://novell.com/package/metadata/suse/updateinfo">
<!--PATCHINFO id="42b3db326472414935574b1ad1aef580"!-->
<update status="stable" from="maint-coord@suse.de" type="optional" version="2713">
  <id>flash-player</id>
  <title>flash-player: openSUSE maintained Flash Player 10.1</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088737"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>This patch adds an openSUSE maintained Adobe Flash Player
to openSUSE 11.3.
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.53.64" release="2.1.1">
          <filename>flash-player-10.1.53.64-2.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="55bf85f01cfa819337a5ac07ceb6416e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2681">
  <id>opera</id>
  <title>opera: cross-origin loading of CSS stylesheets</title>
  <release>openSUSE 11.3</release>
  <issued date="1278633364"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=583620" id="583620" title="bug number 583620" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607823" id="607823" title="bug number 607823" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615942" id="615942" title="bug number 615942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0653" id="CVE-2010-0653" title="CVE-2010-0653" type="cve"/>
  </references>
  <description>Opera was upgraded to the 10.60 release.

It brings lots of new features, bugfixes and security fixes.

Security fixes include: CVE-2010-0653: Opera permits
cross-origin loading of CSS style sheets even when the
style sheet download has an incorrect MIME type and the
style sheet document is malformed, which allows remote HTTP
servers to obtain sensitive information via a crafted
document.

CVE-2010-1993: Opera 9.52 does not properly handle an
IFRAME element with a mailto: URL in its SRC attribute,
which allows remote attackers to cause a denial of service
(resource consumption) via an HTML document with many
IFRAME elements.
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1c21e9336034276032f4738a37f59d08"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2714">
  <id>smolt</id>
  <title>smolt: Trigger smolt run</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088729"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will trigger the updater applets to
ask about submitting the hardware information to smolts.org.
</description>
  <pkglist>
    <collection>
        <package name="smolt" arch="noarch" version="1.4.2.2" release="3.1.1">
          <filename>smolt-1.4.2.2-3.1.1.noarch.rpm</filename>
        </package>
        <package name="smolt-gui" arch="noarch" version="1.4.2.2" release="3.1.1">
          <filename>smolt-gui-1.4.2.2-3.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a91861676db2b77f62c568e7fcf12805"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3193">
  <id>virtualbox-ose-guest-tools</id>
  <title>virtualbox-ose-guest-tools: Fix 'mount -t vboxsf' failure</title>
  <release>openSUSE 11.3</release>
  <issued date="1285194619"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636347" id="636347" title="bug number 636347" type="bugzilla"/>
  </references>
  <description>This update fixes 'mount -t vboxsf' failing, because the
mount.vboxsf mount helper is installed in /usr/sbin, but
mount(8) expects it to be in /sbin.
</description>
  <pkglist>
    <collection>
        <package name="virtualbox-ose-guest-tools" arch="i586" version="3.2.6" release="2.1.1">
          <filename>virtualbox-ose-guest-tools-3.2.6-2.1.1.i586.rpm</filename>
        </package>
        <package name="virtualbox-ose-guest-tools" arch="x86_64" version="3.2.6" release="2.1.1">
          <filename>virtualbox-ose-guest-tools-3.2.6-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4981f7ab9d6828615efbdfd7087f67f3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2715">
  <id>pullin-flash-player</id>
  <title>pullin-flash-player: Trigger installation of openSUSE flash player</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088806"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will pull in the openSUSE Maintained
Adobe Flash Player plugin.
</description>
  <pkglist>
    <collection>
        <package name="pullin-flash-player" arch="i586" version="11.3.1" release="2.1.1">
          <filename>pullin-flash-player-11.3.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="pullin-flash-player" arch="x86_64" version="11.3.1" release="2.1.1">
          <filename>pullin-flash-player-11.3.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b67863636c9875e1e4996d5ec06d9d66"!-->
<update status="stable" from="maint-coord@suse.de" type="optional" version="2712">
  <id>pullin-msttf-fonts</id>
  <title>Download and Install Microsoft(r) TrueType Core Fonts</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088536"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will download install the Core
TrueType fonts to your system.

For legal reasons we can't include the Microsoft(R)
TrueType Core Fonts in our product. This patch downloads
these fonts and installs them on your system. Please note
that about 4 MByte data are downloaded additionality to
this patch.

The License for the fonts will be installed as
/usr/share/doc/corefonts/EULA.html
</description>
  <pkglist>
    <collection>
        <package name="fetchmsttfonts" arch="noarch" version="11.3" release="1.1.5">
          <filename>fetchmsttfonts-11.3-1.1.5.noarch.rpm</filename>
        </package>
        <package name="pullin-msttf-fonts" arch="noarch" version="11.3.1" release="1.3.1">
          <filename>pullin-msttf-fonts-11.3.1-1.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b8d97752d94c9efd7f2ab6f6b3e9acb3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2728">
  <id>python-mako</id>
  <title>python-mako security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279188036"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619134" id="619134" title="bug number 619134" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2480" id="CVE-2010-2480" title="CVE-2010-2480" type="cve"/>
  </references>
  <description>Python-mako was prone to a Cross-Site Scripting flaw due to
improperly escaped single quotes (CVE-2010-2480).
</description>
  <pkglist>
    <collection>
        <package name="python-mako" arch="noarch" version="0.2.5" release="4.2.1">
          <filename>python-mako-0.2.5-4.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="784acf5959d8a40e9401844d4480d29e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2776">
  <id>lxsession</id>
  <title>lxsession security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279720438"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622083" id="622083" title="bug number 622083" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623192" id="623192" title="bug number 623192" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2532" id="CVE-2010-2532" title="CVE-2010-2532" type="cve"/>
  </references>
  <description>lxsession-logout did not properly lock the screen before
suspending, hibernating and switching between users which
could allow attackers with physical access to take control
of the system to obtain sensitive information and / or
execute arbitrary code in the context of the user who is
currently logged in  (CVE-2010-2532).
</description>
  <pkglist>
    <collection>
        <package name="lxsession" arch="i586" version="0.4.4" release="3.1.1">
          <filename>lxsession-0.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="lxsession" arch="x86_64" version="0.4.4" release="3.1.1">
          <filename>lxsession-0.4.4-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5d5248496e8a8829d8dd091dd0f40f14"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2744">
  <id>glibc</id>
  <title>glibc: initgroups leaves out NIS groups on the second invocation</title>
  <release>openSUSE 11.3</release>
  <issued date="1279532355"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623098" id="623098" title="bug number 623098" type="bugzilla"/>
  </references>
  <description>This update fixes a bug in glibc:
- bnc#607064: glibc initgroups leaves out NIS groups on the
  second invocation
</description>
  <pkglist>
    <collection>
        <package name="glibc" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc" arch="i686" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.i686.rpm</filename>
        </package>
        <package name="glibc" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i686" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.i686.rpm</filename>
        </package>
        <package name="glibc-devel" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-html" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-html-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-html" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-html-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-i18ndata-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-i18ndata-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-info" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-info-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-info" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-info-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-locale" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-obsolete-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-obsolete-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-profile" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="nscd" arch="i586" version="2.11.2" release="3.1.1">
          <filename>nscd-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="nscd" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>nscd-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="eba475581ca341d0282204f646886f90"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2729">
  <id>vte</id>
  <title>vte security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279261736"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621097" id="621097" title="bug number 621097" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2713" id="CVE-2010-2713" title="CVE-2010-2713" type="cve"/>
  </references>
  <description>VTE was vulnerable to an old title set+query attack which
could be used by remote attackers to execute arbitrary code
(CVE-2010-2713).
</description>
  <pkglist>
    <collection>
        <package name="vte" arch="i586" version="0.24.1" release="2.1.1">
          <filename>vte-0.24.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="vte" arch="x86_64" version="0.24.1" release="2.1.1">
          <filename>vte-0.24.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="vte-devel" arch="i586" version="0.24.1" release="2.1.1">
          <filename>vte-devel-0.24.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="vte-devel" arch="x86_64" version="0.24.1" release="2.1.1">
          <filename>vte-devel-0.24.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="vte-lang" arch="noarch" version="0.24.1" release="2.1.1">
          <filename>vte-lang-0.24.1-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="84e5a7eac307f669bfc6cffdcd7d8744"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2748">
  <id>spideroak-9681</id>
  <title>spideroak: Update to version 9681</title>
  <release>openSUSE 11.3</release>
  <issued date="1278337505"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621581" id="621581" title="bug number 621581" type="bugzilla"/>
  </references>
  <description>This updates SpiderOak to the latest official version, 9681
(bnc#621581). 


SpiderOak provides an easy, secure and consolidated free
online backup, sync, sharing, access &amp; storage solution.
</description>
  <pkglist>
    <collection>
        <package name="python-asn1" arch="noarch" version="0.0.11" release="1.2">
          <filename>python-asn1-0.0.11-1.2.noarch.rpm</filename>
        </package>
        <package name="python-bsddb3" arch="i586" version="5.0.0" release="1.1">
          <filename>python-bsddb3-5.0.0-1.1.i586.rpm</filename>
        </package>
        <package name="python-bsddb3" arch="x86_64" version="5.0.0" release="1.1">
          <filename>python-bsddb3-5.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="python-cerealizer" arch="noarch" version="0.7" release="1.2">
          <filename>python-cerealizer-0.7-1.2.noarch.rpm</filename>
        </package>
        <package name="python-concurrentloghandler" arch="noarch" version="0.8.4" release="1.2">
          <filename>python-concurrentloghandler-0.8.4-1.2.noarch.rpm</filename>
        </package>
        <package name="python-crypto" arch="i586" version="2.1.0" release="1.9">
          <filename>python-crypto-2.1.0-1.9.i586.rpm</filename>
        </package>
        <package name="python-crypto" arch="x86_64" version="2.1.0" release="1.9">
          <filename>python-crypto-2.1.0-1.9.x86_64.rpm</filename>
        </package>
        <package name="python-curl" arch="i586" version="7.19.0" release="3.2">
          <filename>python-curl-7.19.0-3.2.i586.rpm</filename>
        </package>
        <package name="python-curl" arch="x86_64" version="7.19.0" release="3.2">
          <filename>python-curl-7.19.0-3.2.x86_64.rpm</filename>
        </package>
        <package name="python-louie" arch="i586" version="1.1" release="1.2">
          <filename>python-louie-1.1-1.2.i586.rpm</filename>
        </package>
        <package name="python-louie" arch="x86_64" version="1.1" release="1.2">
          <filename>python-louie-1.1-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-nose" arch="i586" version="0.11.1" release="1.2">
          <filename>python-nose-0.11.1-1.2.i586.rpm</filename>
        </package>
        <package name="python-nose" arch="x86_64" version="0.11.1" release="1.2">
          <filename>python-nose-0.11.1-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-transaction" arch="i586" version="1.0a1" release="2.1.1">
          <filename>python-transaction-1.0a1-2.1.1.i586.rpm</filename>
        </package>
        <package name="python-transaction" arch="x86_64" version="1.0a1" release="2.1.1">
          <filename>python-transaction-1.0a1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-zc-lockfile" arch="noarch" version="1.0.0" release="2.1">
          <filename>python-zc-lockfile-1.0.0-2.1.noarch.rpm</filename>
        </package>
        <package name="python-zconfig" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zconfig-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zconfig" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zconfig-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-zdaemon" arch="noarch" version="2.0.4" release="1.2">
          <filename>python-zdaemon-2.0.4-1.2.noarch.rpm</filename>
        </package>
        <package name="python-zodb3" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zodb3-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zodb3" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zodb3-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-zope-event" arch="i586" version="3.5.0" release="2.2">
          <filename>python-zope-event-3.5.0-2.2.i586.rpm</filename>
        </package>
        <package name="python-zope-event" arch="x86_64" version="3.5.0" release="2.2">
          <filename>python-zope-event-3.5.0-2.2.x86_64.rpm</filename>
        </package>
        <package name="python-zope-proxy" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zope-proxy-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zope-proxy" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zope-proxy-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="spideroak" arch="i586" version="9681" release="0.1.1">
          <filename>spideroak-9681-0.1.1.i586.rpm</filename>
        </package>
        <package name="spideroak" arch="x86_64" version="9681" release="0.1.1">
          <filename>spideroak-9681-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8daa9a03826aef95669a5b369077f153"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2750">
  <id>exim</id>
  <title>exim: fixes two local issues;CVE-2010-2023 and CVE-2010-2024</title>
  <release>openSUSE 11.3</release>
  <issued date="1279617517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612549" id="612549" title="bug number 612549" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2023" id="CVE-2010-2023" title="CVE-2010-2023" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2024" id="CVE-2010-2024" title="CVE-2010-2024" type="cve"/>
  </references>
  <description>Two local vulnerabilities have been fixed in the exim MTA
which allowed attackers to create arbitrary files or to
change ownership of arbitrary files. CVE-2010-2023 and
CVE-2010-2024 have been assigned to these issues.
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.1.1">
          <filename>exim-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.1.1">
          <filename>exim-4.71-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.1.1">
          <filename>eximon-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.1.1">
          <filename>eximon-4.71-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.1.1">
          <filename>eximstats-html-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.1.1">
          <filename>eximstats-html-4.71-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3cfa64ebd32e46b75f3e7ef4499fb62"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2720">
  <id>libtiff-devel</id>
  <title>libtiff security updates</title>
  <release>openSUSE 11.3</release>
  <issued date="1279176442"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612879" id="612879" title="bug number 612879" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067" id="CVE-2010-2067" title="CVE-2010-2067" type="cve"/>
  </references>
  <description>specially crafted tiff images could cause a buffer overflow
in libtiff (CVE-2010-2067).
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-32bit-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.1.1">
          <filename>libtiff3-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff3-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff3-32bit-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.1.1">
          <filename>tiff-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>tiff-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="94fc6c315469432a43f8779997029d74"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2754">
  <id>seamonkey</id>
  <title>seamonkey: Update to 2.0.6 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279721691"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Seamonkey to the 2.0.6 security
release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References


MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-dom-inspector-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-dom-inspector-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-irc-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-irc-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-common-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-common-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-other-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-other-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-venkman-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-venkman-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0a27214568585051fe4391074990ff56"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2737">
  <id>postfix</id>
  <title>postfix: Chrooted mysql.sock lost on mysql restart. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527675"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606251" id="606251" title="bug number 606251" type="bugzilla"/>
  </references>
  <description>This updates fixes several problems with postfix:
- using my_print_defaults command for parsing of /etc/my.cnf
- using quotation marks: &quot;$PF_CHROOT&quot;
- adding sysconfig option POSTFIX_MYSQL_CONN=(socket,tcp)
- MYSQL_SOCK_DIR is mounted with '-o bind' to postfix
  CHROOT now
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-devel-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-devel-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.1.1">
          <filename>postfix-doc-2.7.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-mysql-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-mysql-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-postgresql-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-postgresql-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f2a3614d8d7e94514b5b854f4d8bb359"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2745">
  <id>yast2-gtk</id>
  <title>yast2-gtk: updated to version 2.21.68 fixing bnc#609778 and bnc#620513</title>
  <release>openSUSE 11.3</release>
  <issued date="1279530498"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609778" id="609778" title="bug number 609778" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620513" id="620513" title="bug number 620513" type="bugzilla"/>
  </references>
  <description>yast2-gtk was updated to fix the following bugs bnc#609778
- yast software management (qt,gtk,ncurses): configuration
&gt; online from menubar does not work as expected.  Partly
fixed by this update for the gtk interface by omitting
online-update configuration menu item when not running
online-update. bnc#620513 - sw_single (gtk): freeze when
opening the Dependencies box.  Fixes were also made to make
the Versions box for a selected package more prominent.
</description>
  <pkglist>
    <collection>
        <package name="yast2-gtk" arch="i586" version="2.21.68" release="0.1.1">
          <filename>yast2-gtk-2.21.68-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-gtk" arch="x86_64" version="2.21.68" release="0.1.1">
          <filename>yast2-gtk-2.21.68-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="aafc622b521f6bf7a10c33c97623edba"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2775">
  <id>NetworkManager-novellvpn</id>
  <title>NetworkManager-NovellVPN: Fix for NovellVPN Connection Requires to Accept Advanced Options to Work</title>
  <release>openSUSE 11.3</release>
  <issued date="1279711811"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622854" id="622854" title="bug number 622854" type="bugzilla"/>
  </references>
  <description>This update fixes:
- bnc#622854: NovellVPN Connection Requires to Accept
  Advanced Options to Work
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager-novellvpn" arch="i586" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-0.7.2.r1138-7.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn" arch="x86_64" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-0.7.2.r1138-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-gnome" arch="i586" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-gnome-0.7.2.r1138-7.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-gnome" arch="x86_64" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-gnome-0.7.2.r1138-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="92089c2493010e5ba10b4496e8123ca8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2793">
  <id>release-notes-openSUSE</id>
  <title>release-notes-openSUSE: Various additions and translations</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868056"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621890" id="621890" title="bug number 621890" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617092" id="617092" title="bug number 617092" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619193" id="619193" title="bug number 619193" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621469" id="621469" title="bug number 621469" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623179" id="623179" title="bug number 623179" type="bugzilla"/>
  </references>
  <description>Enhancements to the openSUSE release notes. It adds and
updates some translations.
</description>
  <pkglist>
    <collection>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.6" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.6-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3a2da176b650999d89cf35b0d6e75a7e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2743">
  <id>gnome-panel</id>
  <title>gnome-panel: Fix newly created panels to be visible</title>
  <release>openSUSE 11.3</release>
  <issued date="1279528123"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620418" id="620418" title="bug number 620418" type="bugzilla"/>
  </references>
  <description>This update fixes an issue in Gnome Panel:
- bnc#620418: New Panel failed
</description>
  <pkglist>
    <collection>
        <package name="gnome-panel" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-devel" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-devel-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-devel" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-devel-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-doc" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-doc-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-doc" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-doc-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-extras" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-extras-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-extras" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-extras-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-lang" arch="noarch" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-lang-2.30.0-5.1.1.noarch.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0" arch="i586" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0-32bit" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-32bit-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61e6ca70c87edaaeb2ba72b145c0865c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2741">
  <id>udisks</id>
  <title>udisks: Fixed ejecting usb-drives or disks as normal user</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527609"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618955" id="618955" title="bug number 618955" type="bugzilla"/>
  </references>
  <description>A problem in udisks was fixed:
- bnc#618955: Cannot eject usb-drives or disks as normal
  user
</description>
  <pkglist>
    <collection>
        <package name="udisks" arch="i586" version="1.0.1" release="2.1.1">
          <filename>udisks-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="udisks" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>udisks-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="udisks-devel" arch="i586" version="1.0.1" release="2.1.1">
          <filename>udisks-devel-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="udisks-devel" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>udisks-devel-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="30bc69039fff036aedfdac5dd4adcf98"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2752">
  <id>unscd</id>
  <title>unscd: Fixed unscd does not start issue</title>
  <release>openSUSE 11.3</release>
  <issued date="1279711573"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622910" id="622910" title="bug number 622910" type="bugzilla"/>
  </references>
  <description>This update fixes a non starting unscd issue.

- bnc#622910: unscd does not start, rpm verify does not
  show error :-(
</description>
  <pkglist>
    <collection>
        <package name="unscd" arch="i586" version="0.45" release="6.1.1">
          <filename>unscd-0.45-6.1.1.i586.rpm</filename>
        </package>
        <package name="unscd" arch="x86_64" version="0.45" release="6.1.1">
          <filename>unscd-0.45-6.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a618f6f1ba6d2380c7bf23f8cdfbbd8e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2755">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Update to 3.0.6 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279723552"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Thunderbird to the 3.0.6
security release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-devel-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-devel-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-common-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-common-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-other-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-other-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="3.1.1">
          <filename>enigmail-1.0.1-3.1.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="3.1.1">
          <filename>enigmail-1.0.1-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="366a569e33905d24e7539a5ec70cb07e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2756">
  <id>wine</id>
  <title>wine: Update from 1.2-rc6 to 1.2 release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279780819"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623394" id="623394" title="bug number 623394" type="bugzilla"/>
  </references>
  <description>This update brings Wine from the 1.2 release candidate 6 to
the final 1.2 release.
</description>
  <pkglist>
    <collection>
        <package name="wine" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine" arch="x86_64" version="1.2" release="0.1.1">
          <filename>wine-1.2-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="wine-32bit" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-32bit-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine-devel" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-devel-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine-devel" arch="x86_64" version="1.2" release="0.1.1">
          <filename>wine-devel-1.2-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5b8f75ddbdb9270e24b376b404ff130e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2785">
  <id>k3b</id>
  <title>k3b: Update to 2.0 final</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868201"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623399" id="623399" title="bug number 623399" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619731" id="619731" title="bug number 619731" type="bugzilla"/>
  </references>
  <description>Update to 2.0 final. It updates only translations and fixes
some bugs.
- Fix freeze while ripping CD audio (bko#235466)
- Fix drag and drop from file managers to k3b project
  (bko#242745)
- Install app icons in hicolor
- Fixing missing icon when Oxygen icons not used for
  desktop (bnc#619731)
</description>
  <pkglist>
    <collection>
        <package name="k3b" arch="i586" version="2.0.0" release="1.1.1">
          <filename>k3b-2.0.0-1.1.1.i586.rpm</filename>
        </package>
        <package name="k3b" arch="x86_64" version="2.0.0" release="1.1.1">
          <filename>k3b-2.0.0-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="k3b-devel" arch="i586" version="2.0.0" release="1.1.1">
          <filename>k3b-devel-2.0.0-1.1.1.i586.rpm</filename>
        </package>
        <package name="k3b-devel" arch="x86_64" version="2.0.0" release="1.1.1">
          <filename>k3b-devel-2.0.0-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="k3b-lang" arch="noarch" version="2.0.0" release="1.1.1">
          <filename>k3b-lang-2.0.0-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="20228f09ab5f3c5d8a9f0695748d70ee"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2807">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Update to 3.6.8 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1280217183"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Firefox to the 3.6.8 security
release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211 / CVE-2010-1212: Mozilla developers
identified and fixed several memory safety bugs in the
browser engine used in Firefox and other Mozilla-based
products. Some of these bugs showed evidence of memory
corruption under certain circumstances, and we presume that
with enough effort at least some of these could be
exploited to run arbitrary code.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-38 / CVE-2010-1215: Mozilla security researcher
moz_bug_r_a4 reported that when content script which is
running in a chrome context accesses a content object via
SJOW, the content code can gain access to an object from
the chrome scope and use that object to run arbitrary
JavaScript with chrome privileges.

Firefox 3.5 and other Mozilla products built from Gecko
1.9.1 were not affected by this issue.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2010-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-43 / CVE-2010-1207: Mozilla developer Vladimir
Vukicevic reported that a canvas element can be used to
read data from another site, violating the same-origin
policy. The read restriction placed on a canvas element
which has had cross-origin data rendered into it can be
bypassed by retaining a reference to the canvas element's
context and deleting the associated canvas node from the
DOM.

MFSA 2010-44 / CVE-2010-1210: Security researcher O.
Andersen reported that undefined positions within various 8
bit character encodings are mapped to the sequence U+FFFD
which when displayed causes the immediately following
character to disappear from the text run. This could
potentially contribute to XSS problems on sites which
expected extra characters to be present within strings
being sanitized on the server.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.

MFSA 2010-48 / CVE-2010-2755: Mozilla developer Daniel
Holbert reported that the fix to the plugin parameter array
crash that was fixed in Firefox 3.6.7 caused a crash
showing signs of memory corruption. In certain
circumstances, properties in the plugin instance's
parameter array could be freed prematurely leaving a
dangling pointer that the plugin could execute, potentially
calling into attacker-controlled memory.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-branding-upstream-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-branding-upstream-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-common-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-common-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-other-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-other-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-js192-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-js192-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-js192-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e8ac6c95b4b2bb7e27c5e11c6cd2e836"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2786">
  <id>gtkglext</id>
  <title>gtkglext: This update fixes the gtkglext library to not reference non-existing symbols</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868209"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617677" id="617677" title="bug number 617677" type="bugzilla"/>
  </references>
  <description>This update fixes the gtkglext library to not reference
non-existing symbols: Can't link gtkglext application:
undefined reference to `GTK_WIDGET_REALIZED'
</description>
  <pkglist>
    <collection>
        <package name="gtkglext" arch="i586" version="1.2.0" release="183.1.1">
          <filename>gtkglext-1.2.0-183.1.1.i586.rpm</filename>
        </package>
        <package name="gtkglext" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
        <package name="gtkglext-32bit" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-32bit-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
        <package name="gtkglext-devel" arch="i586" version="1.2.0" release="183.1.1">
          <filename>gtkglext-devel-1.2.0-183.1.1.i586.rpm</filename>
        </package>
        <package name="gtkglext-devel" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-devel-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
        <package name="gtkglext-doc" arch="i586" version="1.2.0" release="183.1.1">
          <filename>gtkglext-doc-1.2.0-183.1.1.i586.rpm</filename>
        </package>
        <package name="gtkglext-doc" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-doc-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61a007d88c467ed143befea58cf693e8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2779">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Update to 1.9.1.11 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279781379"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla XULRunner to the 1.9.1.11
security release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2010-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>python-xpcom191-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>python-xpcom191-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7e038f8214dd5329f49cd0303cc02f5c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2784">
  <id>kipi-plugins</id>
  <title>digiKam, gwenview: Failed to rotate image. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868536"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=611983" id="611983" title="bug number 611983" type="bugzilla"/>
  </references>
  <description>The lossless JPEG rotate feature was broken by a runtime
incompatibility with the new libjpeg8 that is resolved by
this patch.
</description>
  <pkglist>
    <collection>
        <package name="kipi-plugins" arch="i586" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-1.2.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="kipi-plugins" arch="x86_64" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-1.2.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kipi-plugins-acquireimage" arch="i586" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-acquireimage-1.2.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="kipi-plugins-acquireimage" arch="x86_64" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-acquireimage-1.2.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kipi-plugins-doc" arch="i586" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-doc-1.2.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="kipi-plugins-doc" arch="x86_64" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-doc-1.2.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kipi-plugins-lang" arch="noarch" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-lang-1.2.0-6.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="60e7f141ecfa7dfcda71f1c0bf60ce4e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2726">
  <id>ghostscript-devel</id>
  <title>ghostscript security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279091077"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605043" id="605043" title="bug number 605043" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559122" id="559122" title="bug number 559122" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608071" id="608071" title="bug number 608071" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2055" id="CVE-2010-2055" title="CVE-2010-2055" type="cve"/>
  </references>
  <description>ghostscript by default read some initialization files from
the current working directory. Local attackers could
potentially exploit that to have other users execute
arbitrary commands by placing such files e.g. in /tmp
(CVE-2010-2055).
</description>
  <pkglist>
    <collection>
        <package name="ghostscript-devel" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-devel-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-devel" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-devel-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-fonts-other" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-other-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-fonts-other" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-other-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-fonts-rus" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-rus-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-fonts-rus" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-rus-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-fonts-std" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-std-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-fonts-std" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-std-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-ijs-devel" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-ijs-devel-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-ijs-devel" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-ijs-devel-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-library" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-library-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-library" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-library-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-omni" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-omni-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-omni" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-omni-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-x11" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-x11-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-x11" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-x11-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgimpprint" arch="i586" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-4.2.7-15.1.1.i586.rpm</filename>
        </package>
        <package name="libgimpprint" arch="x86_64" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-4.2.7-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgimpprint-devel" arch="i586" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-devel-4.2.7-15.1.1.i586.rpm</filename>
        </package>
        <package name="libgimpprint-devel" arch="x86_64" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-devel-4.2.7-15.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="14e69d4a0dd51b6a8e6b963f6a9315e2"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2806">
  <id>libwebkit</id>
  <title>libwebkit security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868857"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622994" id="622994" title="bug number 622994" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=" id="" title="" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1386" id="CVE-2010-1386" title="CVE-2010-1386" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1392" id="CVE-2010-1392" title="CVE-2010-1392" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1405" id="CVE-2010-1405" title="CVE-2010-1405" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1407" id="CVE-2010-1407" title="CVE-2010-1407" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1416" id="CVE-2010-1416" title="CVE-2010-1416" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1417" id="CVE-2010-1417" title="CVE-2010-1417" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1665" id="CVE-2010-1665" title="CVE-2010-1665" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1418" id="CVE-2010-1418" title="CVE-2010-1418" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1421" id="CVE-2010-1421" title="CVE-2010-1421" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1422" id="CVE-2010-1422" title="CVE-2010-1422" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1501" id="CVE-2010-1501" title="CVE-2010-1501" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1767" id="CVE-2010-1767" title="CVE-2010-1767" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1664" id="CVE-2010-1664" title="CVE-2010-1664" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1758" id="CVE-2010-1758" title="CVE-2010-1758" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1759" id="CVE-2010-1759" title="CVE-2010-1759" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1760" id="CVE-2010-1760" title="CVE-2010-1760" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1761" id="CVE-2010-1761" title="CVE-2010-1761" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1762" id="CVE-2010-1762" title="CVE-2010-1762" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1770" id="CVE-2010-1770" title="CVE-2010-1770" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1771" id="CVE-2010-1771" title="CVE-2010-1771" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1772" id="CVE-2010-1772" title="CVE-2010-1772" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1773" id="CVE-2010-1773" title="CVE-2010-1773" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1774" id="CVE-2010-1774" title="CVE-2010-1774" type="cve"/>
  </references>
  <description>The libwebkit browser engine version 1.2.3 fixes several
security relevant bugs

(CVE-2010-1386, CVE-2010-1392, CVE-2010-1405,
CVE-2010-1407, CVE-2010-1416, CVE-2010-1417, CVE-2010-1665,
CVE-2010-1418, CVE-2010-1421, CVE-2010-1422, CVE-2010-1501,
CVE-2010-1767, CVE-2010-1664, CVE-2010-1758, CVE-2010-1759,
CVE-2010-1760, CVE-2010-1761, CVE-2010-1762, CVE-2010-1770,
CVE-2010-1771, CVE-2010-1772, CVE-2010-1773, CVE-2010-1774)
</description>
  <pkglist>
    <collection>
        <package name="libwebkit-1_0-2" arch="i586" version="1.2.3" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2-32bit" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>libwebkit-1_0-2-32bit-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="i586" version="1.2.3" release="0.1.1">
          <filename>libwebkit-devel-1.2.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>libwebkit-devel-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-lang" arch="noarch" version="1.2.3" release="0.1.1">
          <filename>libwebkit-lang-1.2.3-0.1.1.noarch.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="i586" version="1.2.3" release="0.1.1">
          <filename>webkit-jsc-1.2.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>webkit-jsc-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5b535cc46f901e718aa899c8998445a8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2860">
  <id>kvirc</id>
  <title>kvirc: remote CTCP commands execution via specially-crafted CTCP parameter</title>
  <release>openSUSE 11.3</release>
  <issued date="1280745619"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626942" id="626942" title="bug number 626942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2785" id="CVE-2010-2785" title="CVE-2010-2785" type="cve"/>
  </references>
  <description>This update of kvirc does not further allow remote client
to send arbitrary CTCP commands. (CVE-2010-2785)
</description>
  <pkglist>
    <collection>
        <package name="kvirc" arch="i586" version="3.4.2" release="10.1.1">
          <filename>kvirc-3.4.2-10.1.1.i586.rpm</filename>
        </package>
        <package name="kvirc" arch="x86_64" version="3.4.2" release="10.1.1">
          <filename>kvirc-3.4.2-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="kvirc-devel" arch="i586" version="3.4.2" release="10.1.1">
          <filename>kvirc-devel-3.4.2-10.1.1.i586.rpm</filename>
        </package>
        <package name="kvirc-devel" arch="x86_64" version="3.4.2" release="10.1.1">
          <filename>kvirc-devel-3.4.2-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c30e2f232540b7b0f16d2c8fb4973c36"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2852">
  <id>squidGuard</id>
  <title>squidGuard: Fixed buffer overflows</title>
  <release>openSUSE 11.3</release>
  <issued date="1280448464"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=550930" id="550930" title="bug number 550930" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625439" id="625439" title="bug number 625439" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3700" id="CVE-2009-3700" title="CVE-2009-3700" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3826" id="CVE-2009-3826" title="CVE-2009-3826" type="cve"/>
  </references>
  <description>Two buffer overflows in squidGard were fixed:

CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3
and 1.4 allows remote attackers to cause a denial of
service (application hang or loss of blocking
functionality) via a long URL with many / (slash)
characters, related to &quot;emergency mode.&quot;

CVE-2009-3826: Multiple buffer overflows in squidGuard 1.4
allow remote attackers to bypass intended URL blocking via
a long URL, related to (1) the relationship between a
certain buffer size in squidGuard and a certain buffer size
in Squid and (2) a redirect URL that contains information
about the originally requested URL.

Also a logrotate mistake was fixed.
</description>
  <pkglist>
    <collection>
        <package name="squidGuard" arch="i586" version="1.4" release="7.1.1">
          <filename>squidGuard-1.4-7.1.1.i586.rpm</filename>
        </package>
        <package name="squidGuard" arch="x86_64" version="1.4" release="7.1.1">
          <filename>squidGuard-1.4-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="squidGuard-doc" arch="i586" version="1.4" release="7.1.1">
          <filename>squidGuard-doc-1.4-7.1.1.i586.rpm</filename>
        </package>
        <package name="squidGuard-doc" arch="x86_64" version="1.4" release="7.1.1">
          <filename>squidGuard-doc-1.4-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a22386eae5045a71bfb8987ebe974a28"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2818">
  <id>pam_mount</id>
  <title>pam_mount: Fix segfault when executed from sshd</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335100"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619780" id="619780" title="bug number 619780" type="bugzilla"/>
  </references>
  <description>This update fixes a segfault in pam_mount when executed
from sshd.
</description>
  <pkglist>
    <collection>
        <package name="pam_mount" arch="i586" version="1.34" release="3.1.1">
          <filename>pam_mount-1.34-3.1.1.i586.rpm</filename>
        </package>
        <package name="pam_mount" arch="x86_64" version="1.34" release="3.1.1">
          <filename>pam_mount-1.34-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="pam_mount-32bit" arch="x86_64" version="1.34" release="3.1.1">
          <filename>pam_mount-32bit-1.34-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="39ebf45eee235aa672da56aa0d27e84e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2814">
  <id>usb_modeswitch</id>
  <title>usb_modeswitch: version upgrade to support more devices</title>
  <release>openSUSE 11.3</release>
  <issued date="1280334862"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622525" id="622525" title="bug number 622525" type="bugzilla"/>
  </references>
  <description>usb_modeswitch is upgraded to version 1.1.3 and
usb_modeswitch-data to version 20100707 to improve the
openSUSE hardware compatibility.
</description>
  <pkglist>
    <collection>
        <package name="usb_modeswitch" arch="i586" version="1.1.3" release="1.1.1">
          <filename>usb_modeswitch-1.1.3-1.1.1.i586.rpm</filename>
        </package>
        <package name="usb_modeswitch" arch="x86_64" version="1.1.3" release="1.1.1">
          <filename>usb_modeswitch-1.1.3-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="usb_modeswitch-data" arch="noarch" version="1.1.3" release="1.1.1">
          <filename>usb_modeswitch-data-1.1.3-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2d163603a5fbde7432d3934bb1445df8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2815">
  <id>ethtool</id>
  <title>ethtool: Add option to modify GRO setting</title>
  <release>openSUSE 11.3</release>
  <issued date="1280334936"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616263" id="616263" title="bug number 616263" type="bugzilla"/>
  </references>
  <description>ethtool has no way to turn off generic-receive-offload.
This patch adds commandline option to enable/disable GRO.
</description>
  <pkglist>
    <collection>
        <package name="ethtool" arch="i586" version="6" release="85.1.1">
          <filename>ethtool-6-85.1.1.i586.rpm</filename>
        </package>
        <package name="ethtool" arch="x86_64" version="6" release="85.1.1">
          <filename>ethtool-6-85.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e4a7e63d42bbeb171491a18c66798f7b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2831">
  <id>mrtg</id>
  <title>mrtg: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280448588"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625437" id="625437" title="bug number 625437" type="bugzilla"/>
  </references>
  <description>The execution of mrtg ends in a parse error when perl 5.12
is used. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="mrtg" arch="i586" version="2.16.2" release="45.1.1">
          <filename>mrtg-2.16.2-45.1.1.i586.rpm</filename>
        </package>
        <package name="mrtg" arch="x86_64" version="2.16.2" release="45.1.1">
          <filename>mrtg-2.16.2-45.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="53417085a02281bcc3daef062186baaf"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2832">
  <id>jpeg</id>
  <title>libjpeg8: Recommend to old libjpeg version to fix 3rd party applications</title>
  <release>openSUSE 11.3</release>
  <issued date="1279874350"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624583" id="624583" title="bug number 624583" type="bugzilla"/>
  </references>
  <description>Re-add libjpeg6 to the default installation so that
applications installed not from rpm can start again.
</description>
  <pkglist>
    <collection>
        <package name="jpeg" arch="i586" version="8.0.1" release="2.1.1">
          <filename>jpeg-8.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="jpeg" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>jpeg-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg-devel" arch="i586" version="8.0.1" release="2.1.1">
          <filename>libjpeg-devel-8.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libjpeg-devel" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg-devel-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg-devel-32bit" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg-devel-32bit-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg6" arch="i586" version="6.2.0" release="3.1">
          <filename>libjpeg6-6.2.0-3.1.i586.rpm</filename>
        </package>
        <package name="libjpeg6" arch="x86_64" version="6.2.0" release="3.1">
          <filename>libjpeg6-6.2.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg6-32bit" arch="x86_64" version="6.2.0" release="3.1">
          <filename>libjpeg6-32bit-6.2.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg8" arch="i586" version="8.0.1" release="2.1.1">
          <filename>libjpeg8-8.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libjpeg8" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg8-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg8-32bit" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg8-32bit-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="15b4a4aeb0b99d5caf51f970a98c5f0d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2828">
  <id>perl</id>
  <title>perl: This update fixes a crash caused by the use of constants.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280450187"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621856" id="621856" title="bug number 621856" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624628" id="624628" title="bug number 624628" type="bugzilla"/>
  </references>
  <description>If a constant is defined with the 'use constant' pragma,
perl may crash later on when the constant is used as
function argument (like in a print statement). Also, a bug
in the h2ph translator was fixed that led to spurious
warnings about _h2ph_pre.ph if 'perl -w' was used.
</description>
  <pkglist>
    <collection>
        <package name="perl" arch="i586" version="5.12.1" release="2.1.1">
          <filename>perl-5.12.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="perl" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-32bit" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-32bit-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" arch="i586" version="5.12.1" release="2.1.1">
          <filename>perl-base-5.12.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="perl-base" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-base-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base-32bit" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-base-32bit-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-doc" arch="noarch" version="5.12.1" release="2.1.1">
          <filename>perl-doc-5.12.1-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="83e99dc16d9204f941aa0e3f17622428"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2816">
  <id>iputils</id>
  <title>iputils: Fix arping</title>
  <release>openSUSE 11.3</release>
  <issued date="1280334998"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610839" id="610839" title="bug number 610839" type="bugzilla"/>
  </references>
  <description>This update makes arping work for ethernet devices
(bnc#610839).
</description>
  <pkglist>
    <collection>
        <package name="iputils" arch="i586" version="ss021109" release="300.1.1">
          <filename>iputils-ss021109-300.1.1.i586.rpm</filename>
        </package>
        <package name="iputils" arch="x86_64" version="ss021109" release="300.1.1">
          <filename>iputils-ss021109-300.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dd4b25bc99fd92514cfc1b376ea5760b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2825">
  <id>bind</id>
  <title>bind: Fixed a bug in named chrooting</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335608"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625019" id="625019" title="bug number 625019" type="bugzilla"/>
  </references>
  <description>The bind name server init script was updated to fix:
- #625019: named refuse to start : init.d/named script is
  wrong to mount /proc bind
</description>
  <pkglist>
    <collection>
        <package name="bind" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-chrootenv-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-chrootenv-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-devel" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-devel-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-devel" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-devel-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" arch="noarch" version="9.7.1" release="2.1.1">
          <filename>bind-doc-9.7.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="bind-libs" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-libs-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-libs" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-libs-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-libs-32bit" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-libs-32bit-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-utils" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-utils-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-utils" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-utils-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b3712e67d3ab02ccf8377ad5c9667233"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2819">
  <id>gpg2</id>
  <title>gpg2: reuses a freed pointer when verifying a signature</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335261"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625947" id="625947" title="bug number 625947" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547" id="CVE-2010-2547" title="CVE-2010-2547" type="cve"/>
  </references>
  <description>GnuPG2 was vulnerable to arbitrary code execution by
context-dependent attackers because of reusing a freed
pointer when verifying a signature or importing a
certificate with many &quot;Subject Alternate Names&quot;.
(CVE-2010-2547)
</description>
  <pkglist>
    <collection>
        <package name="gpg2" arch="i586" version="2.0.15" release="5.1.1">
          <filename>gpg2-2.0.15-5.1.1.i586.rpm</filename>
        </package>
        <package name="gpg2" arch="x86_64" version="2.0.15" release="5.1.1">
          <filename>gpg2-2.0.15-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-lang" arch="noarch" version="2.0.15" release="5.1.1">
          <filename>gpg2-lang-2.0.15-5.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ebd0ab5f6fffd26de0b92f19ee80e1dc"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2859">
  <id>NetworkManager</id>
  <title>NetworkManager: Fixed no longer connecting after machine crashed during suspend</title>
  <release>openSUSE 11.3</release>
  <issued date="1280743898"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=585433" id="585433" title="bug number 585433" type="bugzilla"/>
  </references>
  <description>This update fixes a bug in NetworkManager:
- #585433: NetworkManager 0.8 no longer connects after
  machine crashed during suspend
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-0.8-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-devel-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-devel-0.8-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-doc-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-doc-0.8-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-glib-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-glib-0.8-8.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="10e2f275ff8e8b65af784f22f3f8fc58"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2863">
  <id>ImageMagick</id>
  <title>ImageMagick: It cannot compress grayscale TIFF images with JPEG. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280748239"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615223" id="615223" title="bug number 615223" type="bugzilla"/>
  </references>
  <description>ImageMagick cannot compress grayscale TIFF images with
JPEG. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="ImageMagick" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="ImageMagick" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="ImageMagick-devel" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-devel-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="ImageMagick-devel" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-devel-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="ImageMagick-doc" arch="noarch" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-doc-6.6.1.0-4.1.1.noarch.rpm</filename>
        </package>
        <package name="ImageMagick-extra" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-extra-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="ImageMagick-extra" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-extra-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagick++-devel" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++-devel-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagick++-devel" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++-devel-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagick++3" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++3-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagick++3" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++3-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickCore3" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagickCore3-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagickCore3" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickCore3-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickCore3-32bit" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickCore3-32bit-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickWand3" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagickWand3-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagickWand3" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickWand3-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickWand3-32bit" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickWand3-32bit-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-PerlMagick" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>perl-PerlMagick-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="perl-PerlMagick" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>perl-PerlMagick-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a1d0b2d9ee0ef1f656643f58eebf3a03"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2864">
  <id>star</id>
  <title>star: This updates fixes a buffer overflow in star.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280747780"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625527" id="625527" title="bug number 625527" type="bugzilla"/>
  </references>
  <description>star is trying to copy data into buffer which is not long
enough, leading to buffer overflow and crash. Fixed bz this
update.
</description>
  <pkglist>
    <collection>
        <package name="star" arch="i586" version="1.5final" release="43.1.1">
          <filename>star-1.5final-43.1.1.i586.rpm</filename>
        </package>
        <package name="star" arch="x86_64" version="1.5final" release="43.1.1">
          <filename>star-1.5final-43.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5e30580cda5ab4fa518ffba62bea8c63"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2873">
  <id>apparmor-utils</id>
  <title>apparmor-utils: It is totally broken - can't find their perl module. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280928327"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619893" id="619893" title="bug number 619893" type="bugzilla"/>
  </references>
  <description>Apparmor utils is totally broken - can't find their perl
module. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="apparmor-utils" arch="noarch" version="2.3.1" release="19.1.1">
          <filename>apparmor-utils-2.3.1-19.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d93fd570dea34dc0f11af3d8c13fb2e8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2871">
  <id>kdeartwork4</id>
  <title>kdeartwork4: fixed xscreensaver-based screensavers not working in KDE4</title>
  <release>openSUSE 11.3</release>
  <issued date="1280869202"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624288" id="624288" title="bug number 624288" type="bugzilla"/>
  </references>
  <description>This update fixes:
- bnc#624288: xscreensaver-based screensavers not working
  in KDE4
</description>
  <pkglist>
    <collection>
        <package name="kdeartwork4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdeartwork4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdeartwork4-screensaver" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-screensaver-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdeartwork4-screensaver" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-screensaver-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="xscreensaver" arch="i586" version="5.10" release="5.2">
          <filename>xscreensaver-5.10-5.2.i586.rpm</filename>
        </package>
        <package name="xscreensaver" arch="x86_64" version="5.10" release="5.2">
          <filename>xscreensaver-5.10-5.2.x86_64.rpm</filename>
        </package>
        <package name="xscreensaver-data" arch="i586" version="5.10" release="5.2">
          <filename>xscreensaver-data-5.10-5.2.i586.rpm</filename>
        </package>
        <package name="xscreensaver-data" arch="x86_64" version="5.10" release="5.2">
          <filename>xscreensaver-data-5.10-5.2.x86_64.rpm</filename>
        </package>
        <package name="xscreensaver-data-extra" arch="i586" version="5.10" release="5.2">
          <filename>xscreensaver-data-extra-5.10-5.2.i586.rpm</filename>
        </package>
        <package name="xscreensaver-data-extra" arch="x86_64" version="5.10" release="5.2">
          <filename>xscreensaver-data-extra-5.10-5.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="758ec3611bb79ce3ca3e572497f5867d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2854">
  <id>build</id>
  <title>build: Distribution default is wrong. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280746319"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618004" id="618004" title="bug number 618004" type="bugzilla"/>
  </references>
  <description>This update brings the build package to the 2010-07-28
version which includes many fixes and enhancements for
building openSUSE packages, including: 

- export BUILD_DEBUG so rpmlint can check for it
  (bnc#618004)
- support for Files provide
- document --repo and --dis
- update wiki links
- fix bugs in repo handling
- fix distribution autodetection code
</description>
  <pkglist>
    <collection>
        <package name="build" arch="noarch" version="2010.07.28" release="1.1.1">
          <filename>build-2010.07.28-1.1.1.noarch.rpm</filename>
        </package>
        <package name="build-mkbaselibs" arch="noarch" version="2010.07.28" release="1.1.1">
          <filename>build-mkbaselibs-2010.07.28-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3a6792deadb0ec74521b237934105a3d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2870">
  <id>xpdf-poppler</id>
  <title>xpdf-poppler: This update fixes a crash in xpdf-poppler.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280793227"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617623" id="617623" title="bug number 617623" type="bugzilla"/>
  </references>
  <description>This update fixes two crashes in XPutImage, &quot;*image is
NULL&quot;.
</description>
  <pkglist>
    <collection>
        <package name="xpdf-poppler" arch="i586" version="3.02" release="11.1.1">
          <filename>xpdf-poppler-3.02-11.1.1.i586.rpm</filename>
        </package>
        <package name="xpdf-poppler" arch="x86_64" version="3.02" release="11.1.1">
          <filename>xpdf-poppler-3.02-11.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="189f6aedeec368492119a0b5cb6dd2a9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2866">
  <id>beaver</id>
  <title>beaver: Update from 0.4.0rc1 to the stable release 0.4.0</title>
  <release>openSUSE 11.3</release>
  <issued date="1280793406"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623221" id="623221" title="bug number 623221" type="bugzilla"/>
  </references>
  <description>Beaver has been updated to stable release 0.4.0 form
previous 0.4.0 release candidate 1.
</description>
  <pkglist>
    <collection>
        <package name="beaver" arch="i586" version="0.4.0" release="0.1.1">
          <filename>beaver-0.4.0-0.1.1.i586.rpm</filename>
        </package>
        <package name="beaver" arch="x86_64" version="0.4.0" release="0.1.1">
          <filename>beaver-0.4.0-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e20735c219e7595615a134b8e00408c8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2855">
  <id>strongswan</id>
  <title>strongswan: fixing snprintf overflows</title>
  <release>openSUSE 11.3</release>
  <issued date="1280746663"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615915" id="615915" title="bug number 615915" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2628" id="CVE-2010-2628" title="CVE-2010-2628" type="cve"/>
  </references>
  <description>Remote unauthenticated attackers could cause a buffer
overflow in strongswan's IKE deamon by using specially
crafted certificates or identify information. Attackers
could potentially exploit that to execute code
(CVE-2010-2628).
</description>
  <pkglist>
    <collection>
        <package name="strongswan" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-doc" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-doc-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-doc" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-doc-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-ikev1" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev1-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-ikev1" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev1-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-ikev2" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev2-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-ikev2" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev2-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-ipsec" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-ipsec-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-ipsec" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-ipsec-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-libs0" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-libs0-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-libs0" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-libs0-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-nm" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-nm-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-nm" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-nm-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6d77dba63eab3c9dd063281af6a4a8b7"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2856">
  <id>sysvinit</id>
  <title>sysvinit: &quot;startproc/checkproc/killproc&quot; do not work with scripts. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335583"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623766" id="623766" title="bug number 623766" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559534" id="559534" title="bug number 559534" type="bugzilla"/>
  </references>
  <description>&quot;startproc/checkproc/killproc&quot; do not work with scripts.
Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="sysvinit" arch="i586" version="2.88" release="10.1.1">
          <filename>sysvinit-2.88-10.1.1.i586.rpm</filename>
        </package>
        <package name="sysvinit" arch="x86_64" version="2.88" release="10.1.1">
          <filename>sysvinit-2.88-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="sysvinit-tools" arch="i586" version="2.88" release="10.1.1">
          <filename>sysvinit-tools-2.88-10.1.1.i586.rpm</filename>
        </package>
        <package name="sysvinit-tools" arch="x86_64" version="2.88" release="10.1.1">
          <filename>sysvinit-tools-2.88-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7f02e1f4a7313c0699af1ce0344e194a"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2886">
  <id>yast2-add-on-creator</id>
  <title>yast2-add-on-creator: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281001949"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623036" id="623036" title="bug number 623036" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=540627" id="540627" title="bug number 540627" type="bugzilla"/>
  </references>
  <description>Yast Add-on Creator build broken addons when multiple
addons at one time are created. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="yast2-add-on-creator" arch="noarch" version="2.19.2" release="1.1.1">
          <filename>yast2-add-on-creator-2.19.2-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="91e981205071a429636674d340b07e59"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2908">
  <id>libpcsclite1</id>
  <title>pcsc-lite: fix for CVE-2009-4901 and CVE-2009-4902</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545029"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629026" id="629026" title="bug number 629026" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4901" id="CVE-2009-4901" title="CVE-2009-4901" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4902" id="CVE-2009-4902" title="CVE-2009-4902" type="cve"/>
  </references>
  <description>This update of pcsc-liste fixes two vulnerabilities:
- CVE-2009-4901: local denial of service (daemon crash) via
  crafted SCARD_SET_ATTRIB message data, a related issue to
  CVE-2010-0407.
- CVE-2009-4902: a buffer overflow might allow local users
  to gain privileges via crafted SCARD_CONTROL message
  data, this vulnerability exists because of an incorrect
  fix for CVE-2010-0407.
</description>
  <pkglist>
    <collection>
        <package name="libpcsclite1" arch="i586" version="1.5.5" release="7.1.1">
          <filename>libpcsclite1-1.5.5-7.1.1.i586.rpm</filename>
        </package>
        <package name="libpcsclite1" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>libpcsclite1-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpcsclite1-32bit" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>libpcsclite1-32bit-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-lite" arch="i586" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-1.5.5-7.1.1.i586.rpm</filename>
        </package>
        <package name="pcsc-lite" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-lite-devel" arch="i586" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-devel-1.5.5-7.1.1.i586.rpm</filename>
        </package>
        <package name="pcsc-lite-devel" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-devel-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6dc0f226897e2807f0d495db198a2c41"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2895">
  <id>flash-player</id>
  <title>flash-player: Updated to security update version 10.1.82.76</title>
  <release>openSUSE 11.3</release>
  <issued date="1281521184"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630108" id="630108" title="bug number 630108" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209" id="CVE-2010-0209" title="CVE-2010-0209" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2188" id="CVE-2010-2188" title="CVE-2010-2188" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213" id="CVE-2010-2213" title="CVE-2010-2213" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214" id="CVE-2010-2214" title="CVE-2010-2214" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216" id="CVE-2010-2216" title="CVE-2010-2216" type="cve"/>
  </references>
  <description>Flash Player was updated to version 10.1.82.76 fixing
several critical security issues.

CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,
CVE2010-2215, CVE-2010-2216
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.82.76" release="0.1.1">
          <filename>flash-player-10.1.82.76-0.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3554ddb3febdeb28777206fc3f2d86c3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2884">
  <id>hal</id>
  <title>hal: This update fixes a hald-probe-input crash</title>
  <release>openSUSE 11.3</release>
  <issued date="1281025663"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=577489" id="577489" title="bug number 577489" type="bugzilla"/>
  </references>
  <description>Fixes segmentation fault in hald-probe-input. The cause was
an error structure before initialization (bnc#577489).
</description>
  <pkglist>
    <collection>
        <package name="hal" arch="i586" version="0.5.14" release="9.1.1">
          <filename>hal-0.5.14-9.1.1.i586.rpm</filename>
        </package>
        <package name="hal" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
        <package name="hal-32bit" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-32bit-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
        <package name="hal-devel" arch="i586" version="0.5.14" release="9.1.1">
          <filename>hal-devel-0.5.14-9.1.1.i586.rpm</filename>
        </package>
        <package name="hal-devel" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-devel-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
        <package name="hal-devel-32bit" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-devel-32bit-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="65b103602b3fb8507b01f3b40c722b89"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2899">
  <id>release-notes-openSUSE</id>
  <title>release-notes-openSUSE: Enhancements and translation update</title>
  <release>openSUSE 11.3</release>
  <issued date="1281521893"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627596" id="627596" title="bug number 627596" type="bugzilla"/>
  </references>
  <description>Update to version 11.3.7:
* New entry: SSH Public Key Authentication (bnc#627596).
* Update translations.
</description>
  <pkglist>
    <collection>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.7" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.7-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5704f4efbb89b9a6fa242061af400fc9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2896">
  <id>anjuta</id>
  <title>anjuta: This update fixes a crash on start caused through a missing package dependency.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281522490"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624924" id="624924" title="bug number 624924" type="bugzilla"/>
  </references>
  <description>Anjuta crashes after start because of a missing dependency.
The package &quot;libgda-sqlite&quot; was missing in the
requirements. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="anjuta" arch="i586" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-2.30.1.0-3.1.1.i586.rpm</filename>
        </package>
        <package name="anjuta" arch="x86_64" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-2.30.1.0-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="anjuta-devel" arch="i586" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-devel-2.30.1.0-3.1.1.i586.rpm</filename>
        </package>
        <package name="anjuta-devel" arch="x86_64" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-devel-2.30.1.0-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="anjuta-doc" arch="i586" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-doc-2.30.1.0-3.1.1.i586.rpm</filename>
        </package>
        <package name="anjuta-doc" arch="x86_64" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-doc-2.30.1.0-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="anjuta-lang" arch="noarch" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-lang-2.30.1.0-3.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="722532d27ff9c2d00dd0386f9b515dfd"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2921">
  <id>lxsession</id>
  <title>lxsession: Logout doesn't work properly without hal. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281620896"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627416" id="627416" title="bug number 627416" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- lxsession-logout can finally fully work without HAL
</description>
  <pkglist>
    <collection>
        <package name="lxsession" arch="i586" version="0.4.4" release="3.2.1">
          <filename>lxsession-0.4.4-3.2.1.i586.rpm</filename>
        </package>
        <package name="lxsession" arch="x86_64" version="0.4.4" release="3.2.1">
          <filename>lxsession-0.4.4-3.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="795ff7e086c3b416ec5068f35df88277"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2925">
  <id>libxmmsclient++-glib1</id>
  <title>xmms2-devel: It does not install xmms runtime libraries. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281632095"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627610" id="627610" title="bug number 627610" type="bugzilla"/>
  </references>
  <description>This update fix xmms2-devel missing dependencies.
</description>
  <pkglist>
    <collection>
        <package name="libxmmsclient++-glib1" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient++-glib1-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient++-glib1" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient++-glib1-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmmsclient++4" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient++4-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient++4" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient++4-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmmsclient-glib1" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient-glib1-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient-glib1" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient-glib1-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmmsclient6" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient6-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient6" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient6-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-xmms2" arch="i586" version="0.7" release="10.1.1">
          <filename>python-xmms2-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="python-xmms2" arch="x86_64" version="0.7" release="10.1.1">
          <filename>python-xmms2-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-devel" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-devel-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-devel" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-devel-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-docs" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-docs-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-docs" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-docs-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-perl" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-perl-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-perl" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-perl-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-airplay" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-airplay-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-airplay" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-airplay-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-ao" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ao-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-ao" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ao-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-apefile" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-apefile-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-apefile" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-apefile-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-asf" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asf-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-asf" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asf-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-asx" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asx-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-asx" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asx-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-base" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-base-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-base" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-base-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-cdda" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cdda-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-cdda" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cdda-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-cue" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cue-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-cue" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cue-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-curl" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-curl-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-curl" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-curl-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-daap" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-daap-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-daap" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-daap-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-flac" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flac-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-flac" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flac-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-flv" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flv-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-flv" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flv-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-gvfs" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-gvfs-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-gvfs" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-gvfs-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-html" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-html-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-html" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-html-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-ices" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ices-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-ices" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ices-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-icymetaint" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-icymetaint-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-icymetaint" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-icymetaint-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-id3v2" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-id3v2-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-id3v2" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-id3v2-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-jack" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-jack-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-jack" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-jack-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-karaoke" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-karaoke-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-karaoke" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-karaoke-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-m3u" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-m3u-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-m3u" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-m3u-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-modplug" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-modplug-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-modplug" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-modplug-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-mp4" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-mp4-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-mp4" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-mp4-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-musepack" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-musepack-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-musepack" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-musepack-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-normalize" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-normalize-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-normalize" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-normalize-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-ofa" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ofa-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-ofa" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ofa-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-pulse" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-pulse-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-pulse" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-pulse-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-samba" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-samba-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-samba" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-samba-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-speex" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-speex-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-speex" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-speex-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-tta" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-tta-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-tta" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-tta-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-vocoder" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-vocoder-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-vocoder" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-vocoder-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-wave" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wave-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-wave" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wave-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-wavpack" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wavpack-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-wavpack" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wavpack-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-ruby" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-ruby-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-ruby" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-ruby-0.7-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8b7ed02eb09ad365d7df4ec597039df9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2906">
  <id>cheese</id>
  <title>cheese: Starting cheese results in a segmentation fault. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545446"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623292" id="623292" title="bug number 623292" type="bugzilla"/>
  </references>
  <description>Cheese was creating a camera device even when GStreamer
initialization failed. Trying to use this device later
resulted in a segmentation fault. This update resolves this
problem (bnc #623292).
</description>
  <pkglist>
    <collection>
        <package name="cheese" arch="i586" version="2.30.1" release="2.1.1">
          <filename>cheese-2.30.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="cheese" arch="x86_64" version="2.30.1" release="2.1.1">
          <filename>cheese-2.30.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="cheese-devel" arch="i586" version="2.30.1" release="2.1.1">
          <filename>cheese-devel-2.30.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="cheese-devel" arch="x86_64" version="2.30.1" release="2.1.1">
          <filename>cheese-devel-2.30.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="cheese-lang" arch="noarch" version="2.30.1" release="2.1.1">
          <filename>cheese-lang-2.30.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="libcheese-gtk18" arch="i586" version="2.30.1" release="2.1.1">
          <filename>libcheese-gtk18-2.30.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libcheese-gtk18" arch="x86_64" version="2.30.1" release="2.1.1">
          <filename>libcheese-gtk18-2.30.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="41d48c92fb9263b2d09888a8ec57f475"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2907">
  <id>dhcp</id>
  <title>dhcp: This update fixes the ldap-support for dhcp-server and fixes the NetworkManager dhcp-client classless route option compatibility.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545161"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625358" id="625358" title="bug number 625358" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625770" id="625770" title="bug number 625770" type="bugzilla"/>
  </references>
  <description>This update fixes the following bugs:
- #625358: ldap option number in consistence causing a
  conflict with new 4.x options in the dhcp-server.
- #625770: Renamed rfc3442-classless-static-routes_raw in
  /etc/dhclient.conf to rfc3442-classless-static-routes for
  compatibility with the NetworkManager making use of
  /etc/dhclient.conf now and adopted /sbin/dhclient-script
  to use the new option variable.
</description>
  <pkglist>
    <collection>
        <package name="dhcp" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-client" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-client-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-client" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-client-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-devel-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-devel-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-doc-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-doc-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-relay-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-relay-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-server" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-server-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-server" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-server-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ed00c789134d7b85782ad20e84b9b590"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2917">
  <id>jedit</id>
  <title>jedit: It refuses to start due wrong bsh2 version. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281631385"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629375" id="629375" title="bug number 629375" type="bugzilla"/>
  </references>
  <description>jedit refuses to start, because it's not compatible with
bsh2 2.0.0b5 distributed with openSUSE 11.3. This update
adds the older compatible bsh2 version to make jedit
working again.
</description>
  <pkglist>
    <collection>
        <package name="jedit" arch="noarch" version="4.2" release="315.1.1">
          <filename>jedit-4.2-315.1.1.noarch.rpm</filename>
        </package>
        <package name="jedit-javadoc" arch="noarch" version="4.2" release="315.1.1">
          <filename>jedit-javadoc-4.2-315.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="24893beeaf1b82a1d14695b2319fc0b2"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2909">
  <id>tomoe</id>
  <title>tomoe: &quot;Handwriting recognation&quot; doesn't work. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545246"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625396" id="625396" title="bug number 625396" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- #625396: Tomoe handwriting recognition does not work
  (SCIM)
</description>
  <pkglist>
    <collection>
        <package name="tomoe" arch="i586" version="0.6.0" release="31.1.1">
          <filename>tomoe-0.6.0-31.1.1.i586.rpm</filename>
        </package>
        <package name="tomoe" arch="x86_64" version="0.6.0" release="31.1.1">
          <filename>tomoe-0.6.0-31.1.1.x86_64.rpm</filename>
        </package>
        <package name="tomoe-devel" arch="i586" version="0.6.0" release="31.1.1">
          <filename>tomoe-devel-0.6.0-31.1.1.i586.rpm</filename>
        </package>
        <package name="tomoe-devel" arch="x86_64" version="0.6.0" release="31.1.1">
          <filename>tomoe-devel-0.6.0-31.1.1.x86_64.rpm</filename>
        </package>
        <package name="tomoe-doc" arch="i586" version="0.6.0" release="31.1.1">
          <filename>tomoe-doc-0.6.0-31.1.1.i586.rpm</filename>
        </package>
        <package name="tomoe-doc" arch="x86_64" version="0.6.0" release="31.1.1">
          <filename>tomoe-doc-0.6.0-31.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0a7f774d53e116719578f65800ad3af0"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2911">
  <id>xaw3d</id>
  <title>xaw3d: xterm doesn't use the right xaw3d libs. This is fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281617605"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627314" id="627314" title="bug number 627314" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- #627314: xterm doesn't use xaw3d libs as the 3D version
  for libXaw7.so is missed
</description>
  <pkglist>
    <collection>
        <package name="xaw3d" arch="i586" version="1.5E" release="417.1.1">
          <filename>xaw3d-1.5E-417.1.1.i586.rpm</filename>
        </package>
        <package name="xaw3d" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3d-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
        <package name="xaw3d-32bit" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3d-32bit-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
        <package name="xaw3d-devel" arch="i586" version="1.5E" release="417.1.1">
          <filename>xaw3d-devel-1.5E-417.1.1.i586.rpm</filename>
        </package>
        <package name="xaw3d-devel" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3d-devel-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
        <package name="xaw3dd" arch="i586" version="1.5E" release="417.1.1">
          <filename>xaw3dd-1.5E-417.1.1.i586.rpm</filename>
        </package>
        <package name="xaw3dd" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3dd-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="897bd719866f010500e7bf90f708b537"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2924">
  <id>device-mapper</id>
  <title>lvm2: &quot;lvcreate --snapshot&quot; results in scary error messages. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281631501"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=556177" id="556177" title="bug number 556177" type="bugzilla"/>
  </references>
  <description>&quot;lvcreate --snapshot&quot; results in scary error messages to
console and /var/log/messages. This bug is fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="device-mapper" arch="i586" version="1.02.49" release="4.1.1">
          <filename>device-mapper-1.02.49-4.1.1.i586.rpm</filename>
        </package>
        <package name="device-mapper" arch="x86_64" version="1.02.49" release="4.1.1">
          <filename>device-mapper-1.02.49-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="device-mapper-32bit" arch="x86_64" version="1.02.49" release="4.1.1">
          <filename>device-mapper-32bit-1.02.49-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="device-mapper-devel" arch="i586" version="1.02.49" release="4.1.1">
          <filename>device-mapper-devel-1.02.49-4.1.1.i586.rpm</filename>
        </package>
        <package name="device-mapper-devel" arch="x86_64" version="1.02.49" release="4.1.1">
          <filename>device-mapper-devel-1.02.49-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" arch="i586" version="2.02.67" release="4.1.1">
          <filename>lvm2-2.02.67-4.1.1.i586.rpm</filename>
        </package>
        <package name="lvm2" arch="x86_64" version="2.02.67" release="4.1.1">
          <filename>lvm2-2.02.67-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1e979e1c56ca2240b838160efa298aba"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2923">
  <id>cups-drivers-splix</id>
  <title>cups-drivers-splix: splix should not contain PPDs for printers which require JBIG. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281631643"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628698" id="628698" title="bug number 628698" type="bugzilla"/>
  </references>
  <description>This update remove all PPD files that require the patented
JBIG library. This update also fix PPDs paths. Cups is now
able to locate CMS files.
</description>
  <pkglist>
    <collection>
        <package name="cups-drivers-splix" arch="i586" version="2.0.0" release="2.1.1">
          <filename>cups-drivers-splix-2.0.0-2.1.1.i586.rpm</filename>
        </package>
        <package name="cups-drivers-splix" arch="x86_64" version="2.0.0" release="2.1.1">
          <filename>cups-drivers-splix-2.0.0-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e5c4fd1c2b8828f3308849c56ad72f28"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2905">
  <id>xfig</id>
  <title>xfig: After the last security update for ghostscript it is unable to import .eps files. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545435"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629462" id="629462" title="bug number 629462" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update: After the last
security update for ghostscript, xfig is unable to import
.eps files (bnc#629462)
</description>
  <pkglist>
    <collection>
        <package name="xfig" arch="i586" version="3.2.5b" release="6.1.1">
          <filename>xfig-3.2.5b-6.1.1.i586.rpm</filename>
        </package>
        <package name="xfig" arch="x86_64" version="3.2.5b" release="6.1.1">
          <filename>xfig-3.2.5b-6.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3b12b96d5228239cb605a57571038f80"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2928">
  <id>exiv2</id>
  <title>exiv2: Add pkg-config provides</title>
  <release>openSUSE 11.3</release>
  <issued date="1281941573"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625466" id="625466" title="bug number 625466" type="bugzilla"/>
  </references>
  <description>This update adds pkg-config provides to the package.
</description>
  <pkglist>
    <collection>
        <package name="exiv2" arch="i586" version="0.19" release="5.1.1">
          <filename>exiv2-0.19-5.1.1.i586.rpm</filename>
        </package>
        <package name="exiv2" arch="x86_64" version="0.19" release="5.1.1">
          <filename>exiv2-0.19-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="exiv2-lang" arch="noarch" version="0.19" release="5.1.1">
          <filename>exiv2-lang-0.19-5.1.1.noarch.rpm</filename>
        </package>
        <package name="libexiv2-6" arch="i586" version="0.19" release="5.1.1">
          <filename>libexiv2-6-0.19-5.1.1.i586.rpm</filename>
        </package>
        <package name="libexiv2-6" arch="x86_64" version="0.19" release="5.1.1">
          <filename>libexiv2-6-0.19-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libexiv2-6-32bit" arch="x86_64" version="0.19" release="5.1.1">
          <filename>libexiv2-6-32bit-0.19-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libexiv2-devel" arch="i586" version="0.19" release="5.1.1">
          <filename>libexiv2-devel-0.19-5.1.1.i586.rpm</filename>
        </package>
        <package name="libexiv2-devel" arch="x86_64" version="0.19" release="5.1.1">
          <filename>libexiv2-devel-0.19-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b2fa8e1c22ec69ab64ef54caa97bf383"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2946">
  <id>cifs-utils</id>
  <title>mount.cifs: Does not appear to support the (documented, preferred) credentials option. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282059525"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618877" id="618877" title="bug number 618877" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620856" id="620856" title="bug number 620856" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621525" id="621525" title="bug number 621525" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623763" id="623763" title="bug number 623763" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627243" id="627243" title="bug number 627243" type="bugzilla"/>
  </references>
  <description>The following bug is fixed with this update:
- #618877: mount.cifs does not appear to support the
  (documented, preferred) credentials option
</description>
  <pkglist>
    <collection>
        <package name="cifs-utils" arch="i586" version="4.6" release="1.1.1">
          <filename>cifs-utils-4.6-1.1.1.i586.rpm</filename>
        </package>
        <package name="cifs-utils" arch="x86_64" version="4.6" release="1.1.1">
          <filename>cifs-utils-4.6-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4c9562fd2fd1a790086f7e919316bef7"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2948">
  <id>libpulse-browse0</id>
  <title>pulseaudio: Fix setup-pulseaudio script to set up the environment variables correctly.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282048334"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623837" id="623837" title="bug number 623837" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619859" id="619859" title="bug number 619859" type="bugzilla"/>
  </references>
  <description>The setup-pulseaudio script included in 11.3 pulseaudio
package doesn't set the environment variables correctly for
enabling/disabling PulseAudio support. This update fixes
the script so that the variables are properly set.
</description>
  <pkglist>
    <collection>
        <package name="libpulse-browse0" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse-browse0-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse-browse0" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-browse0-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-devel" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse-devel-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse-devel" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-devel-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse-mainloop-glib0-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-mainloop-glib0-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0-32bit" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-mainloop-glib0-32bit-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse0" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse0-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse0" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse0-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse0-32bit" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse0-32bit-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-esound-compat" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-esound-compat-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-esound-compat" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-esound-compat-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-gdm-hooks" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-gdm-hooks-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-gdm-hooks" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-gdm-hooks-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-lang" arch="noarch" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-lang-0.9.21-10.1.1.noarch.rpm</filename>
        </package>
        <package name="pulseaudio-module-bluetooth" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-bluetooth-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-bluetooth" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-bluetooth-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-gconf" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-gconf-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-gconf" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-gconf-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-jack" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-jack-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-jack" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-jack-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-lirc" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-lirc-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-lirc" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-lirc-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-x11" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-x11-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-x11" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-x11-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-zeroconf" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-zeroconf-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-zeroconf" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-zeroconf-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-utils" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-utils-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-utils" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-utils-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1dc0ee893c473cea91397f3ecfb51f9e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2927">
  <id>input-utils</id>
  <title>inputattach: Fix syntax errors in the init script</title>
  <release>openSUSE 11.3</release>
  <issued date="1281703562"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629911" id="629911" title="bug number 629911" type="bugzilla"/>
  </references>
  <description>This update fixes bug #629911 that causes syntax error
whenever trying to run the init script.
</description>
  <pkglist>
    <collection>
        <package name="input-utils" arch="i586" version="2007.06.22" release="165.1.1">
          <filename>input-utils-2007.06.22-165.1.1.i586.rpm</filename>
        </package>
        <package name="input-utils" arch="x86_64" version="2007.06.22" release="165.1.1">
          <filename>input-utils-2007.06.22-165.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9c4eeffb12c34bb9b6d6861786176fc4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2940">
  <id>smpppd</id>
  <title>smpppd: allow to control non-dialup interfaces</title>
  <release>openSUSE 11.3</release>
  <issued date="1281974096"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628138" id="628138" title="bug number 628138" type="bugzilla"/>
  </references>
  <description>smpppd ignored non-dialup interfaces even if USERCONTROL
was set to &quot;yes&quot;.  This update enables support for such
interfaces again.
</description>
  <pkglist>
    <collection>
        <package name="smpppd" arch="i586" version="1.60.46" release="1.1.1">
          <filename>smpppd-1.60.46-1.1.1.i586.rpm</filename>
        </package>
        <package name="smpppd" arch="x86_64" version="1.60.46" release="1.1.1">
          <filename>smpppd-1.60.46-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="961582125f8546c881e8520edd7c8e09"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2941">
  <id>NetworkManager</id>
  <title>NetworkManager: Remove call to NFS restart</title>
  <release>openSUSE 11.3</release>
  <issued date="1281974625"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559021" id="559021" title="bug number 559021" type="bugzilla"/>
  </references>
  <description>The NetworkManager start does no longer run NFS restart
during NetworkManager startup (bnc#559021)
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-0.8-8.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-devel-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-devel-0.8-8.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-doc-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-doc-0.8-8.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-glib-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-glib-0.8-8.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d76c8c3047851597b3bedca918499940"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2947">
  <id>cpio</id>
  <title>cpio: It crashes on non existing pattern file. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282048210"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629860" id="629860" title="bug number 629860" type="bugzilla"/>
  </references>
  <description>cpio crashes on non existing pattern file (cpio -i -E
no-file) because of improper error checking. Fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="cpio" arch="i586" version="2.11" release="4.1.1">
          <filename>cpio-2.11-4.1.1.i586.rpm</filename>
        </package>
        <package name="cpio" arch="x86_64" version="2.11" release="4.1.1">
          <filename>cpio-2.11-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="cpio-lang" arch="noarch" version="2.11" release="4.1.1">
          <filename>cpio-lang-2.11-4.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="fc29e8522bfe42b16ef8fe80ce17ecf6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2991">
  <id>opera</id>
  <title>opera: version 10.61 fixes various vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1282650223"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630771" id="630771" title="bug number 630771" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2576" id="CVE-2010-2576" title="CVE-2010-2576" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3019" id="CVE-2010-3019" title="CVE-2010-3019" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3020" id="CVE-2010-3020" title="CVE-2010-3020" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3021" id="CVE-2010-3021" title="CVE-2010-3021" type="cve"/>
  </references>
  <description>This update of opera fixes the following vulnerabilities:
- CVE-2010-2576: CVSS v2 Base Score: 6.8 (CWE-94):
  unexpected changes in tab focus could be used to run
  programs from the Internet, as reported by Jakob Balle
  and Sven Krewitt of Secunia
- CVE-2010-3019: CVSS v2 Base Score: 9.3 (CWE-119): heap
  buffer overflow in HTML5 canvas could be used to execute
  arbitrary code, as reported by Kuzzcc
- CVE-2010-3020: CVSS v2 Base Score: 5.0 (CWE-264): news
  feed preview could subscribe to feeds without
  interaction, as reported by Alexios Fakos
- CVE-2010-3021: CVSS v2 Base Score: 4.3 (CWE-399): remote
  attackers could trigger a remote denial of service (CPU
  consumption and application hang) via an animated PNG
  image
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.61" release="0.1.1">
          <filename>opera-10.61-0.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.61" release="0.1.1">
          <filename>opera-10.61-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="796b885991b3fbcd870eecc67509c6dd"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2918">
  <id>libfreetype6</id>
  <title>freetype2: security update for various bugs</title>
  <release>openSUSE 11.3</release>
  <issued date="1281617277"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628213" id="628213" title="bug number 628213" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619562" id="619562" title="bug number 619562" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629447" id="629447" title="bug number 629447" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1797" id="CVE-2010-1797" title="CVE-2010-1797" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2497" id="CVE-2010-2497" title="CVE-2010-2497" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2498" id="CVE-2010-2498" title="CVE-2010-2498" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2499" id="CVE-2010-2499" title="CVE-2010-2499" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2500" id="CVE-2010-2500" title="CVE-2010-2500" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2519" id="CVE-2010-2519" title="CVE-2010-2519" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2520" id="CVE-2010-2520" title="CVE-2010-2520" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2527" id="CVE-2010-2527" title="CVE-2010-2527" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2541" id="CVE-2010-2541" title="CVE-2010-2541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2805" id="CVE-2010-2805" title="CVE-2010-2805" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2806" id="CVE-2010-2806" title="CVE-2010-2806" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2807" id="CVE-2010-2807" title="CVE-2010-2807" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2808" id="CVE-2010-2808" title="CVE-2010-2808" type="cve"/>
  </references>
  <description>This update of freetype2 fixes several vulnerabilities that
could lead to remote system compromise by executing
arbitrary code with user privileges:
- CVE-2010-1797: stack-based buffer overflow while
  processing CFF opcodes
- CVE-2010-2497: integer underflow
- CVE-2010-2498: invalid free
- CVE-2010-2499: buffer overflow
- CVE-2010-2500: integer overflow
- CVE-2010-2519: heap buffer overflow
- CVE-2010-2520: heap buffer overflow
- CVE-2010-2527: buffer overflows in the freetype demo
- CVE-2010-2541: buffer overflow in ftmulti demo program
- CVE-2010-2805: improper bounds checking
- CVE-2010-2806: improper bounds checking
- CVE-2010-2807: improper type comparisons
- CVE-2010-2808: memory corruption flaw by processing
  certain LWFN fonts
</description>
  <pkglist>
    <collection>
        <package name="libfreetype6" arch="i586" version="2.3.12" release="7.1.1">
          <filename>libfreetype6-2.3.12-7.1.1.i586.rpm</filename>
        </package>
        <package name="libfreetype6" arch="x86_64" version="2.3.12" release="7.1.1">
          <filename>libfreetype6-2.3.12-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-32bit" arch="x86_64" version="2.3.12" release="7.1.1">
          <filename>libfreetype6-32bit-2.3.12-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4dd6ccb8c236dd688f4a48bdd9e85c37"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2945">
  <id>lxdm</id>
  <title>lxdm: Collective update for lxdm</title>
  <release>openSUSE 11.3</release>
  <issued date="1282059449"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629728" id="629728" title="bug number 629728" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619769" id="619769" title="bug number 619769" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630862" id="630862" title="bug number 630862" type="bugzilla"/>
  </references>
  <description>This update fixes the following bugs:
* bnc#629728 : lxdm run greeters as root user, this update
  fix lxdm and add lxdm user/group
* bnc#630862 : lxdm can't login when space in password
* bnc#619769 : lxdm doesn't switch to tty1 and no splash
  screen is showed
</description>
  <pkglist>
    <collection>
        <package name="lxdm" arch="i586" version="0.2.97_git20100730" release="0.1.1">
          <filename>lxdm-0.2.97_git20100730-0.1.1.i586.rpm</filename>
        </package>
        <package name="lxdm" arch="x86_64" version="0.2.97_git20100730" release="0.1.1">
          <filename>lxdm-0.2.97_git20100730-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="53108168e90ec4204c928c6b491029a5"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2952">
  <id>pstoedit</id>
  <title>pstoedit: This update fixes an crash of pstoedit when it is called from inkscape.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282059639"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622977" id="622977" title="bug number 622977" type="bugzilla"/>
  </references>
  <description>This update fixes the following bug:
* pstoedit crashes in dl_close() when closing plugins. This
  update fixes this problem. (#622977)
</description>
  <pkglist>
    <collection>
        <package name="pstoedit" arch="i586" version="3.50" release="7.1.1">
          <filename>pstoedit-3.50-7.1.1.i586.rpm</filename>
        </package>
        <package name="pstoedit" arch="x86_64" version="3.50" release="7.1.1">
          <filename>pstoedit-3.50-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="pstoedit-devel" arch="i586" version="3.50" release="7.1.1">
          <filename>pstoedit-devel-3.50-7.1.1.i586.rpm</filename>
        </package>
        <package name="pstoedit-devel" arch="x86_64" version="3.50" release="7.1.1">
          <filename>pstoedit-devel-3.50-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0dd5e864caa58861d13eb11eec6e74f6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3003">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1282312610"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623905" id="623905" title="bug number 623905" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2783" id="CVE-2010-2783" title="CVE-2010-2783" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2548" id="CVE-2010-2548" title="CVE-2010-2548" type="cve"/>
  </references>
  <description>icedtea included in java-1_6_0-openjdk  was updated to
version 1.8.1 which fixes two security issues:

CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary
file access CVE-2010-2548: IcedTea Incomplete property
access check for unsigned applications

The new version also fixes many non-security bugs. For
details please see
http://blog.fuseyism.com/index.php/2010/07/28/icedtea6-181-r
eleased/
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-1.6.0.0_b18-1.1.5.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-1.6.0.0_b18-1.1.5.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b18-1.1.5.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b18-1.1.5.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b18-1.1.5.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b18-1.1.5.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.1.5.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.1.5.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b18-1.1.5.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3fe83148ecfde4147fcdbc9d70c986e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2817">
  <id>ivman</id>
  <title>ivman: Fixed not receiving hal events</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335029"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=576567" id="576567" title="bug number 576567" type="bugzilla"/>
  </references>
  <description>This update of ivman fixes:
- #576567: ivman not receiving hal events
</description>
  <pkglist>
    <collection>
        <package name="ivman" arch="i586" version="0.6.14" release="208.1.1">
          <filename>ivman-0.6.14-208.1.1.i586.rpm</filename>
        </package>
        <package name="ivman" arch="x86_64" version="0.6.14" release="208.1.1">
          <filename>ivman-0.6.14-208.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9c8b6da4223930544129699c2400e196"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2973">
  <id>xorg-x11-Xvnc</id>
  <title>xorg-x11-server: Fix multiple bugs and security vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1282232217"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618152" id="618152" title="bug number 618152" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625593" id="625593" title="bug number 625593" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=546632" id="546632" title="bug number 546632" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623254" id="623254" title="bug number 623254" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=597232" id="597232" title="bug number 597232" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240" id="CVE-2010-2240" title="CVE-2010-2240" type="cve"/>
  </references>
  <description>The X.Org X11 Server was updated to fix several bugs and 2
security issues:

Two security issues were fixed: CVE-2010-2240: This fix
adds a workaround for overlapping stacks and heaps in case
of OOM conditions.This workaround is necessary if the
kernel is not properly adding guard or gap-pages below the
stack. 

CVE-2010-1166: The fbComposite function in fbpict.c in the
Render extension in the X server in X.Org X11R7.1 allows
remote authenticated users to cause a denial of service
(memory corruption and daemon crash) or possibly execute
arbitrary code via a crafted request, related to an
incorrect macro definition.

Non-Security Bugs fixed: Fix some shortcomings in the Xdmcp
implementation. It used to suppress loopback addresses from
the list of potential display addresses to report to xdm,
even when talking to xdm through a loopback address. Now
only display addresses of the same kind as the xdm
connection are reported to xdm.

This most notably helps Xvnc servers contacting the local
xdm,  because they were severely affected by the
suppression of loopback addresses.
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11-Xvnc" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-Xvnc" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server-extra" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-extra-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server-extra" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-extra-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server-sdk" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-sdk-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server-sdk" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-sdk-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="86d2b66d25ba6d7dbae64c6919cf6a53"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2984">
  <id>desktop-translations</id>
  <title>desktop-translations: Translation update</title>
  <release>openSUSE 11.3</release>
  <issued date="1282606284"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=592237" id="592237" title="bug number 592237" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615842" id="615842" title="bug number 615842" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624344" id="624344" title="bug number 624344" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632285" id="632285" title="bug number 632285" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624991" id="624991" title="bug number 624991" type="bugzilla"/>
  </references>
  <description>Update various translations (desktop menus and YaST texts)
and release notes plus translations.
</description>
  <pkglist>
    <collection>
        <package name="desktop-translations" arch="noarch" version="11.3" release="12.1.1">
          <filename>desktop-translations-11.3-12.1.1.noarch.rpm</filename>
        </package>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.8" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.8-0.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-af" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-af-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ar" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ar-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ast" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ast-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-bg" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-bg-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-bn" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-bn-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-bs" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-bs-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ca" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ca-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-cs" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-cs-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-cy" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-cy-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-da" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-da-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-de" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-de-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-el" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-el-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-en_GB" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-en_GB-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-en_US" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-en_US-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-es" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-es-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-et" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-et-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-fa" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-fa-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-fi" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-fi-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-fr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-fr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-gl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-gl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-gu" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-gu-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-hi" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-hi-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-hr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-hr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-hu" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-hu-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-id" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-id-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-it" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-it-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ja" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ja-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-jv" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-jv-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ka" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ka-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-km" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-km-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-kn" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-kn-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ko" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ko-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ku" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ku-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-lo" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-lo-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-lt" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-lt-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-mk" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-mk-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-mr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-mr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-nb" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-nb-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-nl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-nl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pa" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pa-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pt" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pt-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pt_BR" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pt_BR-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ro" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ro-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ru" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ru-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-si" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-si-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sk" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sk-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sv" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sv-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sw" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sw-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ta" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ta-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-tg" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-tg-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-th" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-th-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-tr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-tr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-uk" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-uk-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-vi" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-vi-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-wa" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-wa-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-xh" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-xh-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-zh_CN" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-zh_CN-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-zh_TW" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-zh_TW-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-zu" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-zu-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c5ce636421da47162a180f4ff777df73"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3037">
  <id>gwibber</id>
  <title>Gwibber: Fix runtime requires</title>
  <release>openSUSE 11.3</release>
  <issued date="1278382548"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633495" id="633495" title="bug number 633495" type="bugzilla"/>
  </references>
  <description>This update adds the previously missing
gnome-python-desktop runtime requirement to Gwibber
</description>
  <pkglist>
    <collection>
        <package name="gnome-python-desktop" arch="i586" version="2.30.0" release="1.13">
          <filename>gnome-python-desktop-2.30.0-1.13.i586.rpm</filename>
        </package>
        <package name="gnome-python-desktop" arch="x86_64" version="2.30.0" release="1.13">
          <filename>gnome-python-desktop-2.30.0-1.13.x86_64.rpm</filename>
        </package>
        <package name="gwibber" arch="i586" version="2.31.1+bzr720" release="5.1.1">
          <filename>gwibber-2.31.1+bzr720-5.1.1.i586.rpm</filename>
        </package>
        <package name="gwibber" arch="x86_64" version="2.31.1+bzr720" release="5.1.1">
          <filename>gwibber-2.31.1+bzr720-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gwibber-lang" arch="noarch" version="2.31.1+bzr720" release="5.1.1">
          <filename>gwibber-lang-2.31.1+bzr720-5.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d7a72bfe9a8a11fbc682572cefb7630b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2985">
  <id>libopenais-devel</id>
  <title>openais: corosync/openais fail to launch on x86_64. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282605943"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623427" id="623427" title="bug number 623427" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628243" id="628243" title="bug number 628243" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- Install openais libraries to /usr/lib64 on x86_64
- Fixing corosync startup on x86_64 architecture
  (bnc#623427)
- Make pacemaker conflict with libheartbeat2 &lt; 3.0.0, to
  ensure the the correct libglue library is installed
  (bnc#628243)
</description>
  <pkglist>
    <collection>
        <package name="libopenais-devel" arch="i586" version="1.1.2" release="2.1.1">
          <filename>libopenais-devel-1.1.2-2.1.1.i586.rpm</filename>
        </package>
        <package name="libopenais-devel" arch="x86_64" version="1.1.2" release="2.1.1">
          <filename>libopenais-devel-1.1.2-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopenais3" arch="i586" version="1.1.2" release="2.1.1">
          <filename>libopenais3-1.1.2-2.1.1.i586.rpm</filename>
        </package>
        <package name="libopenais3" arch="x86_64" version="1.1.2" release="2.1.1">
          <filename>libopenais3-1.1.2-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpacemaker-devel" arch="i586" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker-devel-1.1.2.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libpacemaker-devel" arch="x86_64" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker-devel-1.1.2.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpacemaker3" arch="i586" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker3-1.1.2.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libpacemaker3" arch="x86_64" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker3-1.1.2.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="openais" arch="i586" version="1.1.2" release="2.1.1">
          <filename>openais-1.1.2-2.1.1.i586.rpm</filename>
        </package>
        <package name="openais" arch="x86_64" version="1.1.2" release="2.1.1">
          <filename>openais-1.1.2-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="pacemaker" arch="i586" version="1.1.2.1" release="2.1.1">
          <filename>pacemaker-1.1.2.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="pacemaker" arch="x86_64" version="1.1.2.1" release="2.1.1">
          <filename>pacemaker-1.1.2.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="284df35b8020d80b9fd70e9deb0282f4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2992">
  <id>eID-belgium</id>
  <title>opensc: This update fixes opensc and packages depending on the provided macro SC_TEST_RET</title>
  <release>openSUSE 11.3</release>
  <issued date="1282656040"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627619" id="627619" title="bug number 627619" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- opensc and all package depending on the broken macro:
  SC_TEST_RET. 
- webkit based browsers (epiphany, midori) freezes when
  opensc is installed.

Warning: If your third party smart card driver was compiled
against openSUSE 11.3 and contains references to
SC_TEST_RET, you need to recompile it as well.
</description>
  <pkglist>
    <collection>
        <package name="eID-belgium" arch="i586" version="2.6.0" release="130.1.1">
          <filename>eID-belgium-2.6.0-130.1.1.i586.rpm</filename>
        </package>
        <package name="eID-belgium" arch="x86_64" version="2.6.0" release="130.1.1">
          <filename>eID-belgium-2.6.0-130.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopensc2" arch="i586" version="0.11.13" release="2.1.1">
          <filename>libopensc2-0.11.13-2.1.1.i586.rpm</filename>
        </package>
        <package name="libopensc2" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>libopensc2-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopensc2-32bit" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>libopensc2-32bit-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" arch="i586" version="0.11.13" release="2.1.1">
          <filename>opensc-0.11.13-2.1.1.i586.rpm</filename>
        </package>
        <package name="opensc" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>opensc-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-32bit" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>opensc-32bit-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-devel" arch="i586" version="0.11.13" release="2.1.1">
          <filename>opensc-devel-0.11.13-2.1.1.i586.rpm</filename>
        </package>
        <package name="opensc-devel" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>opensc-devel-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d70c8589df22988def86b589a89e1348"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2986">
  <id>pinentry-qt</id>
  <title>pinentry-qt: It appears behind other windows and grabs alt+tab. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282606083"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629502" id="629502" title="bug number 629502" type="bugzilla"/>
  </references>
  <description>pinentry-qt, when invoked e.g. by kmail, pops behind other
windows and grabs focus, making it impossible to bring it
on top with Alt+Tab. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="pinentry-qt" arch="i586" version="0.8.0" release="17.1.1">
          <filename>pinentry-qt-0.8.0-17.1.1.i586.rpm</filename>
        </package>
        <package name="pinentry-qt" arch="x86_64" version="0.8.0" release="17.1.1">
          <filename>pinentry-qt-0.8.0-17.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8c5d52459cd6e1a7c90ff202f9309d4d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3011">
  <id>timezone-2010l</id>
  <title>timezone: glibc timezone/DST update to 2010l</title>
  <release>openSUSE 11.3</release>
  <issued date="1282730522"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615937" id="615937" title="bug number 615937" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607532" id="607532" title="bug number 607532" type="bugzilla"/>
  </references>
  <description>This update fixes zic -l to copy the timezone also
correctly when hardlinking fails (due to /usr being on a
separate partition) (bnc#607532)

* DST changes: Africa/Cairo (Egypt) and Asia/Gaza
  (Palestine) do not use daylight saving during the month
  of Ramadan in order to prevent Muslims from fasting one
  hour longer.
http://www.timeanddate.com/news/time/egypt-ends-dst-2010.htm
  l
http://www.timeanddate.com/news/time/westbank-gaza-end-dst-2
  010.html

  Africa/Casablanca (Marocco) has spent the period from May
2 to Aug 8 using daylight saving. Marocco adopted regular
daylight saving, but the start and end dates vary every
year.
http://www.timeanddate.com/news/time/morocco-starts-dst-2010
.html

  America/Argentina/San_Luis (Argentina region) local
government did not terminate its DST period as planned and
instead decided to extend its use of the UTC-3 time
indefinitely.
http://www.worldtimezone.com/dst_news/dst_news_argentina08.h
tml

* New zones: America/Bahia_Banderas (Mexican state of
  Nayarit) has declared that it is to follow the UCT-6 time
  instead of UCT-7, with the aim to have the same time as
  the nearby city of Puerto Vallarta.
http://www.worldtimezone.com/dst_news/dst_news_mexico08.html
  

* Historical changes: Asia/Taipei information on DST usage
  listed 1980 as one year using DST, which should read 1979
  instead according to government resources.

  Europe/Helsinki, before switching to Central European
standard DST in 1983, trialled DST for two years. However,
the database omitted to specify that in these trials of
1981 and 1982, switches have been made one hour earlier
than in 1983.

* Spelling changes in Micronesia: Pacific/Truk has been
  renamed to Pacific/Chuuk in 1989.
</description>
  <pkglist>
    <collection>
        <package name="timezone" arch="i586" version="2010l" release="0.3.1">
          <filename>timezone-2010l-0.3.1.i586.rpm</filename>
        </package>
        <package name="timezone" arch="x86_64" version="2010l" release="0.3.1">
          <filename>timezone-2010l-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-java" arch="noarch" version="2010l" release="0.3.1">
          <filename>timezone-java-2010l-0.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="cf42df06792fbc140654995f11bbcd1c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3036">
  <id>acroread</id>
  <title>acroread security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1282833446"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629134" id="629134" title="bug number 629134" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1240" id="CVE-2010-1240" title="CVE-2010-1240" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2862" id="CVE-2010-2862" title="CVE-2010-2862" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209" id="CVE-2010-0209" title="CVE-2010-0209" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2188" id="CVE-2010-2188" title="CVE-2010-2188" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213" id="CVE-2010-2213" title="CVE-2010-2213" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214" id="CVE-2010-2214" title="CVE-2010-2214" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2215" id="CVE-2010-2215" title="CVE-2010-2215" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216" id="CVE-2010-2216" title="CVE-2010-2216" type="cve"/>
  </references>
  <description>Specially crafted PDF documents could crash acroread or
lead to execution of arbitrary code (CVE-2010-1240,
CVE-2010-2862).

This update also incorporate the Adobe Flash Player update
APSB10-16 for the bundled flash player parts
(CVE-2010-0209, CVE-2010-2188, CVE-2010-2213,
CVE-2010-2214, CVE-2010-2215, CVE-2010-2216).
</description>
  <pkglist>
    <collection>
        <package name="acroread" arch="i586" version="9.3.4" release="0.2.1">
          <filename>acroread-9.3.4-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4c058032673b2766d3779358759be119"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2987">
  <id>sysconfig</id>
  <title>sysconfig: This update contains fixes for wireless networking with ifup + WPA/WPA2 and detection of disabled ipv6 in the dhcp script</title>
  <release>openSUSE 11.3</release>
  <issued date="1282576511"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623340" id="623340" title="bug number 623340" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623676" id="623676" title="bug number 623676" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624182" id="624182" title="bug number 624182" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625403" id="625403" title="bug number 625403" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631283" id="631283" title="bug number 631283" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616765" id="616765" title="bug number 616765" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- #625403: Fixed wireless hardware to wext/nl80211 WPA
  driver mapping and changed to use -Dnl80211,wext by
  default for untested drivers to let the wpa_supplicant
  fallback to wext when nl80211 is not available and avoid
  failures with non-mac80211 based hardware drivers.
  Adjusted info message about untested drivers and enabled
  untested driver handling also in case wpa_supplicant is
  not required but the user prefers to use it. Fixes also
  bugs #623340,#623676,#624182,#631283.
- #616765: Fixed check whether ipv6 is enabled or not in
  /sbin/ifup-dhcp to avoid dhcpv6 client start in case the
  interface is configured to start both, dhcpv4 and dhcpv6
  clients.
</description>
  <pkglist>
    <collection>
        <package name="sysconfig" arch="i586" version="0.73.7" release="2.1.1">
          <filename>sysconfig-0.73.7-2.1.1.i586.rpm</filename>
        </package>
        <package name="sysconfig" arch="x86_64" version="0.73.7" release="2.1.1">
          <filename>sysconfig-0.73.7-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61a2d9458c5a97f9a018d113b1a4182f"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3061">
  <id>yast2-country</id>
  <title>yast2-country: Fix Clock at boot when using local time</title>
  <release>openSUSE 11.3</release>
  <issued date="1283424848"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627116" id="627116" title="bug number 627116" type="bugzilla"/>
  </references>
  <description>When HW clock is set to local time, clock is wrong on boot
after change in YaST. mkinitrd call is needed (bnc #627116)
</description>
  <pkglist>
    <collection>
        <package name="yast2-country" arch="i586" version="2.19.19" release="0.1.1">
          <filename>yast2-country-2.19.19-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-country" arch="x86_64" version="2.19.19" release="0.1.1">
          <filename>yast2-country-2.19.19-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-country-data" arch="i586" version="2.19.19" release="0.1.1">
          <filename>yast2-country-data-2.19.19-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-country-data" arch="x86_64" version="2.19.19" release="0.1.1">
          <filename>yast2-country-data-2.19.19-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d050ba440c630f6c06debcac5b4f6c45"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3059">
  <id>yast2-core</id>
  <title>yast2-core: Fix  slow startup in some AppArmor setups</title>
  <release>openSUSE 11.3</release>
  <issued date="1283424132"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629882" id="629882" title="bug number 629882" type="bugzilla"/>
  </references>
  <description>YaST read YCP include files 1 byte at a time. If its
AppArmor profile is enabled, auditd logs it all, taking
several minutes for a module to start (bnc#629882).
</description>
  <pkglist>
    <collection>
        <package name="yast2-core" arch="i586" version="2.19.3" release="1.1.1">
          <filename>yast2-core-2.19.3-1.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-core" arch="x86_64" version="2.19.3" release="1.1.1">
          <filename>yast2-core-2.19.3-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-core-devel" arch="i586" version="2.19.3" release="1.1.1">
          <filename>yast2-core-devel-2.19.3-1.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-core-devel" arch="x86_64" version="2.19.3" release="1.1.1">
          <filename>yast2-core-devel-2.19.3-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a0da96f92e34b28fb3e366543f49fb57"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3083">
  <id>sudo</id>
  <title>sudo security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283864476"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635843" id="635843" title="bug number 635843" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2956" id="CVE-2010-2956" title="CVE-2010-2956" type="cve"/>
  </references>
  <description>sudo's handling of the -g command line option allowed to
also specify -u in some cases, therefore allowing users to
actually run commands as root (CVE-2010-2956).
</description>
  <pkglist>
    <collection>
        <package name="sudo" arch="i586" version="1.7.2p7" release="2.1.1">
          <filename>sudo-1.7.2p7-2.1.1.i586.rpm</filename>
        </package>
        <package name="sudo" arch="x86_64" version="1.7.2p7" release="2.1.1">
          <filename>sudo-1.7.2p7-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dd4dbb1a9703e355bd477f608a23bd4a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3038">
  <id>Kernel</id>
  <title>Linux Kernel: Security/Bugfix update to 2.6.34.4</title>
  <release>openSUSE 11.3</release>
  <issued date="1282677085"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=529535" id="529535" title="bug number 529535" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=584720" id="584720" title="bug number 584720" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=586643" id="586643" title="bug number 586643" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=594362" id="594362" title="bug number 594362" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599671" id="599671" title="bug number 599671" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608300" id="608300" title="bug number 608300" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610362" id="610362" title="bug number 610362" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610828" id="610828" title="bug number 610828" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615656" id="615656" title="bug number 615656" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617530" id="617530" title="bug number 617530" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617912" id="617912" title="bug number 617912" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618678" id="618678" title="bug number 618678" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619021" id="619021" title="bug number 619021" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619416" id="619416" title="bug number 619416" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619440" id="619440" title="bug number 619440" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619727" id="619727" title="bug number 619727" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621598" id="621598" title="bug number 621598" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623005" id="623005" title="bug number 623005" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623472" id="623472" title="bug number 623472" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624118" id="624118" title="bug number 624118" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624606" id="624606" title="bug number 624606" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624814" id="624814" title="bug number 624814" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625339" id="625339" title="bug number 625339" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627212" id="627212" title="bug number 627212" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627310" id="627310" title="bug number 627310" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627386" id="627386" title="bug number 627386" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629908" id="629908" title="bug number 629908" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631066" id="631066" title="bug number 631066" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631185" id="631185" title="bug number 631185" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631319" id="631319" title="bug number 631319" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627447" id="627447" title="bug number 627447" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624587" id="624587" title="bug number 624587" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2798" id="CVE-2010-2798" title="CVE-2010-2798" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2524" id="CVE-2010-2524" title="CVE-2010-2524" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2537" id="CVE-2010-2537" title="CVE-2010-2537" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2538" id="CVE-2010-2538" title="CVE-2010-2538" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3110" id="CVE-2010-3110" title="CVE-2010-3110" type="cve"/>
  </references>
  <description>This update of the openSUSE 11.3 kernel brings the kernel
to version 2.6.34.4 and contains a lot of bug and security
fixes

CVE-2010-3110: Missing bounds checks in several ioctls of
the Novell Client novfs /proc interface allowed
unprivileged local users to crash the kernel or even
execute code in kernel context.

CVE-2010-2524: a malicious local user could fill the cache
used by CIFS do perform dns lookups with chosen data,
therefore tricking the kernel into mounting a wrong CIFS
server.

CVE-2010-2798: a local user could trigger a NULL derefence
on a gfs2 file system

CVE-2010-2537: a local user could overwrite append-only
files on a btrfs file system

CVE-2010-2538: a local user could read kernel memory of a
btrfs file system
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.4" release="0.1.1">
          <filename>kernel-devel-2.6.34.4-0.1.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-ec2-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-ec2-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-pae-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-pae-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-pae-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.4" release="0.1.1">
          <filename>kernel-source-2.6.34.4-0.1.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.4" release="0.1.1">
          <filename>kernel-source-vanilla-2.6.34.4-0.1.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-syms-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-syms-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vmi-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-default-1.1_k2.6.34.4_0.1-19.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-default-1.1_k2.6.34.4_0.1-19.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-desktop-1.1_k2.6.34.4_0.1-19.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-desktop-1.1_k2.6.34.4_0.1-19.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1bdb65860dd9c5a73f747918071b7799"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3092">
  <id>liblirc_client0</id>
  <title>ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283989118"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637880" id="637880" title="bug number 637880" type="bugzilla"/>
  </references>
  <description>The ndiswrapper, wacom and lirc kernel modules needed to be
rebuilt after kernel update.
</description>
  <pkglist>
    <collection>
        <package name="liblirc_client0" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="liblirc_client0" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="liblirc_client0-32bit" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-32bit-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-devel" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-devel" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-pae" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-pae-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="i586" version="1.55" release="8.1.1">
          <filename>ndiswrapper-1.55-8.1.1.i586.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="x86_64" version="1.55" release="8.1.1">
          <filename>ndiswrapper-1.55-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="i586" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.4_0.1-8.1.1.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="x86_64" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.4_0.1-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="i586" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.4_0.1-8.1.1.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="x86_64" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.4_0.1-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-pae" arch="i586" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-pae-1.55_k2.6.34.4_0.1-8.1.1.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="i586" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.4_0.1-11.1.1.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="x86_64" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.4_0.1-11.1.1.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="i586" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.4_0.1-11.1.1.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="x86_64" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.4_0.1-11.1.1.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-pae" arch="i586" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-pae-0.8.1_k2.6.34.4_0.1-11.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="adbe558aaed0ce88ddee31d8ef37423d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2796">
  <id>java-1_6_0-sun</id>
  <title>SUN Java update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279891520"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624569" id="624569" title="bug number 624569" type="bugzilla"/>
  </references>
  <description>Oracle has released JRE 6 Update 21 in order to numerous
defects.

Please refer to Oracle's site for more information:
http://java.sun.com/javase/6/webnotes/6u21.html
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-src-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-src-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="04d7af1b010b9bd2736fdd80a7be9a92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2929">
  <id>apache2-mod_php5</id>
  <title>php5 security update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281619328"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=588975" id="588975" title="bug number 588975" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604315" id="604315" title="bug number 604315" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604652" id="604652" title="bug number 604652" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604654" id="604654" title="bug number 604654" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604656" id="604656" title="bug number 604656" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605097" id="605097" title="bug number 605097" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605100" id="605100" title="bug number 605100" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609763" id="609763" title="bug number 609763" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609766" id="609766" title="bug number 609766" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609768" id="609768" title="bug number 609768" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609769" id="609769" title="bug number 609769" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612555" id="612555" title="bug number 612555" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612556" id="612556" title="bug number 612556" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616232" id="616232" title="bug number 616232" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619483" id="619483" title="bug number 619483" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619486" id="619486" title="bug number 619486" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619487" id="619487" title="bug number 619487" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619489" id="619489" title="bug number 619489" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633932" id="633932" title="bug number 633932" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633934" id="633934" title="bug number 633934" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636923" id="636923" title="bug number 636923" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0397" id="CVE-2010-0397" title="CVE-2010-0397" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1860" id="CVE-2010-1860" title="CVE-2010-1860" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1862" id="CVE-2010-1862" title="CVE-2010-1862" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1864" id="CVE-2010-1864" title="CVE-2010-1864" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1866" id="CVE-2010-1866" title="CVE-2010-1866" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1914" id="CVE-2010-1914" title="CVE-2010-1914" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1915" id="CVE-2010-1915" title="CVE-2010-1915" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917" id="CVE-2010-1917" title="CVE-2010-1917" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2093" id="CVE-2010-2093" title="CVE-2010-2093" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2094" id="CVE-2010-2094" title="CVE-2010-2094" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2097" id="CVE-2010-2097" title="CVE-2010-2097" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2100" id="CVE-2010-2100" title="CVE-2010-2100" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2101" id="CVE-2010-2101" title="CVE-2010-2101" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2190" id="CVE-2010-2190" title="CVE-2010-2190" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2191" id="CVE-2010-2191" title="CVE-2010-2191" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225" id="CVE-2010-2225" title="CVE-2010-2225" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2531" id="CVE-2010-2531" title="CVE-2010-2531" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2950" id="CVE-2010-2950" title="CVE-2010-2950" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3062" id="CVE-2010-3062" title="CVE-2010-3062" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3063" id="CVE-2010-3063" title="CVE-2010-3063" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3064" id="CVE-2010-3064" title="CVE-2010-3064" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3065" id="CVE-2010-3065" title="CVE-2010-3065" type="cve"/>
  </references>
  <description>PHP was updated to version 5.3.3 to fix serveral security
issues.

(CVE-2010-0397, CVE-2010-1860, CVE-2010-1862,
CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915,
CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097,
CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191,
CVE-2010-2225, CVE-2010-2531, CVE-2010-2950, CVE-2010-3062,
CVE-2010-3063, CVE-2010-3064, CVE-2010-3065)
</description>
  <pkglist>
    <collection>
        <package name="apache2-mod_php5" arch="i586" version="5.3.3" release="0.1.2">
          <filename>apache2-mod_php5-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="apache2-mod_php5" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>apache2-mod_php5-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-bcmath-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-bcmath-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-bz2" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-bz2-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-bz2" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-bz2-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-calendar" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-calendar-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-calendar" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-calendar-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-ctype" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-ctype-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-ctype" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-ctype-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-curl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-curl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-curl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-curl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-dba" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-dba-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-dba" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-dba-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-devel" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-devel-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-devel" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-devel-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-dom" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-dom-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-dom" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-dom-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-enchant" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-enchant-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-enchant" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-enchant-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-exif" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-exif-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-exif" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-exif-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-fastcgi-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-fastcgi-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-fileinfo-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-fileinfo-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-ftp" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-ftp-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-ftp" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-ftp-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-gd" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-gd-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-gd" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-gd-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-gettext" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-gettext-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-gettext" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-gettext-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-gmp" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-gmp-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-gmp" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-gmp-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-hash" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-hash-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-hash" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-hash-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-iconv" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-iconv-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-iconv" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-iconv-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-imap" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-imap-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-imap" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-imap-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-intl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-intl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-intl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-intl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-json" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-json-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-json" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-json-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-ldap" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-ldap-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-ldap" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-ldap-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-mbstring-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-mbstring-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-mcrypt-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-mcrypt-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-mysql" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-mysql-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-mysql" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-mysql-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-odbc" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-odbc-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-odbc" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-odbc-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-openssl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-openssl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-openssl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-openssl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pcntl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pcntl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pdo" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pdo-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pdo" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pdo-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pear" arch="noarch" version="5.3.3" release="0.1.2">
          <filename>php5-pear-5.3.3-0.1.2.noarch.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pgsql-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pgsql-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-phar" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-phar-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-phar" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-phar-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-posix" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-posix-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-posix" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-posix-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pspell" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pspell-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pspell" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pspell-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-readline" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-readline-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-readline" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-readline-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-shmop" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-shmop-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-shmop" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-shmop-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-snmp" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-snmp-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-snmp" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-snmp-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-soap" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-soap-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-soap" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-soap-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sockets" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sockets-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sockets" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sockets-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sqlite-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sqlite-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-suhosin-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-suhosin-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sysvmsg-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sysvmsg-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sysvsem-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sysvsem-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sysvshm-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sysvshm-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-tidy" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-tidy-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-tidy" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-tidy-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-tokenizer-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-tokenizer-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-wddx" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-wddx-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-wddx" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-wddx-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xmlreader-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xmlreader-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xmlrpc-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xmlrpc-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xmlwriter-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xmlwriter-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xsl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xsl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xsl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xsl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-zip" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-zip-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-zip" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-zip-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-zlib" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-zlib-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-zlib" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-zlib-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4db9a1c6f547129a7ba0b581d6254caa"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2877">
  <id>iscsitarget</id>
  <title>iscsitarget/tgt: multiple buffer overflows fixed</title>
  <release>openSUSE 11.3</release>
  <issued date="1281025255"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618574" id="618574" title="bug number 618574" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2221" id="CVE-2010-2221" title="CVE-2010-2221" type="cve"/>
  </references>
  <description>This update of iscscitarget/tgt fixes multiple overflows
and a format string vulnerability:
- CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability
  (CWE-134)
</description>
  <pkglist>
    <collection>
        <package name="iscsitarget" arch="i586" version="1.4.19" release="4.1.1">
          <filename>iscsitarget-1.4.19-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget" arch="x86_64" version="1.4.19" release="4.1.1">
          <filename>iscsitarget-1.4.19-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-default" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-default-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-default" arch="x86_64" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-default-1.4.19_k2.6.34.0_12-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-desktop" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-desktop-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-desktop" arch="x86_64" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-desktop-1.4.19_k2.6.34.0_12-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-pae" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-pae-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-xen" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-xen-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-xen" arch="x86_64" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-xen-1.4.19_k2.6.34.0_12-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9b74cdb843432feb8f09b3e35de01b33"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2874">
  <id>tgt</id>
  <title>iscsitarget/tgt: multiple buffer overflows fixed</title>
  <release>openSUSE 11.3</release>
  <issued date="1281025203"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618574" id="618574" title="bug number 618574" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=592928" id="592928" title="bug number 592928" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2221" id="CVE-2010-2221" title="CVE-2010-2221" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0743" id="CVE-2010-0743" title="CVE-2010-0743" type="cve"/>
  </references>
  <description>This update of iscscitarget/tgt fixes multiple overflows
and a format string vulnerability:
- CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability
  (CWE-134)
</description>
  <pkglist>
    <collection>
        <package name="tgt" arch="i586" version="0.9.0" release="7.1.1">
          <filename>tgt-0.9.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="tgt" arch="x86_64" version="0.9.0" release="7.1.1">
          <filename>tgt-0.9.0-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b8696a6c72ba928fbcc55724f615e36e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3055">
  <id>pam_mount</id>
  <title>pam_mount: Avoid useless warning output</title>
  <release>openSUSE 11.3</release>
  <issued date="1283346063"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626127" id="626127" title="bug number 626127" type="bugzilla"/>
  </references>
  <description>Do not warn about missing fskeyhash when no fskey is
specified.
</description>
  <pkglist>
    <collection>
        <package name="pam_mount" arch="i586" version="1.34" release="3.2.1">
          <filename>pam_mount-1.34-3.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="pam_mount" arch="x86_64" version="1.34" release="3.2.1">
          <filename>pam_mount-1.34-3.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="pam_mount-32bit" arch="x86_64" version="1.34" release="3.2.1">
          <filename>pam_mount-32bit-1.34-3.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="da94ffa45509fc34c666f5c86c595410"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3082">
  <id>python-xlib</id>
  <title>python-xlib: Fixed cannot connect to display problem</title>
  <release>openSUSE 11.3</release>
  <issued date="1283863681"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623507" id="623507" title="bug number 623507" type="bugzilla"/>
  </references>
  <description>A bug where python-xlib could not connect to local displays
was fixed. (bnc#623507)
</description>
  <pkglist>
    <collection>
        <package name="python-xlib" arch="i586" version="0.14" release="90.1.1">
          <filename>python-xlib-0.14-90.1.1.i586.rpm</filename>
        </package>
        <package name="python-xlib" arch="x86_64" version="0.14" release="90.1.1">
          <filename>python-xlib-0.14-90.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bb5b71fd7148a30e8daa6e27f0034bd5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2739">
  <id>tomcat6</id>
  <title>tomcat security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527633"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622188" id="622188" title="bug number 622188" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2227" id="CVE-2010-2227" title="CVE-2010-2227" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1157" id="CVE-2010-1157" title="CVE-2010-1157" type="cve"/>
  </references>
  <description>This update of tomcat fixes denial of service and
information disclosure vulnerabilities which could
potentially be exploited by remote attackers to crash
tomcat or to obtain sensitive information (CVE-2010-2227,
CVE-2010-1157).
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-admin-webapps-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-docs-webapp-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-el-1_0-api" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-el-1_0-api-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-javadoc-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-jsp-2_1-api-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-lib-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-servlet-2_5-api-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-webapps-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f4d61c91f7de0dba12b7fc732a7ec3e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2903">
  <id>libvirt</id>
  <title>libvirt security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1281448033"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618155" id="618155" title="bug number 618155" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619991" id="619991" title="bug number 619991" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2237" id="CVE-2010-2237" title="CVE-2010-2237" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2238" id="CVE-2010-2238" title="CVE-2010-2238" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2239" id="CVE-2010-2239" title="CVE-2010-2239" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2242" id="CVE-2010-2242" title="CVE-2010-2242" type="cve"/>
  </references>
  <description>libvirt did not properly handle configured disk formats
which potenially allowed users to read arbitrary files
(CVE-2010-2237, CVE-2010-2238, CVE-2010-2239)

Improperly mapped source privileged ports in guests may
allow obtaining privileged resources on the host
(CVE-2010-2242).
</description>
  <pkglist>
    <collection>
        <package name="libvirt" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-client-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-client" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-client-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-devel-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-devel-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-doc-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-doc-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-python" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-python-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-python" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-python-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="abb34e6ed4d720d7dcc00eb8ca96550a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3117">
  <id>libtiff-devel</id>
  <title>libtiff security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284583468"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624215" id="624215" title="bug number 624215" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087" id="CVE-2010-3087" title="CVE-2010-3087" type="cve"/>
  </references>
  <description>specially crafted tiff files could cause a memory
corruption in libtiff. Attackers could potentially exploit
that to execute arbitrary code in applications that use
libtiff for processing tiff files (CVE-2010-3087).
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.2.1">
          <filename>libtiff-devel-3.9.2-5.2.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff-devel-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff-devel-32bit-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.2.1">
          <filename>libtiff3-3.9.2-5.2.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff3-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff3-32bit-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.2.1">
          <filename>tiff-3.9.2-5.2.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>tiff-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4c0b25572497cbde8fae1186f2281e5a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3132">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Security update to 3.6.10</title>
  <release>openSUSE 11.3</release>
  <issued date="1284631529"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla Firefox was updated to version 3.6.10, fixing
various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for  completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-branding-upstream-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-branding-upstream-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-common-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-common-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-other-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-other-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-js192-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-js192-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-js192-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="88f2cbbbab1f3b99edf6fb069cecbe65"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3105">
  <id>kernel</id>
  <title>kernel: security and bugfix update to 2.6.34.7</title>
  <release>openSUSE 11.3</release>
  <issued date="1284592469"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633543" id="633543" title="bug number 633543" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637436" id="637436" title="bug number 637436" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=600948" id="600948" title="bug number 600948" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636112" id="636112" title="bug number 636112" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633581" id="633581" title="bug number 633581" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632309" id="632309" title="bug number 632309" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628604" id="628604" title="bug number 628604" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635862" id="635862" title="bug number 635862" type="bugzilla"/>
  </references>
  <description>The openSUSE 11.3 kernel was updated to versiuon 2.6.34.7.
It fixes lots of bugs and security issues.

A major regression in handling some USB Input devices (Mice
and Keyboard) introduced by the previous update was fixed.

Fixed lots of bugs in the ATH5K wireless driver.

Following security issues were fixed: CVE-2010-3078: A XFS
stack memory information disclosure was fixed.

CVE-2010-2954: A NULL pointer dereference in the IRDA stack
was fixed, which could lead to kernel crashes.

CVE-2010-2959: A privilege escalation possibility in the
CAN bus protocol module can_bcm was fixed.

CVE-2010-2942: Several memory leaks in the net scheduling
code were fixed.

CVE-2010-2803: Fixed kernel memory information leaks from
DRM ioctls.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.2.2">
          <filename>kernel-devel-2.6.34.7-0.2.2.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-extra-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-extra-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-pae-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-pae-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-pae-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.2.2">
          <filename>kernel-source-2.6.34.7-0.2.2.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.2.2">
          <filename>kernel-source-vanilla-2.6.34.7-0.2.2.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-syms-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-syms-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vmi-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vmi-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vmi-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.2-19.1.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.2-19.1.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.2-19.1.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.2-19.1.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ed3e62706da760c33362255aa25e7896"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3136">
  <id>kmps</id>
  <title>ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283989118"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637880" id="637880" title="bug number 637880" type="bugzilla"/>
  </references>
  <description>The ndiswrapper, wacom and lirc kernel modules needed to be
rebuilt after the last kernel update.
</description>
  <pkglist>
    <collection>
        <package name="liblirc_client0" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="liblirc_client0" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="liblirc_client0-32bit" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-32bit-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-devel" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-devel" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-pae" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-pae-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="i586" version="1.55" release="8.1.2">
          <filename>ndiswrapper-1.55-8.1.2.i586.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="x86_64" version="1.55" release="8.1.2">
          <filename>ndiswrapper-1.55-8.1.2.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="i586" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.7_0.2-8.1.2.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="x86_64" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.7_0.2-8.1.2.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="i586" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.7_0.2-8.1.2.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="x86_64" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.7_0.2-8.1.2.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-pae" arch="i586" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-pae-1.55_k2.6.34.7_0.2-8.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="x86_64" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.7_0.2-11.1.2.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="x86_64" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.7_0.2-11.1.2.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-pae" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-pae-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-xen" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-xen-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-xen" arch="x86_64" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-xen-0.8.1_k2.6.34.7_0.2-11.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e1e3048ba55b8c28635500353ce179fa"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3138">
  <id>seamonkey</id>
  <title>seamonkey: Security update to 2.0.8</title>
  <release>openSUSE 11.3</release>
  <issued date="1284724491"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla Seamonkey 2.0 was updated to version 2.0.8, fixing
various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-dom-inspector-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-dom-inspector-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-irc-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-irc-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-common-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-common-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-other-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-other-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-venkman-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-venkman-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="be86c69e5fa10afc95539fde0801fe92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3137">
  <id>dovecot12</id>
  <title>dovecot security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284723241"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640005" id="640005" title="bug number 640005" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3304" id="CVE-2010-3304" title="CVE-2010-3304" type="cve"/>
  </references>
  <description>When using Maildir all  ACLs on INBOX were copied to newly
created mailboxes although only default ACLs should have
been copied (CVE-2010-3304).
</description>
  <pkglist>
    <collection>
        <package name="dovecot12" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-mysql-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-mysql-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-pgsql-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-pgsql-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-sqlite-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-sqlite-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-devel-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-devel-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-lucene-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-lucene-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-solr-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-solr-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f1e7112169d9e184e5af5e359cc59b1"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2988">
  <id>virt-manager</id>
  <title>xen: Collective update for xen</title>
  <release>openSUSE 11.3</release>
  <issued date="1282605744"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626262" id="626262" title="bug number 626262" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=584204" id="584204" title="bug number 584204" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625520" id="625520" title="bug number 625520" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613529" id="613529" title="bug number 613529" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623833" id="623833" title="bug number 623833" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625003" id="625003" title="bug number 625003" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605186" id="605186" title="bug number 605186" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623438" id="623438" title="bug number 623438" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624285" id="624285" title="bug number 624285" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623201" id="623201" title="bug number 623201" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620694" id="620694" title="bug number 620694" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=586221" id="586221" title="bug number 586221" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599550" id="599550" title="bug number 599550" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604611" id="604611" title="bug number 604611" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609153" id="609153" title="bug number 609153" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612189" id="612189" title="bug number 612189" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610658" id="610658" title="bug number 610658" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608191" id="608191" title="bug number 608191" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608194" id="608194" title="bug number 608194" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=569744" id="569744" title="bug number 569744" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606882" id="606882" title="bug number 606882" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=591799" id="591799" title="bug number 591799" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607219" id="607219" title="bug number 607219" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603008" id="603008" title="bug number 603008" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605182" id="605182" title="bug number 605182" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599929" id="599929" title="bug number 599929" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629226" id="629226" title="bug number 629226" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629261" id="629261" title="bug number 629261" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613957" id="613957" title="bug number 613957" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627449" id="627449" title="bug number 627449" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626299" id="626299" title="bug number 626299" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624250" id="624250" title="bug number 624250" type="bugzilla"/>
  </references>
  <description>Collective Xen Update, fixing the following reports:

Xen Hypervisor and Tools bnc#626262 - Populate-on-demand
memory problem on xen with hvm guest bnc#584204 - xm
usb-list broken bnc#625520 - TP-L3: NMI cannot be triggered
for xen kernel bnc#613529 - TP-L3: kdump kernel hangs when
crash was initiated from xen kernel bnc#623833 - Error in
Xend-API method VM_set_actions_after_crash bnc#625003 - Fix
vm config options coredump-{restart,destroy} bnc#605186 -
Squelch harmless error messages in block-iscsi bnc#623438 -
Add ability to control SCSI device path scanning in xend
bnc#624285 - TP-L3: xen rdtsc emulation reports wrong
frequency bnc#623201 - drbd xvd will fail in new xen4
packages due to wrong popen2 arguments in blkif.py
bnc#620694 - Xen yast vm-install for existing
paravirtualized disk fails with UnboundLocalError: local
variable 'dev_type' referenced before assignment bnc#586221
- cannot add DomU with USB host controller defined
bnc#599550 - Xen cannot distinguish the status of 'pause'
bnc#604611 - Do not store vif device details when vif
config contains invalid mac address. bnc#609153 - xm
migrate &lt;domain_name&gt; localhost -l fails on Windows VMs
bnc#612189 - Clear APIC Timer Initial Count Register when
masking timer interrupt bnc#610658 - XEN: PXE boot fails
for fully virtualized guests - e1000 virtual nic.
bnc#608191 - /var/adm/fillup-templates/sysconfig.xend from
package xen-tools is no a valid sysconfig file bnc#608194 -
/etc/xen/* config files are not packaged with noreplace
bnc#569744 - SLE HVM guest clock/timezone is incorrect
after reboot bnc#606882 - Allow spaces in vbd path names
bnc#591799 - The status of Caps Lock is incorrect in domU
bnc#607219 - AMD Erratum 383 workaround for Xen bnc#603008
- On an 8 Socket Nehalem-EX system, the fix for 593536
causes a hang during network setup. bnc#605182 -
/etc/xen/scripts/xen-hotplug-cleanup: line 24: [: !=: unary
operator expected bnc#599929 - Hot add/remove Kawela NIC
device over 500 times will cause guest domain crash

Virtual Machine Installer (vm-install) bnc#629226 -
vm-install --vm-settings does not work with kvm config
bnc#629261 - vm-install for KVM fails if more than one ISO
image is configured bnc#613957 - Fedora 13 PV DomU can't be
installed with virt-manager bnc#627449 - Wrong MAC assigned
to NIC card when using KVM when installing machine using
vm-install bnc#626299 - vmdk wont work with virt-manager

Virtual Machine Manager (virt-manager) bnc#624250 - L3:
virt-manager doesn't update &quot;Autostart&quot; setting in vm
configuration correctly
</description>
  <pkglist>
    <collection>
        <package name="virt-manager" arch="i586" version="0.8.4" release="5.1.1">
          <filename>virt-manager-0.8.4-5.1.1.i586.rpm</filename>
        </package>
        <package name="virt-manager" arch="x86_64" version="0.8.4" release="5.1.1">
          <filename>virt-manager-0.8.4-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="vm-install" arch="i586" version="0.4.26" release="0.1.1">
          <filename>vm-install-0.4.26-0.1.1.i586.rpm</filename>
        </package>
        <package name="vm-install" arch="x86_64" version="0.4.26" release="0.1.1">
          <filename>vm-install-0.4.26-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-devel-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-devel" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-devel-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-html-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-html-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-pdf-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-pdf-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="i586" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-default-4.0.0_21091_06_k2.6.34.0_12-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="x86_64" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-default-4.0.0_21091_06_k2.6.34.0_12-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="i586" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-desktop-4.0.0_21091_06_k2.6.34.0_12-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="x86_64" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-desktop-4.0.0_21091_06_k2.6.34.0_12-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-pae" arch="i586" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-pae-4.0.0_21091_06_k2.6.34.0_12-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-libs-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-libs-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-tools" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-domU-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-domU-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9a48c4cfa1b57258588b7815ee70c16b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3110">
  <id>libQtWebKit-devel</id>
  <title>libQtWebKit4: Fix Flash Player 10.1 support</title>
  <release>openSUSE 11.3</release>
  <issued date="1284586965"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613818" id="613818" title="bug number 613818" type="bugzilla"/>
  </references>
  <description>This update initializes gtk2 before invoking the flash
player initialisation, as it crashes otherwise.
</description>
  <pkglist>
    <collection>
        <package name="libQtWebKit-devel" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit-devel-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libQtWebKit-devel" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit-devel-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libQtWebKit4" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit4-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libQtWebKit4" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit4-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libQtWebKit4-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit4-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-devel" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-devel-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-devel" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-devel-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-qt3support" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-qt3support-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-qt3support" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-qt3support-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-qt3support-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-qt3support-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-sql" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql-sqlite" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-sqlite-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-sql-sqlite" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-sqlite-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql-sqlite-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-sqlite-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-x11" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-x11-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-x11" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-x11-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-x11-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-x11-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e7f90a5d8add7dd775f1e8f0fe26aed6"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3104">
  <id>postfix</id>
  <title>postfix: Collective update for postfix</title>
  <release>openSUSE 11.3</release>
  <issued date="1284473445"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625657" id="625657" title="bug number 625657" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=586486" id="586486" title="bug number 586486" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622873" id="622873" title="bug number 622873" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- #625657: SuSEconfig.postfix and smtp_use_tls
- #622873: postfix doesn't start if ipv6 is disabled
- #627632: /etc/postfix/virtual.db is older than source
  file /etc/postfix/virtual
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-devel-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-devel-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.2.1">
          <filename>postfix-doc-2.7.1-2.2.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-mysql-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-mysql-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-postgresql-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-postgresql-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-mail" arch="noarch" version="2.18.5" release="2.1.1">
          <filename>yast2-mail-2.18.5-2.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-mail-plugins" arch="noarch" version="2.18.5" release="2.1.1">
          <filename>yast2-mail-plugins-2.18.5-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="72800e6c726875b81faa5d3b0d4f387d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3107">
  <id>cups</id>
  <title>cups: Set CUPS default size of RIPCache  to 128 MB</title>
  <release>openSUSE 11.3</release>
  <issued date="1284583963"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628233" id="628233" title="bug number 628233" type="bugzilla"/>
  </references>
  <description>The CUPS upstream default &quot;RIPCache 8m&quot; is too small for
nowadays higher resolution printing and can cause various
kind of printout failures (see CUPS STR 3535 at
http://www.cups.org/str.php?L3535 and the openSUSE Bugzilla
bug 628233). Such issues are avoided with a default
&quot;RIPCache 128m&quot; setting. If needed a different value can be
explicitly specified in /etc/cups/cupsd.conf via a line
like &quot;RIPCache 256m&quot;.
</description>
  <pkglist>
    <collection>
        <package name="cups" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-client" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-client-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-client" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-client-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-ddk" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-ddk-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-ddk" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-ddk-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-devel" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-devel-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-devel" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-devel-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-libs" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-libs-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-libs" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-libs-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-libs-32bit" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-libs-32bit-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2aa806510b3bfa91d1245b25981ab9b4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3111">
  <id>libgphoto2</id>
  <title>libgphoto2: Fixed Olympus x-750 camera cannot be mounted</title>
  <release>openSUSE 11.3</release>
  <issued date="1284583710"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634208" id="634208" title="bug number 634208" type="bugzilla"/>
  </references>
  <description>This update fixes incorrect detection of mass storage
cameras as ptp cameras:
- bnc#634208: gphoto: Olympus x-750 camera cannot be mounted
</description>
  <pkglist>
    <collection>
        <package name="libgphoto2" arch="i586" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-2.4.9-4.1.1.i586.rpm</filename>
        </package>
        <package name="libgphoto2" arch="x86_64" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-2.4.9-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgphoto2-32bit" arch="x86_64" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-32bit-2.4.9-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgphoto2-devel" arch="i586" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-devel-2.4.9-4.1.1.i586.rpm</filename>
        </package>
        <package name="libgphoto2-devel" arch="x86_64" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-devel-2.4.9-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgphoto2-lang" arch="noarch" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-lang-2.4.9-4.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d69e5e453eb077a610413e892cb2668e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3170">
  <id>flash-player</id>
  <title>flash-player security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285055945"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639541" id="639541" title="bug number 639541" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2884" id="CVE-2010-2884" title="CVE-2010-2884" type="cve"/>
  </references>
  <description>Flash Player was updated to version 10.1.85.3 to fix a
critical security issue (CVE-2010-2884).
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.85.3" release="0.1.1">
          <filename>flash-player-10.1.85.3-0.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="88444f657c04ca8cab3adb2bf83ec5f3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3173">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1285037798"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639709" id="639709" title="bug number 639709" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638274" id="638274" title="bug number 638274" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635425" id="635425" title="bug number 635425" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635413" id="635413" title="bug number 635413" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634637" id="634637" title="bug number 634637" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638277" id="638277" title="bug number 638277" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639708" id="639708" title="bug number 639708" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639728" id="639728" title="bug number 639728" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637502" id="637502" title="bug number 637502" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639483" id="639483" title="bug number 639483" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639481" id="639481" title="bug number 639481" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639482" id="639482" title="bug number 639482" type="bugzilla"/>
  </references>
  <description>This update of the openSUSE 11.3 kernel fixes two local
root exploits, various other security issues and some bugs.

Following security issues are fixed by this update:
CVE-2010-3301: Mismatch between 32bit and 64bit register
usage in the system call entry path could be used by local
attackers to gain root privileges. This problem only
affects x86_64 kernels.

CVE-2010-3081: Incorrect buffer handling in the
biarch-compat buffer handling could be used by local
attackers to gain root privileges. This problem affects
foremost x86_64, or potentially other biarch platforms,
like PowerPC and S390x.

CVE-2010-3084: A buffer overflow in the ETHTOOL_GRXCLSRLALL
code could be used to crash the kernel or potentially
execute code.

CVE-2010-2955: A kernel information leak via the WEXT ioctl
was fixed.

CVE-2010-2960: The keyctl_session_to_parent function in
security/keys/keyctl.c in the Linux kernel expects that a
certain parent session keyring exists, which allows local
users to cause a denial of service (NULL pointer
dereference and system crash) or possibly have unspecified
other impact via a KEYCTL_SESSION_TO_PARENT argument to the
keyctl function.

CVE-2010-3080: A double free in an alsa error path was
fixed, which could lead to kernel crashes.

CVE-2010-3079: Fixed a ftrace NULL pointer dereference
problem which could lead to kernel crashes.

CVE-2010-3298: Fixed a kernel information leak in the
net/usb/hso driver.

CVE-2010-3296: Fixed a kernel information leak in the cxgb3
driver.

CVE-2010-3297: Fixed a kernel information leak in the
net/eql driver.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.3.1">
          <filename>kernel-devel-2.6.34.7-0.3.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-pae-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-pae-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-pae-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.3.1">
          <filename>kernel-source-2.6.34.7-0.3.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.3.1">
          <filename>kernel-source-vanilla-2.6.34.7-0.3.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-syms-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-syms-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vmi-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vmi-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vmi-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.3-19.1.3.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.3-19.1.3.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.3-19.1.3.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.3-19.1.3.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="13872b4180866950c95a2565b8265480"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3115">
  <id>ldapsmb</id>
  <title>samba security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284586719"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=567013" id="567013" title="bug number 567013" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=573246" id="573246" title="bug number 573246" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=592198" id="592198" title="bug number 592198" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599873" id="599873" title="bug number 599873" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613459" id="613459" title="bug number 613459" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617153" id="617153" title="bug number 617153" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619787" id="619787" title="bug number 619787" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630812" id="630812" title="bug number 630812" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632055" id="632055" title="bug number 632055" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632852" id="632852" title="bug number 632852" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637218" id="637218" title="bug number 637218" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3069" id="CVE-2010-3069" title="CVE-2010-3069" type="cve"/>
  </references>
  <description>A buffer overflow in the sid_parse() function of samba
could potentially be exploited by remote attackers to
execute arbitrary code (CVE-2010-3069).

Additionally the update also contains fixes for the
following non-security issues:

bnc#567013 - Failed to join ADS Domain bnc#573246 - mounted
shares via mount.cifs disappear when dhclient renews lease
bnc#592198 - Samba 3.0 / 3.2 doesn't work with Windows 2008
R2 (NTLMv2) bnc#599873 - SAMBA - Problem using NTLM
authentication with 2008R2 bnc#613459 - winbindd crashes in
rpccli_set_timeout bnc#617153 - new printers are not seen
in samba with registry bnc#619787 - Samba Causes Too Many
Files In Use Error On Windows 7 bnc#630812 - net ads join
failing due to malformed UPN bnc#632055 - No authentication
dialog to access SMB share through Nautilus bnc#632852 -
root preexec does not work as expected
</description>
  <pkglist>
    <collection>
        <package name="ldapsmb" arch="i586" version="1.34b" release="5.1.2">
          <filename>ldapsmb-1.34b-5.1.2.i586.rpm</filename>
        </package>
        <package name="ldapsmb" arch="x86_64" version="1.34b" release="5.1.2">
          <filename>ldapsmb-1.34b-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libldb-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libldb-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libldb-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libldb-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libldb0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libldb0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libldb0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libldb0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libnetapi-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libnetapi-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libnetapi0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libnetapi0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libnetapi0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libnetapi0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbclient-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbclient-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbclient0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbclient0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbclient0-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtalloc-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtalloc-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtalloc2" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtalloc2-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtalloc2" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtalloc2-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtdb-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtdb-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtdb1" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtdb1-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtdb1" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtdb1-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtdb1-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtdb1-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtevent-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtevent-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtevent0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtevent0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtevent0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtevent0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libwbclient-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libwbclient-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libwbclient0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libwbclient0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libwbclient0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libwbclient0-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-client" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-client-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-client" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-client-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-client-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-client-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-doc" arch="noarch" version="3.5.4" release="5.1.1">
          <filename>samba-doc-3.5.4-5.1.1.noarch.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-krb-printing-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-krb-printing-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-winbind-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-winbind" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-winbind-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-winbind-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6c3051a4927013b3038e41497d05506d"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2998">
  <id>libgdiplus0</id>
  <title>mono: libgdiplus image processing integer overflow vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1282659439"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630756" id="630756" title="bug number 630756" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1526" id="CVE-2010-1526" title="CVE-2010-1526" type="cve"/>
  </references>
  <description>This update fixes three integer overflows found by Secunia
Research member Stefan Cornelius that could possibly be
exploited to execute arbitrary code:
- &quot;gdip_load_tiff_image()&quot; by processing specially crafted
  TIFF images
- &quot;gdip_load_jpeg_image_internal()&quot; by processing specially
  crafted JPEG images
- &quot;gdip_read_bmp_image()&quot;by processing specially crafted
  BMP image (CVE-2010-1526)
</description>
  <pkglist>
    <collection>
        <package name="libgdiplus0" arch="i586" version="2.6.4" release="2.1.1">
          <filename>libgdiplus0-2.6.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libgdiplus0" arch="x86_64" version="2.6.4" release="2.1.1">
          <filename>libgdiplus0-2.6.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4060aa7c59bd870811ff835bc2e1edf3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3187">
  <id>libwebkit</id>
  <title>libwebkit security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284983987"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640409" id="640409" title="bug number 640409" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1781" id="CVE-2010-1781" title="CVE-2010-1781" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1782" id="CVE-2010-1782" title="CVE-2010-1782" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1784" id="CVE-2010-1784" title="CVE-2010-1784" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1785" id="CVE-2010-1785" title="CVE-2010-1785" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1786" id="CVE-2010-1786" title="CVE-2010-1786" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1787" id="CVE-2010-1787" title="CVE-2010-1787" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1788" id="CVE-2010-1788" title="CVE-2010-1788" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1790" id="CVE-2010-1790" title="CVE-2010-1790" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1792" id="CVE-2010-1792" title="CVE-2010-1792" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1793" id="CVE-2010-1793" title="CVE-2010-1793" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2648" id="CVE-2010-2648" title="CVE-2010-2648" type="cve"/>
  </references>
  <description>The browser engine libwebkit was updated to version 1.2.4
to fix several security bugs. (CVE-2010-1781,
CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786,
CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792,
CVE-2010-1793, CVE-2010-2648)
</description>
  <pkglist>
    <collection>
        <package name="libwebkit-1_0-2" arch="i586" version="1.2.4" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.4-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2-32bit" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>libwebkit-1_0-2-32bit-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="i586" version="1.2.4" release="0.1.1">
          <filename>libwebkit-devel-1.2.4-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>libwebkit-devel-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-lang" arch="noarch" version="1.2.4" release="0.1.1">
          <filename>libwebkit-lang-1.2.4-0.1.1.noarch.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="i586" version="1.2.4" release="0.1.1">
          <filename>webkit-jsc-1.2.4-0.1.1.i586.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>webkit-jsc-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a589a440bf6f461b51820bd7247ef1e8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3106">
  <id>yast2-gtk</id>
  <title>yast2-gtk: Update to version 2.21.70 fixing several bugs</title>
  <release>openSUSE 11.3</release>
  <issued date="1284582860"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624310" id="624310" title="bug number 624310" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632377" id="632377" title="bug number 632377" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633173" id="633173" title="bug number 633173" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633498" id="633498" title="bug number 633498" type="bugzilla"/>
  </references>
  <description>This update of yast2-gtk fixes the following bugs:
bnc#624310: File &gt; Import and Export menu items faltering
(gtk) bnc#632377: Volatile package count in the filter box
(gtk) bnc#633173: Crash when selecting esoteric filename
(gtk) bnc#633498: Correlate window size to font size (gtk)
</description>
  <pkglist>
    <collection>
        <package name="yast2-gtk" arch="i586" version="2.21.70" release="2.2.1">
          <filename>yast2-gtk-2.21.70-2.2.1.i586.rpm</filename>
        </package>
        <package name="yast2-gtk" arch="x86_64" version="2.21.70" release="2.2.1">
          <filename>yast2-gtk-2.21.70-2.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ec6755d54e99e75db7894c2f2c10d1ae"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3113">
  <id>pm-utils</id>
  <title>pm-utils: This updates fixes a wrong function use</title>
  <release>openSUSE 11.3</release>
  <issued date="1284582785"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623290" id="623290" title="bug number 623290" type="bugzilla"/>
  </references>
  <description>The log() is declared in the pm-functions. But pm-functions
includes functions. The correct solution is to put the
log() into the functions. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="pm-utils" arch="i586" version="1.3.0" release="10.1.1">
          <filename>pm-utils-1.3.0-10.1.1.i586.rpm</filename>
        </package>
        <package name="pm-utils" arch="x86_64" version="1.3.0" release="10.1.1">
          <filename>pm-utils-1.3.0-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pm-utils-ndiswrapper" arch="i586" version="1.3.0" release="10.1.1">
          <filename>pm-utils-ndiswrapper-1.3.0-10.1.1.i586.rpm</filename>
        </package>
        <package name="pm-utils-ndiswrapper" arch="x86_64" version="1.3.0" release="10.1.1">
          <filename>pm-utils-ndiswrapper-1.3.0-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="cccc3fa1550c195c3c7be4f7ec3714b9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3128">
  <id>kde-201009</id>
  <title>KDE 4.4 Collective Update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284020481"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626053" id="626053" title="bug number 626053" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=571546" id="571546" title="bug number 571546" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=601711" id="601711" title="bug number 601711" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619563" id="619563" title="bug number 619563" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619753" id="619753" title="bug number 619753" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620232" id="620232" title="bug number 620232" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623459" id="623459" title="bug number 623459" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627419" id="627419" title="bug number 627419" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609396" id="609396" title="bug number 609396" type="bugzilla"/>
  </references>
  <description>- #626053: Initial online update umbrella bug
  akonadi-runtime:
* Fix mysql upgrade errors on akonadi startup (bnc#571546)

kdelibs4:
* Currently Spell checker treats numbers as misspelled
  words: https://bugs.kde.org/show_bug.cgi?id=238026
* Spell checker ignores 'ignore all caps' settings:
  https://bugs.kde.org/show_bug.cgi?id=244907
* Fix resource deallocation crash in Nepomuk

kdepimlibs4:
* POP3 mails sometimes not deleted on server (bko#230072)
* KMail address autocompletion broken
  (bko#237511,bnc#627419)
* 'No resource agents found' Akonadi error on start
  (bko#236538)
* Skype doesn't work from KAddressbook (bko#240617)
* Crash on activating caldav calendar (bko#236462)
* KOrganizer crash on startup (bko#242191)
* Performance fixes on PIM search
* Move spamassassin requirement to kdepim4 (bnc#619563)
* 'No resource agents found' Akonadi error on start
  (bko#236538) 

kdebase4-runtime:
* Patch Soprano backend identification, fixes KMail address
  auto-completion (bko#231546)
* Fix reference counting bug in Nepomuk recent search cache
* Fix bug in exclude filters for file indexing
* Add runtime dependency on soprano-backend-redland,
  otherwise Nepomuk will not work (bnc#619753)
  kdebase4-runtime:
* Fix missing system tray and widget icons due to improper
  package splitting of shared default desktop theme
  elements (bnc#623459)

kdebase4-workspace:
* Dragging a wallpaper to the desktop when not in Image
  wallpaper mode sets Slideshow mode instead of Image
  (bko#245606)

kdepim4:
* Take spamassassin runtime dependency from kdepimlibs4

* KAddressBook
  ** CSV import not working (bko#242063)
  ** CSV export does not export PO Box (bko#240635)
  ** New Contact not disabled when no contacts exist
   (bko#238375)
  * KOrganizer
  ** Editing events removes prior recurrences (bko#226394)
  ** Fix KMail composer autocompletion
   (bko#237511,bnc#627419, bko#244256)
  ** Increase/Decrease indent buttons nonfunctional
   (bko#244882)
  ** Restore autosave files on restart (bko#236229)
  ** Fix message-status header parsing (bko#112724)
  ** Fix crash on mail redirect with no transports
  * Blogilo
  ** Crash on inserting image (bko#226776)
  * KAlarm
  ** Crash when updating reminder alarms (bko#244507)
* KMail
    ** Adding addresses to the address book is broken
(bnc#627419)

kdepim4-runtime
  * Fix KMail GSSAPI authentication
  * Take spamassassin runtime dependency from kdepimlibs4
</description>
  <pkglist>
    <collection>
        <package name="akonadi-runtime" arch="i586" version="1.3.1" release="6.1.1">
          <filename>akonadi-runtime-1.3.1-6.1.1.i586.rpm</filename>
        </package>
        <package name="akonadi-runtime" arch="x86_64" version="1.3.1" release="6.1.1">
          <filename>akonadi-runtime-1.3.1-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="akregator" arch="i586" version="4.4.4" release="3.1.1">
          <filename>akregator-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="akregator" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>akregator-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="blogilo" arch="i586" version="4.4.4" release="3.1.1">
          <filename>blogilo-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="blogilo" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>blogilo-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kaddressbook" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kaddressbook-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kaddressbook" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kaddressbook-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kalarm" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kalarm-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kalarm" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kalarm-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kde4-kgreeter-plugins" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kde4-kgreeter-plugins-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kde4-kgreeter-plugins" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kde4-kgreeter-plugins-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-runtime" arch="i586" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="kdebase4-runtime" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-runtime-branding-upstream" arch="i586" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-branding-upstream-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="kdebase4-runtime-branding-upstream" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-branding-upstream-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-runtime-xine" arch="i586" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-xine-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="kdebase4-runtime-xine" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-xine-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-branding-upstream" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-branding-upstream-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-branding-upstream" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-branding-upstream-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-devel" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-devel-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-devel" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-devel-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-google-gadgets" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-google-gadgets-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-google-gadgets" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-google-gadgets-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-ksysguardd" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-ksysguardd-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-ksysguardd" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-ksysguardd-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-core-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-core-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-doc-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-doc-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdepim4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdepim4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdepim4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdepim4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-runtime" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-runtime" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-runtime-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-runtime-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-wizards" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdepim4-wizards-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-wizards" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdepim4-wizards-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepimlibs4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdepimlibs4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdepimlibs4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdepimlibs4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdm" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdm-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdm" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdm-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdm-branding-upstream" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdm-branding-upstream-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdm-branding-upstream" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdm-branding-upstream-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kjots" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kjots-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kjots" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kjots-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kmail" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kmail-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kmail" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kmail-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="knode" arch="i586" version="4.4.4" release="3.1.1">
          <filename>knode-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="knode" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>knode-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="knotes" arch="i586" version="4.4.4" release="3.1.1">
          <filename>knotes-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="knotes" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>knotes-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kontact" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kontact-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kontact" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kontact-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="korganizer" arch="i586" version="4.4.4" release="3.1.1">
          <filename>korganizer-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="korganizer" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>korganizer-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="ktimetracker" arch="i586" version="4.4.4" release="3.1.1">
          <filename>ktimetracker-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="ktimetracker" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>ktimetracker-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kwin" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kwin-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kwin" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kwin-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libakonadi4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libakonadi4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libakonadi4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libakonadi4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals-devel" arch="i586" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals-devel-1.3.1-6.1.1.i586.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals-devel" arch="x86_64" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals-devel-1.3.1-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals1" arch="i586" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals1-1.3.1-6.1.1.i586.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals1" arch="x86_64" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals1-1.3.1-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkde4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkde4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkde4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-32bit" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkde4-32bit-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkde4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkde4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-32bit" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-32bit-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepim4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepim4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepim4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepim4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepimlibs4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepimlibs4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepimlibs4-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepimlibs4-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall1-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall1-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1-32bit" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall1-32bit-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="plasma-theme-oxygen" arch="i586" version="4.4.4" release="3.1.2">
          <filename>plasma-theme-oxygen-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="plasma-theme-oxygen" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>plasma-theme-oxygen-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="87bb2197e93cf80f12414658f9e48ae9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3186">
  <id>yast2-apparmor</id>
  <title>yast2-apparmor: This update fixes the function of AppArmor YaST module (control center)</title>
  <release>openSUSE 11.3</release>
  <issued date="1285118593"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635830" id="635830" title="bug number 635830" type="bugzilla"/>
  </references>
  <description>This update fixes a packaging bug in yast2-apparmor
(Immunix/Notify.pm component located outside Perl @INC
path), due to which some parts of AppArmor YaST modules,
especially its control center, were broken.
</description>
  <pkglist>
    <collection>
        <package name="yast2-apparmor" arch="noarch" version="2.19.1" release="0.1.1">
          <filename>yast2-apparmor-2.19.1-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="756a6a434c2a02e4a020c6807df86da1"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3185">
  <id>iotop</id>
  <title>iotop: It shows too high values. Fixed by this update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285117074"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617281" id="617281" title="bug number 617281" type="bugzilla"/>
  </references>
  <description>Because of changed alignment in the data iotop used T/s and
P/s instead of K/s or M/s on x86-64 systems. This update
fixes iotop and take the coorect field size from the data
header and then displays the correct values.
</description>
  <pkglist>
    <collection>
        <package name="iotop" arch="i586" version="0.2.1" release="38.1.1">
          <filename>iotop-0.2.1-38.1.1.i586.rpm</filename>
        </package>
        <package name="iotop" arch="x86_64" version="0.2.1" release="38.1.1">
          <filename>iotop-0.2.1-38.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e407d6748749e6e6024e5bb37c13be0e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3183">
  <id>bzip2</id>
  <title>bzip2 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285112657"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636978" id="636978" title="bug number 636978" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405" id="CVE-2010-0405" title="CVE-2010-0405" type="cve"/>
  </references>
  <description>This update fixes an integer overflow in the BZ2_decompress
function of bzip2/libbz2. This can be exploited via a
crafted archive to cause a denial of service or even
execute arbitrary code. (CVE-2010-0405)
</description>
  <pkglist>
    <collection>
        <package name="bzip2" arch="i586" version="1.0.5" release="39.1.1">
          <filename>bzip2-1.0.5-39.1.1.i586.rpm</filename>
        </package>
        <package name="bzip2" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>bzip2-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
        <package name="bzip2-doc" arch="noarch" version="1.0.5" release="39.1.1">
          <filename>bzip2-doc-1.0.5-39.1.1.noarch.rpm</filename>
        </package>
        <package name="libbz2-1" arch="i586" version="1.0.5" release="39.1.1">
          <filename>libbz2-1-1.0.5-39.1.1.i586.rpm</filename>
        </package>
        <package name="libbz2-1" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>libbz2-1-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
        <package name="libbz2-1-32bit" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>libbz2-1-32bit-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
        <package name="libbz2-devel" arch="i586" version="1.0.5" release="39.1.1">
          <filename>libbz2-devel-1.0.5-39.1.1.i586.rpm</filename>
        </package>
        <package name="libbz2-devel" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>libbz2-devel-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8d06266e05317178f56e01e86d56acc2"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3228">
  <id>libiw-devel</id>
  <title>wireless-tools: Fix crash in iwevent</title>
  <release>openSUSE 11.3</release>
  <issued date="1285885827"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639111" id="639111" title="bug number 639111" type="bugzilla"/>
  </references>
  <description>Avoid overflow and increase the buffer to dump hex in
iwevent(1) (bnc#639111).
</description>
  <pkglist>
    <collection>
        <package name="libiw-devel" arch="i586" version="30.pre8" release="12.1.1">
          <filename>libiw-devel-30.pre8-12.1.1.i586.rpm</filename>
        </package>
        <package name="libiw-devel" arch="x86_64" version="30.pre8" release="12.1.1">
          <filename>libiw-devel-30.pre8-12.1.1.x86_64.rpm</filename>
        </package>
        <package name="libiw30" arch="i586" version="30.pre8" release="12.1.1">
          <filename>libiw30-30.pre8-12.1.1.i586.rpm</filename>
        </package>
        <package name="libiw30" arch="x86_64" version="30.pre8" release="12.1.1">
          <filename>libiw30-30.pre8-12.1.1.x86_64.rpm</filename>
        </package>
        <package name="wireless-tools" arch="i586" version="30.pre8" release="12.1.1">
          <filename>wireless-tools-30.pre8-12.1.1.i586.rpm</filename>
        </package>
        <package name="wireless-tools" arch="x86_64" version="30.pre8" release="12.1.1">
          <filename>wireless-tools-30.pre8-12.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ff7a03a098dc213be2a45f665b5ebc41"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3127">
  <id>xorg-x11-driver-input</id>
  <title>xorg-x11-driver-input: Update for clickpad and synaptics touchpad devices</title>
  <release>openSUSE 11.3</release>
  <issued date="1284592721"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620000" id="620000" title="bug number 620000" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620328" id="620328" title="bug number 620328" type="bugzilla"/>
  </references>
  <description>Lots of fixes for synaptics touchpad device, especially for
clickpad device:
- Fix / improve the behavior in clickpad button area
- Fix left/right-button capability check
- Fix 64bit compatibility
- Avoid unexpected jumps by multiple finger touches
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11-driver-input" arch="i586" version="7.5" release="9.1.1">
          <filename>xorg-x11-driver-input-7.5-9.1.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-driver-input" arch="x86_64" version="7.5" release="9.1.1">
          <filename>xorg-x11-driver-input-7.5-9.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="37b439436163e073e7df1927e0984c78"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3080">
  <id>gwenview</id>
  <title>okular security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283423842"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634743" id="634743" title="bug number 634743" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2575" id="CVE-2010-2575" title="CVE-2010-2575" type="cve"/>
  </references>
  <description>This update fixes a heap-based overflow in okular. The RLE
decompression in the TranscribePalmImageToJPEG() function
can be exploited to execute arbitrary code with user
privileges by providing a crafted PDF file. (CVE-2010-2575).
</description>
  <pkglist>
    <collection>
        <package name="gwenview" arch="i586" version="4.4.4" release="2.1.1">
          <filename>gwenview-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="gwenview" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>gwenview-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kcolorchooser" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kcolorchooser-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kcolorchooser" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kcolorchooser-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdegraphics4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdegraphics4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdegraphics4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdegraphics4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kgamma" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kgamma-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kgamma" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kgamma-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kio_kamera" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kio_kamera-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kio_kamera" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kio_kamera-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kolourpaint" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kolourpaint-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kolourpaint" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kolourpaint-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kruler" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kruler-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kruler" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kruler-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="ksnapshot" arch="i586" version="4.4.4" release="2.1.1">
          <filename>ksnapshot-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="ksnapshot" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>ksnapshot-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdcraw-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdcraw-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdcraw-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdcraw-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdcraw8" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdcraw8-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdcraw8" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdcraw8-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkexiv2-8" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-8-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkexiv2-8" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-8-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkexiv2-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkexiv2-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkipi-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkipi-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkipi-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkipi-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkipi7" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkipi7-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkipi7" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkipi7-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksane-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libksane-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libksane-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libksane-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksane0" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libksane0-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libksane0" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libksane0-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="okular" arch="i586" version="4.4.4" release="2.1.1">
          <filename>okular-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="okular" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>okular-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="okular-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>okular-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="okular-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>okular-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a6a9a0427a14a0620493b55da308559d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3201">
  <id>kst</id>
  <title>kst: Update to final 2.0.0</title>
  <release>openSUSE 11.3</release>
  <issued date="1285336513"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=548228" id="548228" title="bug number 548228" type="bugzilla"/>
  </references>
  <description>This updates to the final 2.0.0 release with various fixes
and packaging improvements.
</description>
  <pkglist>
    <collection>
        <package name="kst" arch="i586" version="2.0.0.0" release="0.1.1">
          <filename>kst-2.0.0.0-0.1.1.i586.rpm</filename>
        </package>
        <package name="kst" arch="x86_64" version="2.0.0.0" release="0.1.1">
          <filename>kst-2.0.0.0-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="kst-devel" arch="i586" version="2.0.0.0" release="0.1.1">
          <filename>kst-devel-2.0.0.0-0.1.1.i586.rpm</filename>
        </package>
        <package name="kst-devel" arch="x86_64" version="2.0.0.0" release="0.1.1">
          <filename>kst-devel-2.0.0.0-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="44c9da2412f96e7ae2f12866fdab2c2e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3236">
  <id>opensuse-gnomequick_de-pdf</id>
  <title>opensuse-manuals_de: Update of the German Translation of the openSUSE Documentation</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807370"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639823" id="639823" title="bug number 639823" type="bugzilla"/>
  </references>
  <description>This is the final update of the German translation of the
openSUSE documentation.
</description>
  <pkglist>
    <collection>
        <package name="opensuse-gnomequick_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-gnomequick_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-installquick_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-installquick_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdequick_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-kdequick_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_de" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-manuals_de-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-reference_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-reference_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-startup_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-startup_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="016e127353bdbae52f15f6a3f66fbf9a"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2969">
  <id>yast2-ncurses-pkg</id>
  <title>yast2-ncurses-pkg: This update fixes a problem with showing patterns and sorting of the them.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282264933"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624996" id="624996" title="bug number 624996" type="bugzilla"/>
  </references>
  <description>General problem with showing patterns:

Patterns may be available or not. There was a problem with
sorting the categories. The category containing the pattern
with the highest priority should be the first in the list.
The bug in the ncurses package selector: if there was more
than one category with the same order (priority) only one
was stored in an internal set, so sometimes SLMS patterns
were shown, sometimes not.
</description>
  <pkglist>
    <collection>
        <package name="yast2-ncurses-pkg" arch="i586" version="2.19.4" release="1.1.1">
          <filename>yast2-ncurses-pkg-2.19.4-1.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-ncurses-pkg" arch="x86_64" version="2.19.4" release="1.1.1">
          <filename>yast2-ncurses-pkg-2.19.4-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="eed8891c855fdc5625db820413b29d27"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3275">
  <id>acroread</id>
  <title>acroread security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286478701"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638466" id="638466" title="bug number 638466" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2883" id="CVE-2010-2883" title="CVE-2010-2883" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2884" id="CVE-2010-2884" title="CVE-2010-2884" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2887" id="CVE-2010-2887" title="CVE-2010-2887" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2889" id="CVE-2010-2889" title="CVE-2010-2889" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2890" id="CVE-2010-2890" title="CVE-2010-2890" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3619" id="CVE-2010-3619" title="CVE-2010-3619" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3620" id="CVE-2010-3620" title="CVE-2010-3620" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3621" id="CVE-2010-3621" title="CVE-2010-3621" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3622" id="CVE-2010-3622" title="CVE-2010-3622" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3623" id="CVE-2010-3623" title="CVE-2010-3623" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3624" id="CVE-2010-3624" title="CVE-2010-3624" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3625" id="CVE-2010-3625" title="CVE-2010-3625" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3626" id="CVE-2010-3626" title="CVE-2010-3626" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3627" id="CVE-2010-3627" title="CVE-2010-3627" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3628" id="CVE-2010-3628" title="CVE-2010-3628" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3629" id="CVE-2010-3629" title="CVE-2010-3629" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3630" id="CVE-2010-3630" title="CVE-2010-3630" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3631" id="CVE-2010-3631" title="CVE-2010-3631" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3632" id="CVE-2010-3632" title="CVE-2010-3632" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3656" id="CVE-2010-3656" title="CVE-2010-3656" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3657" id="CVE-2010-3657" title="CVE-2010-3657" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3658" id="CVE-2010-3658" title="CVE-2010-3658" type="cve"/>
  </references>
  <description>Specially crafted PDF documents could crash acroread or
lead to execution of arbitrary code (CVE-2010-2883,
CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890,
CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622,
CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,
CVE-2010-3627, CVE-2010-3628, CVE-2010-3629, CVE-2010-3630,
CVE-2010-3631, CVE-2010-3632, CVE-2010-3656, CVE-2010-3657,
CVE-2010-3658).
</description>
  <pkglist>
    <collection>
        <package name="acroread" arch="i586" version="9.4" release="0.1.1">
          <filename>acroread-9.4-0.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="11bf9c3698a4f32debc3b53a02f5aa11"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3219">
  <id>opensuse-apparmor-quick_en-pdf</id>
  <title>opensuse-manuals_en: General openSUSE documentation update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807387"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639823" id="639823" title="bug number 639823" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626368" id="626368" title="bug number 626368" type="bugzilla"/>
  </references>
  <description>This is the next general openSUSE Documentation Update.
Especially,  the Security Guide is now up-to-date.
</description>
  <pkglist>
    <collection>
        <package name="opensuse-apparmor-quick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-apparmor-quick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-apps_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-apps_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-gnomequick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-gnomequick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-gnomeuser_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-gnomeuser_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-installquick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-installquick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdequick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-kdequick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdeuser_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-kdeuser_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_en" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-manuals_en-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-reference_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-reference_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-security_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-security_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-startup_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-startup_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="933b6bd9dda9e3282b8213e42081c079"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3259">
  <id>krb5</id>
  <title>krb5 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286399237"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640990" id="640990" title="bug number 640990" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1322" id="CVE-2010-1322" title="CVE-2010-1322" type="cve"/>
  </references>
  <description>remote authenticated clients could crash the kdc
(CVE-2010-1322).
</description>
  <pkglist>
    <collection>
        <package name="krb5" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-32bit" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-32bit-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-client" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-client-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-client" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-client-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-devel-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-devel" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-devel-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel-32bit" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-devel-32bit-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-server-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-server" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-server-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0de7529b85fd8845fdf2eaa8174dec19"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3218">
  <id>perl-Bootloader</id>
  <title>perl-Bootloader:  The update fixes an enumeration bug in perl-Bootloader</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807365"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626132" id="626132" title="bug number 626132" type="bugzilla"/>
  </references>
  <description>This bugs is fixed by using udev devices for device mapper
now.
</description>
  <pkglist>
    <collection>
        <package name="perl-Bootloader" arch="i586" version="0.5.12.1" release="0.1.1">
          <filename>perl-Bootloader-0.5.12.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="perl-Bootloader" arch="x86_64" version="0.5.12.1" release="0.1.1">
          <filename>perl-Bootloader-0.5.12.1-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f98c93fe4e79db95b2ee1e49ee37f12"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3226">
  <id>lilo</id>
  <title>lilo: Fix device-mapper support</title>
  <release>openSUSE 11.3</release>
  <issued date="1285886940"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642400" id="642400" title="bug number 642400" type="bugzilla"/>
  </references>
  <description>This update adds device-mapper support to lilo (bnc#642400).
</description>
  <pkglist>
    <collection>
        <package name="lilo" arch="i586" version="22.8" release="48.1.1">
          <filename>lilo-22.8-48.1.1.i586.rpm</filename>
        </package>
        <package name="lilo" arch="x86_64" version="22.8" release="48.1.1">
          <filename>lilo-22.8-48.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3561711407b55f4ba346ebb9cb14b576"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3154">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Security update to 3.0.7</title>
  <release>openSUSE 11.3</release>
  <issued date="1284652660"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird 3.0 was updated to version 3.0.7,
fixing various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-devel-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-devel-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-common-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-common-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-other-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-other-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="3.3.1">
          <filename>enigmail-1.0.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="3.3.1">
          <filename>enigmail-1.0.1-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="304674e113be0505ef0fdcd161330c41"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3141">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Security update to 1.9.1.13</title>
  <release>openSUSE 11.3</release>
  <issued date="1284724806"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla XULRunner 1.9.1 was updated to version 1.9.1.13,
fixing various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for  completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>python-xpcom191-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>python-xpcom191-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f2b42f07586830be7780c7ed2578c98"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3299">
  <id>kvm</id>
  <title>kvm: Collective update for kvm</title>
  <release>openSUSE 11.3</release>
  <issued date="1286803971"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603179" id="603179" title="bug number 603179" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=598298" id="598298" title="bug number 598298" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621793" id="621793" title="bug number 621793" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619991" id="619991" title="bug number 619991" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603161" id="603161" title="bug number 603161" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610682" id="610682" title="bug number 610682" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599095" id="599095" title="bug number 599095" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=598271" id="598271" title="bug number 598271" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637297" id="637297" title="bug number 637297" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640093" id="640093" title="bug number 640093" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- Bug 603179-  Same MAC used to often by KVM
- Bug 598298 - restoring a KVM guest using Realtek 8139
  results broken guest networking
- Bug 621793 - sles11-sp1-jeos xen image failed to boot in
  testdrive
- Bug 619991 - libvirt doesn't accept &quot;cache=writeback&quot;
  anymore
- Bug 603161 - 11.3 / FACTORY ISOs don't boot in FACTORY's
  kvm
- Bug 610682 - KVM doesn't boot multiboot images
- Bug 599095 - SLE11SP1 kvm version slows down building
  dramatically (flushing)
- Bug 598271 - kvm not build with libaio/linux-aio support
  due to missing BuildReq
- Bug 637297 - Revert Changed WB behavior 
- Bug 640093 - Change default memory from 384MB to 512MB,
  which is in keeping with the default used by vm-install.
</description>
  <pkglist>
    <collection>
        <package name="kvm" arch="i586" version="0.12.5" release="1.2.1">
          <filename>kvm-0.12.5-1.2.1.i586.rpm</filename>
        </package>
        <package name="kvm" arch="x86_64" version="0.12.5" release="1.2.1">
          <filename>kvm-0.12.5-1.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a34fee3651b37f0fe3076adafe6eed1f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2976">
  <id>libHX22</id>
  <title>libHX: buffer overflow in HX_split()</title>
  <release>openSUSE 11.3</release>
  <issued date="1282565395"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631582" id="631582" title="bug number 631582" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2947" id="CVE-2010-2947" title="CVE-2010-2947" type="cve"/>
  </references>
  <description>This update fixes a heap-based buffer overflow in
HX_split() of libHX. (CVE-2010-2947)
</description>
  <pkglist>
    <collection>
        <package name="libHX22" arch="i586" version="3.4" release="2.1.1">
          <filename>libHX22-3.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libHX22" arch="x86_64" version="3.4" release="2.1.1">
          <filename>libHX22-3.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libHX22-32bit" arch="x86_64" version="3.4" release="2.1.1">
          <filename>libHX22-32bit-3.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="35cdbe0ae41b2eede7a95bdce718ab94"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3322">
  <id>freetype2</id>
  <title>freetype2 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286990517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633938" id="633938" title="bug number 633938" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633943" id="633943" title="bug number 633943" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641580" id="641580" title="bug number 641580" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3311" id="CVE-2010-3311" title="CVE-2010-3311" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3053" id="CVE-2010-3053" title="CVE-2010-3053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3054" id="CVE-2010-3054" title="CVE-2010-3054" type="cve"/>
  </references>
  <description>When loading specially crafted font files applications
linked against freetype2 could crash or potentially even
execute arbitrary code (CVE-2010-3311, CVE-2010-3053,
CVE-2010-3054).
</description>
  <pkglist>
    <collection>
        <package name="freetype2-devel" arch="i586" version="2.3.12" release="7.2.1">
          <filename>freetype2-devel-2.3.12-7.2.1.i586.rpm</filename>
        </package>
        <package name="freetype2-devel" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>freetype2-devel-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
        <package name="freetype2-devel-32bit" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>freetype2-devel-32bit-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" arch="i586" version="2.3.12" release="7.2.1">
          <filename>libfreetype6-2.3.12-7.2.1.i586.rpm</filename>
        </package>
        <package name="libfreetype6" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>libfreetype6-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-32bit" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>libfreetype6-32bit-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a8ee0d4865546d7ed0f2ac2582580694"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3081">
  <id>OpenOffice_org-draw</id>
  <title>OpenOffice_org security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283762238"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629085" id="629085" title="bug number 629085" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2935" id="CVE-2010-2935" title="CVE-2010-2935" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2936" id="CVE-2010-2936" title="CVE-2010-2936" type="cve"/>
  </references>
  <description>Specially crafted ppt files could cause a heap based buffer
overflow in OpenOffice_org Impress. Attackers could exploit
that to crash OpenOffice_org or potentially even execute
arbitrary code (CVE-2010-2935, CVE-2010-2936).
</description>
  <pkglist>
    <collection>
        <package name="OpenOffice_org-draw" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-draw-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-draw" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-draw-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-devel" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-devel-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-devel" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-devel-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-l10n-prebuilt" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-l10n-prebuilt-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-l10n-prebuilt" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-l10n-prebuilt-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-devel" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-devel-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-devel" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-devel-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-l10n-prebuilt" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-l10n-prebuilt-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-l10n-prebuilt" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-l10n-prebuilt-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f3c1e132352912583f94eb60c2703be5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3328">
  <id>squid3</id>
  <title>squid: remote crash by trusted client</title>
  <release>openSUSE 11.3</release>
  <issued date="1287079765"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637287" id="637287" title="bug number 637287" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3072" id="CVE-2010-3072" title="CVE-2010-3072" type="cve"/>
  </references>
  <description>A remote trusted client can cause a NULL pointer
dereference within squid to make it crash. (CVE-2010-3072:
CVSS v2 Base Score: 5.0)
</description>
  <pkglist>
    <collection>
        <package name="squid3" arch="i586" version="3.0.STABLE25" release="2.1.1">
          <filename>squid3-3.0.STABLE25-2.1.1.i586.rpm</filename>
        </package>
        <package name="squid3" arch="x86_64" version="3.0.STABLE25" release="2.1.1">
          <filename>squid3-3.0.STABLE25-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4e5c455484d450163ae99bb1a926a403"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3324">
  <id>opera</id>
  <title>opera: Opera 10.63 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1287074236"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646108" id="646108" title="bug number 646108" type="bugzilla"/>
  </references>
  <description>Opera 10.63 fixes some security issues as described in
their changelog:
http://www.opera.com/docs/changelogs/unix/1063/
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.63" release="1.1.1">
          <filename>opera-10.63-1.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.63" release="1.1.1">
          <filename>opera-10.63-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="opera-gtk" arch="i586" version="10.63" release="1.1.1">
          <filename>opera-gtk-10.63-1.1.1.i586.rpm</filename>
        </package>
        <package name="opera-gtk" arch="x86_64" version="10.63" release="1.1.1">
          <filename>opera-gtk-10.63-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="opera-kde4" arch="i586" version="10.63" release="1.1.1">
          <filename>opera-kde4-10.63-1.1.1.i586.rpm</filename>
        </package>
        <package name="opera-kde4" arch="x86_64" version="10.63" release="1.1.1">
          <filename>opera-kde4-10.63-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d0a7d8f91194d49d17006fb488ba2923"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3315">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1286531094"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613835" id="613835" title="bug number 613835" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=614670" id="614670" title="bug number 614670" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638709" id="638709" title="bug number 638709" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640338" id="640338" title="bug number 640338" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640568" id="640568" title="bug number 640568" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640721" id="640721" title="bug number 640721" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641479" id="641479" title="bug number 641479" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642009" id="642009" title="bug number 642009" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=644046" id="644046" title="bug number 644046" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3310" id="CVE-2010-3310" title="CVE-2010-3310" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2962" id="CVE-2010-2962" title="CVE-2010-2962" type="cve"/>
  </references>
  <description>This updated openSUSE 11.3 kernel fixes the following
security bugs:

CVE-2010-3310: local users could corrupt kernel heap memory
via ROSE sockets.

CVE-2010-2962: local users could write to any kernel memory
location via the i915 GEM ioctl interface.

Additionally the update restores the
compat_alloc_userspace() inline function and includes
several other bug fixes.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.4.1">
          <filename>kernel-devel-2.6.34.7-0.4.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-pae-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-pae-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-pae-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.4.1">
          <filename>kernel-source-2.6.34.7-0.4.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.4.1">
          <filename>kernel-source-vanilla-2.6.34.7-0.4.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-syms-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-syms-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vmi-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vmi-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vmi-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.4-19.1.7.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.4-19.1.7.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.4-19.1.7.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.4-19.1.7.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
</updates>
