<?xml version="1.0" encoding="UTF-8"?>
<updates>
<!--PATCHINFO id="42b3db326472414935574b1ad1aef580"!-->
<update status="stable" from="maint-coord@suse.de" type="optional" version="2713">
  <id>flash-player</id>
  <title>flash-player: openSUSE maintained Flash Player 10.1</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088737"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>This patch adds an openSUSE maintained Adobe Flash Player
to openSUSE 11.3.
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.53.64" release="2.1.1">
          <filename>flash-player-10.1.53.64-2.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="55bf85f01cfa819337a5ac07ceb6416e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2681">
  <id>opera</id>
  <title>opera: cross-origin loading of CSS stylesheets</title>
  <release>openSUSE 11.3</release>
  <issued date="1278633364"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=583620" id="583620" title="bug number 583620" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607823" id="607823" title="bug number 607823" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615942" id="615942" title="bug number 615942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0653" id="CVE-2010-0653" title="CVE-2010-0653" type="cve"/>
  </references>
  <description>Opera was upgraded to the 10.60 release.

It brings lots of new features, bugfixes and security fixes.

Security fixes include: CVE-2010-0653: Opera permits
cross-origin loading of CSS style sheets even when the
style sheet download has an incorrect MIME type and the
style sheet document is malformed, which allows remote HTTP
servers to obtain sensitive information via a crafted
document.

CVE-2010-1993: Opera 9.52 does not properly handle an
IFRAME element with a mailto: URL in its SRC attribute,
which allows remote attackers to cause a denial of service
(resource consumption) via an HTML document with many
IFRAME elements.
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1c21e9336034276032f4738a37f59d08"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2714">
  <id>smolt</id>
  <title>smolt: Trigger smolt run</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088729"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will trigger the updater applets to
ask about submitting the hardware information to smolts.org.
</description>
  <pkglist>
    <collection>
        <package name="smolt" arch="noarch" version="1.4.2.2" release="3.1.1">
          <filename>smolt-1.4.2.2-3.1.1.noarch.rpm</filename>
        </package>
        <package name="smolt-gui" arch="noarch" version="1.4.2.2" release="3.1.1">
          <filename>smolt-gui-1.4.2.2-3.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a91861676db2b77f62c568e7fcf12805"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3193">
  <id>virtualbox-ose-guest-tools</id>
  <title>virtualbox-ose-guest-tools: Fix 'mount -t vboxsf' failure</title>
  <release>openSUSE 11.3</release>
  <issued date="1285194619"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636347" id="636347" title="bug number 636347" type="bugzilla"/>
  </references>
  <description>This update fixes 'mount -t vboxsf' failing, because the
mount.vboxsf mount helper is installed in /usr/sbin, but
mount(8) expects it to be in /sbin.
</description>
  <pkglist>
    <collection>
        <package name="virtualbox-ose-guest-tools" arch="i586" version="3.2.6" release="2.1.1">
          <filename>virtualbox-ose-guest-tools-3.2.6-2.1.1.i586.rpm</filename>
        </package>
        <package name="virtualbox-ose-guest-tools" arch="x86_64" version="3.2.6" release="2.1.1">
          <filename>virtualbox-ose-guest-tools-3.2.6-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4981f7ab9d6828615efbdfd7087f67f3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2715">
  <id>pullin-flash-player</id>
  <title>pullin-flash-player: Trigger installation of openSUSE flash player</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088806"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will pull in the openSUSE Maintained
Adobe Flash Player plugin.
</description>
  <pkglist>
    <collection>
        <package name="pullin-flash-player" arch="i586" version="11.3.1" release="2.1.1">
          <filename>pullin-flash-player-11.3.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="pullin-flash-player" arch="x86_64" version="11.3.1" release="2.1.1">
          <filename>pullin-flash-player-11.3.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b67863636c9875e1e4996d5ec06d9d66"!-->
<update status="stable" from="maint-coord@suse.de" type="optional" version="2712">
  <id>pullin-msttf-fonts</id>
  <title>Download and Install Microsoft(r) TrueType Core Fonts</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088536"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will download install the Core
TrueType fonts to your system.

For legal reasons we can't include the Microsoft(R)
TrueType Core Fonts in our product. This patch downloads
these fonts and installs them on your system. Please note
that about 4 MByte data are downloaded additionality to
this patch.

The License for the fonts will be installed as
/usr/share/doc/corefonts/EULA.html
</description>
  <pkglist>
    <collection>
        <package name="fetchmsttfonts" arch="noarch" version="11.3" release="1.1.5">
          <filename>fetchmsttfonts-11.3-1.1.5.noarch.rpm</filename>
        </package>
        <package name="pullin-msttf-fonts" arch="noarch" version="11.3.1" release="1.3.1">
          <filename>pullin-msttf-fonts-11.3.1-1.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b8d97752d94c9efd7f2ab6f6b3e9acb3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2728">
  <id>python-mako</id>
  <title>python-mako security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279188036"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619134" id="619134" title="bug number 619134" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2480" id="CVE-2010-2480" title="CVE-2010-2480" type="cve"/>
  </references>
  <description>Python-mako was prone to a Cross-Site Scripting flaw due to
improperly escaped single quotes (CVE-2010-2480).
</description>
  <pkglist>
    <collection>
        <package name="python-mako" arch="noarch" version="0.2.5" release="4.2.1">
          <filename>python-mako-0.2.5-4.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="784acf5959d8a40e9401844d4480d29e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2776">
  <id>lxsession</id>
  <title>lxsession security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279720438"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622083" id="622083" title="bug number 622083" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623192" id="623192" title="bug number 623192" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2532" id="CVE-2010-2532" title="CVE-2010-2532" type="cve"/>
  </references>
  <description>lxsession-logout did not properly lock the screen before
suspending, hibernating and switching between users which
could allow attackers with physical access to take control
of the system to obtain sensitive information and / or
execute arbitrary code in the context of the user who is
currently logged in  (CVE-2010-2532).
</description>
  <pkglist>
    <collection>
        <package name="lxsession" arch="i586" version="0.4.4" release="3.1.1">
          <filename>lxsession-0.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="lxsession" arch="x86_64" version="0.4.4" release="3.1.1">
          <filename>lxsession-0.4.4-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5d5248496e8a8829d8dd091dd0f40f14"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2744">
  <id>glibc</id>
  <title>glibc: initgroups leaves out NIS groups on the second invocation</title>
  <release>openSUSE 11.3</release>
  <issued date="1279532355"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623098" id="623098" title="bug number 623098" type="bugzilla"/>
  </references>
  <description>This update fixes a bug in glibc:
- bnc#607064: glibc initgroups leaves out NIS groups on the
  second invocation
</description>
  <pkglist>
    <collection>
        <package name="glibc" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc" arch="i686" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.i686.rpm</filename>
        </package>
        <package name="glibc" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i686" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.i686.rpm</filename>
        </package>
        <package name="glibc-devel" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-html" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-html-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-html" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-html-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-i18ndata-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-i18ndata-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-info" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-info-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-info" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-info-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-locale" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-obsolete-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-obsolete-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-profile" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="nscd" arch="i586" version="2.11.2" release="3.1.1">
          <filename>nscd-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="nscd" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>nscd-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="eba475581ca341d0282204f646886f90"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2729">
  <id>vte</id>
  <title>vte security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279261736"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621097" id="621097" title="bug number 621097" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2713" id="CVE-2010-2713" title="CVE-2010-2713" type="cve"/>
  </references>
  <description>VTE was vulnerable to an old title set+query attack which
could be used by remote attackers to execute arbitrary code
(CVE-2010-2713).
</description>
  <pkglist>
    <collection>
        <package name="vte" arch="i586" version="0.24.1" release="2.1.1">
          <filename>vte-0.24.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="vte" arch="x86_64" version="0.24.1" release="2.1.1">
          <filename>vte-0.24.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="vte-devel" arch="i586" version="0.24.1" release="2.1.1">
          <filename>vte-devel-0.24.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="vte-devel" arch="x86_64" version="0.24.1" release="2.1.1">
          <filename>vte-devel-0.24.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="vte-lang" arch="noarch" version="0.24.1" release="2.1.1">
          <filename>vte-lang-0.24.1-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="84e5a7eac307f669bfc6cffdcd7d8744"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2748">
  <id>spideroak-9681</id>
  <title>spideroak: Update to version 9681</title>
  <release>openSUSE 11.3</release>
  <issued date="1278337505"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621581" id="621581" title="bug number 621581" type="bugzilla"/>
  </references>
  <description>This updates SpiderOak to the latest official version, 9681
(bnc#621581). 


SpiderOak provides an easy, secure and consolidated free
online backup, sync, sharing, access &amp; storage solution.
</description>
  <pkglist>
    <collection>
        <package name="python-asn1" arch="noarch" version="0.0.11" release="1.2">
          <filename>python-asn1-0.0.11-1.2.noarch.rpm</filename>
        </package>
        <package name="python-bsddb3" arch="i586" version="5.0.0" release="1.1">
          <filename>python-bsddb3-5.0.0-1.1.i586.rpm</filename>
        </package>
        <package name="python-bsddb3" arch="x86_64" version="5.0.0" release="1.1">
          <filename>python-bsddb3-5.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="python-cerealizer" arch="noarch" version="0.7" release="1.2">
          <filename>python-cerealizer-0.7-1.2.noarch.rpm</filename>
        </package>
        <package name="python-concurrentloghandler" arch="noarch" version="0.8.4" release="1.2">
          <filename>python-concurrentloghandler-0.8.4-1.2.noarch.rpm</filename>
        </package>
        <package name="python-crypto" arch="i586" version="2.1.0" release="1.9">
          <filename>python-crypto-2.1.0-1.9.i586.rpm</filename>
        </package>
        <package name="python-crypto" arch="x86_64" version="2.1.0" release="1.9">
          <filename>python-crypto-2.1.0-1.9.x86_64.rpm</filename>
        </package>
        <package name="python-curl" arch="i586" version="7.19.0" release="3.2">
          <filename>python-curl-7.19.0-3.2.i586.rpm</filename>
        </package>
        <package name="python-curl" arch="x86_64" version="7.19.0" release="3.2">
          <filename>python-curl-7.19.0-3.2.x86_64.rpm</filename>
        </package>
        <package name="python-louie" arch="i586" version="1.1" release="1.2">
          <filename>python-louie-1.1-1.2.i586.rpm</filename>
        </package>
        <package name="python-louie" arch="x86_64" version="1.1" release="1.2">
          <filename>python-louie-1.1-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-nose" arch="i586" version="0.11.1" release="1.2">
          <filename>python-nose-0.11.1-1.2.i586.rpm</filename>
        </package>
        <package name="python-nose" arch="x86_64" version="0.11.1" release="1.2">
          <filename>python-nose-0.11.1-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-transaction" arch="i586" version="1.0a1" release="2.1.1">
          <filename>python-transaction-1.0a1-2.1.1.i586.rpm</filename>
        </package>
        <package name="python-transaction" arch="x86_64" version="1.0a1" release="2.1.1">
          <filename>python-transaction-1.0a1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-zc-lockfile" arch="noarch" version="1.0.0" release="2.1">
          <filename>python-zc-lockfile-1.0.0-2.1.noarch.rpm</filename>
        </package>
        <package name="python-zconfig" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zconfig-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zconfig" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zconfig-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-zdaemon" arch="noarch" version="2.0.4" release="1.2">
          <filename>python-zdaemon-2.0.4-1.2.noarch.rpm</filename>
        </package>
        <package name="python-zodb3" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zodb3-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zodb3" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zodb3-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-zope-event" arch="i586" version="3.5.0" release="2.2">
          <filename>python-zope-event-3.5.0-2.2.i586.rpm</filename>
        </package>
        <package name="python-zope-event" arch="x86_64" version="3.5.0" release="2.2">
          <filename>python-zope-event-3.5.0-2.2.x86_64.rpm</filename>
        </package>
        <package name="python-zope-proxy" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zope-proxy-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zope-proxy" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zope-proxy-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="spideroak" arch="i586" version="9681" release="0.1.1">
          <filename>spideroak-9681-0.1.1.i586.rpm</filename>
        </package>
        <package name="spideroak" arch="x86_64" version="9681" release="0.1.1">
          <filename>spideroak-9681-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8daa9a03826aef95669a5b369077f153"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2750">
  <id>exim</id>
  <title>exim: fixes two local issues;CVE-2010-2023 and CVE-2010-2024</title>
  <release>openSUSE 11.3</release>
  <issued date="1279617517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612549" id="612549" title="bug number 612549" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2023" id="CVE-2010-2023" title="CVE-2010-2023" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2024" id="CVE-2010-2024" title="CVE-2010-2024" type="cve"/>
  </references>
  <description>Two local vulnerabilities have been fixed in the exim MTA
which allowed attackers to create arbitrary files or to
change ownership of arbitrary files. CVE-2010-2023 and
CVE-2010-2024 have been assigned to these issues.
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.1.1">
          <filename>exim-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.1.1">
          <filename>exim-4.71-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.1.1">
          <filename>eximon-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.1.1">
          <filename>eximon-4.71-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.1.1">
          <filename>eximstats-html-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.1.1">
          <filename>eximstats-html-4.71-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3cfa64ebd32e46b75f3e7ef4499fb62"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2720">
  <id>libtiff-devel</id>
  <title>libtiff security updates</title>
  <release>openSUSE 11.3</release>
  <issued date="1279176442"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612879" id="612879" title="bug number 612879" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067" id="CVE-2010-2067" title="CVE-2010-2067" type="cve"/>
  </references>
  <description>specially crafted tiff images could cause a buffer overflow
in libtiff (CVE-2010-2067).
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-32bit-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.1.1">
          <filename>libtiff3-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff3-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff3-32bit-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.1.1">
          <filename>tiff-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>tiff-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="94fc6c315469432a43f8779997029d74"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2754">
  <id>seamonkey</id>
  <title>seamonkey: Update to 2.0.6 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279721691"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Seamonkey to the 2.0.6 security
release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References


MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-dom-inspector-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-dom-inspector-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-irc-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-irc-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-common-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-common-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-other-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-other-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-venkman-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-venkman-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0a27214568585051fe4391074990ff56"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2737">
  <id>postfix</id>
  <title>postfix: Chrooted mysql.sock lost on mysql restart. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527675"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606251" id="606251" title="bug number 606251" type="bugzilla"/>
  </references>
  <description>This updates fixes several problems with postfix:
- using my_print_defaults command for parsing of /etc/my.cnf
- using quotation marks: &quot;$PF_CHROOT&quot;
- adding sysconfig option POSTFIX_MYSQL_CONN=(socket,tcp)
- MYSQL_SOCK_DIR is mounted with '-o bind' to postfix
  CHROOT now
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-devel-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-devel-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.1.1">
          <filename>postfix-doc-2.7.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-mysql-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-mysql-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-postgresql-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-postgresql-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f2a3614d8d7e94514b5b854f4d8bb359"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2745">
  <id>yast2-gtk</id>
  <title>yast2-gtk: updated to version 2.21.68 fixing bnc#609778 and bnc#620513</title>
  <release>openSUSE 11.3</release>
  <issued date="1279530498"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609778" id="609778" title="bug number 609778" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620513" id="620513" title="bug number 620513" type="bugzilla"/>
  </references>
  <description>yast2-gtk was updated to fix the following bugs bnc#609778
- yast software management (qt,gtk,ncurses): configuration
&gt; online from menubar does not work as expected.  Partly
fixed by this update for the gtk interface by omitting
online-update configuration menu item when not running
online-update. bnc#620513 - sw_single (gtk): freeze when
opening the Dependencies box.  Fixes were also made to make
the Versions box for a selected package more prominent.
</description>
  <pkglist>
    <collection>
        <package name="yast2-gtk" arch="i586" version="2.21.68" release="0.1.1">
          <filename>yast2-gtk-2.21.68-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-gtk" arch="x86_64" version="2.21.68" release="0.1.1">
          <filename>yast2-gtk-2.21.68-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="aafc622b521f6bf7a10c33c97623edba"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2775">
  <id>NetworkManager-novellvpn</id>
  <title>NetworkManager-NovellVPN: Fix for NovellVPN Connection Requires to Accept Advanced Options to Work</title>
  <release>openSUSE 11.3</release>
  <issued date="1279711811"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622854" id="622854" title="bug number 622854" type="bugzilla"/>
  </references>
  <description>This update fixes:
- bnc#622854: NovellVPN Connection Requires to Accept
  Advanced Options to Work
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager-novellvpn" arch="i586" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-0.7.2.r1138-7.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn" arch="x86_64" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-0.7.2.r1138-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-gnome" arch="i586" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-gnome-0.7.2.r1138-7.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-gnome" arch="x86_64" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-gnome-0.7.2.r1138-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="92089c2493010e5ba10b4496e8123ca8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2793">
  <id>release-notes-openSUSE</id>
  <title>release-notes-openSUSE: Various additions and translations</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868056"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621890" id="621890" title="bug number 621890" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617092" id="617092" title="bug number 617092" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619193" id="619193" title="bug number 619193" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621469" id="621469" title="bug number 621469" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623179" id="623179" title="bug number 623179" type="bugzilla"/>
  </references>
  <description>Enhancements to the openSUSE release notes. It adds and
updates some translations.
</description>
  <pkglist>
    <collection>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.6" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.6-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3a2da176b650999d89cf35b0d6e75a7e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2743">
  <id>gnome-panel</id>
  <title>gnome-panel: Fix newly created panels to be visible</title>
  <release>openSUSE 11.3</release>
  <issued date="1279528123"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620418" id="620418" title="bug number 620418" type="bugzilla"/>
  </references>
  <description>This update fixes an issue in Gnome Panel:
- bnc#620418: New Panel failed
</description>
  <pkglist>
    <collection>
        <package name="gnome-panel" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-devel" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-devel-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-devel" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-devel-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-doc" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-doc-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-doc" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-doc-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-extras" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-extras-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-extras" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-extras-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-lang" arch="noarch" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-lang-2.30.0-5.1.1.noarch.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0" arch="i586" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0-32bit" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-32bit-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61e6ca70c87edaaeb2ba72b145c0865c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2741">
  <id>udisks</id>
  <title>udisks: Fixed ejecting usb-drives or disks as normal user</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527609"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618955" id="618955" title="bug number 618955" type="bugzilla"/>
  </references>
  <description>A problem in udisks was fixed:
- bnc#618955: Cannot eject usb-drives or disks as normal
  user
</description>
  <pkglist>
    <collection>
        <package name="udisks" arch="i586" version="1.0.1" release="2.1.1">
          <filename>udisks-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="udisks" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>udisks-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="udisks-devel" arch="i586" version="1.0.1" release="2.1.1">
          <filename>udisks-devel-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="udisks-devel" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>udisks-devel-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="30bc69039fff036aedfdac5dd4adcf98"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2752">
  <id>unscd</id>
  <title>unscd: Fixed unscd does not start issue</title>
  <release>openSUSE 11.3</release>
  <issued date="1279711573"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622910" id="622910" title="bug number 622910" type="bugzilla"/>
  </references>
  <description>This update fixes a non starting unscd issue.

- bnc#622910: unscd does not start, rpm verify does not
  show error :-(
</description>
  <pkglist>
    <collection>
        <package name="unscd" arch="i586" version="0.45" release="6.1.1">
          <filename>unscd-0.45-6.1.1.i586.rpm</filename>
        </package>
        <package name="unscd" arch="x86_64" version="0.45" release="6.1.1">
          <filename>unscd-0.45-6.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a618f6f1ba6d2380c7bf23f8cdfbbd8e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2755">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Update to 3.0.6 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279723552"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Thunderbird to the 3.0.6
security release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-devel-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-devel-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-common-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-common-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-other-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-other-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="3.1.1">
          <filename>enigmail-1.0.1-3.1.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="3.1.1">
          <filename>enigmail-1.0.1-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="366a569e33905d24e7539a5ec70cb07e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2756">
  <id>wine</id>
  <title>wine: Update from 1.2-rc6 to 1.2 release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279780819"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623394" id="623394" title="bug number 623394" type="bugzilla"/>
  </references>
  <description>This update brings Wine from the 1.2 release candidate 6 to
the final 1.2 release.
</description>
  <pkglist>
    <collection>
        <package name="wine" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine" arch="x86_64" version="1.2" release="0.1.1">
          <filename>wine-1.2-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="wine-32bit" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-32bit-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine-devel" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-devel-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine-devel" arch="x86_64" version="1.2" release="0.1.1">
          <filename>wine-devel-1.2-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5b8f75ddbdb9270e24b376b404ff130e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2785">
  <id>k3b</id>
  <title>k3b: Update to 2.0 final</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868201"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623399" id="623399" title="bug number 623399" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619731" id="619731" title="bug number 619731" type="bugzilla"/>
  </references>
  <description>Update to 2.0 final. It updates only translations and fixes
some bugs.
- Fix freeze while ripping CD audio (bko#235466)
- Fix drag and drop from file managers to k3b project
  (bko#242745)
- Install app icons in hicolor
- Fixing missing icon when Oxygen icons not used for
  desktop (bnc#619731)
</description>
  <pkglist>
    <collection>
        <package name="k3b" arch="i586" version="2.0.0" release="1.1.1">
          <filename>k3b-2.0.0-1.1.1.i586.rpm</filename>
        </package>
        <package name="k3b" arch="x86_64" version="2.0.0" release="1.1.1">
          <filename>k3b-2.0.0-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="k3b-devel" arch="i586" version="2.0.0" release="1.1.1">
          <filename>k3b-devel-2.0.0-1.1.1.i586.rpm</filename>
        </package>
        <package name="k3b-devel" arch="x86_64" version="2.0.0" release="1.1.1">
          <filename>k3b-devel-2.0.0-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="k3b-lang" arch="noarch" version="2.0.0" release="1.1.1">
          <filename>k3b-lang-2.0.0-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="20228f09ab5f3c5d8a9f0695748d70ee"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2807">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Update to 3.6.8 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1280217183"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Firefox to the 3.6.8 security
release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211 / CVE-2010-1212: Mozilla developers
identified and fixed several memory safety bugs in the
browser engine used in Firefox and other Mozilla-based
products. Some of these bugs showed evidence of memory
corruption under certain circumstances, and we presume that
with enough effort at least some of these could be
exploited to run arbitrary code.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-38 / CVE-2010-1215: Mozilla security researcher
moz_bug_r_a4 reported that when content script which is
running in a chrome context accesses a content object via
SJOW, the content code can gain access to an object from
the chrome scope and use that object to run arbitrary
JavaScript with chrome privileges.

Firefox 3.5 and other Mozilla products built from Gecko
1.9.1 were not affected by this issue.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2010-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-43 / CVE-2010-1207: Mozilla developer Vladimir
Vukicevic reported that a canvas element can be used to
read data from another site, violating the same-origin
policy. The read restriction placed on a canvas element
which has had cross-origin data rendered into it can be
bypassed by retaining a reference to the canvas element's
context and deleting the associated canvas node from the
DOM.

MFSA 2010-44 / CVE-2010-1210: Security researcher O.
Andersen reported that undefined positions within various 8
bit character encodings are mapped to the sequence U+FFFD
which when displayed causes the immediately following
character to disappear from the text run. This could
potentially contribute to XSS problems on sites which
expected extra characters to be present within strings
being sanitized on the server.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.

MFSA 2010-48 / CVE-2010-2755: Mozilla developer Daniel
Holbert reported that the fix to the plugin parameter array
crash that was fixed in Firefox 3.6.7 caused a crash
showing signs of memory corruption. In certain
circumstances, properties in the plugin instance's
parameter array could be freed prematurely leaving a
dangling pointer that the plugin could execute, potentially
calling into attacker-controlled memory.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-branding-upstream-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-branding-upstream-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-common-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-common-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-other-3.6.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.8" release="0.1.1">
          <filename>MozillaFirefox-translations-other-3.6.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-js192-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-js192-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-js192-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.8-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.8" release="0.1.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.8-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e8ac6c95b4b2bb7e27c5e11c6cd2e836"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2786">
  <id>gtkglext</id>
  <title>gtkglext: This update fixes the gtkglext library to not reference non-existing symbols</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868209"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617677" id="617677" title="bug number 617677" type="bugzilla"/>
  </references>
  <description>This update fixes the gtkglext library to not reference
non-existing symbols: Can't link gtkglext application:
undefined reference to `GTK_WIDGET_REALIZED'
</description>
  <pkglist>
    <collection>
        <package name="gtkglext" arch="i586" version="1.2.0" release="183.1.1">
          <filename>gtkglext-1.2.0-183.1.1.i586.rpm</filename>
        </package>
        <package name="gtkglext" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
        <package name="gtkglext-32bit" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-32bit-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
        <package name="gtkglext-devel" arch="i586" version="1.2.0" release="183.1.1">
          <filename>gtkglext-devel-1.2.0-183.1.1.i586.rpm</filename>
        </package>
        <package name="gtkglext-devel" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-devel-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
        <package name="gtkglext-doc" arch="i586" version="1.2.0" release="183.1.1">
          <filename>gtkglext-doc-1.2.0-183.1.1.i586.rpm</filename>
        </package>
        <package name="gtkglext-doc" arch="x86_64" version="1.2.0" release="183.1.1">
          <filename>gtkglext-doc-1.2.0-183.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61a007d88c467ed143befea58cf693e8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2779">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Update to 1.9.1.11 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279781379"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla XULRunner to the 1.9.1.11
security release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2010-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.11" release="0.1.1">
          <filename>python-xpcom191-1.9.1.11-0.1.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.11" release="0.1.1">
          <filename>python-xpcom191-1.9.1.11-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7e038f8214dd5329f49cd0303cc02f5c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2784">
  <id>kipi-plugins</id>
  <title>digiKam, gwenview: Failed to rotate image. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868536"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=611983" id="611983" title="bug number 611983" type="bugzilla"/>
  </references>
  <description>The lossless JPEG rotate feature was broken by a runtime
incompatibility with the new libjpeg8 that is resolved by
this patch.
</description>
  <pkglist>
    <collection>
        <package name="kipi-plugins" arch="i586" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-1.2.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="kipi-plugins" arch="x86_64" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-1.2.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kipi-plugins-acquireimage" arch="i586" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-acquireimage-1.2.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="kipi-plugins-acquireimage" arch="x86_64" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-acquireimage-1.2.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kipi-plugins-doc" arch="i586" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-doc-1.2.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="kipi-plugins-doc" arch="x86_64" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-doc-1.2.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kipi-plugins-lang" arch="noarch" version="1.2.0" release="6.1.1">
          <filename>kipi-plugins-lang-1.2.0-6.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="60e7f141ecfa7dfcda71f1c0bf60ce4e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2726">
  <id>ghostscript-devel</id>
  <title>ghostscript security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279091077"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605043" id="605043" title="bug number 605043" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559122" id="559122" title="bug number 559122" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608071" id="608071" title="bug number 608071" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2055" id="CVE-2010-2055" title="CVE-2010-2055" type="cve"/>
  </references>
  <description>ghostscript by default read some initialization files from
the current working directory. Local attackers could
potentially exploit that to have other users execute
arbitrary commands by placing such files e.g. in /tmp
(CVE-2010-2055).
</description>
  <pkglist>
    <collection>
        <package name="ghostscript-devel" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-devel-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-devel" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-devel-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-fonts-other" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-other-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-fonts-other" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-other-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-fonts-rus" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-rus-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-fonts-rus" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-rus-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-fonts-std" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-std-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-fonts-std" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-fonts-std-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-ijs-devel" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-ijs-devel-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-ijs-devel" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-ijs-devel-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-library" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-library-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-library" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-library-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-omni" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-omni-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-omni" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-omni-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-x11" arch="i586" version="8.70" release="15.1.1">
          <filename>ghostscript-x11-8.70-15.1.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-x11" arch="x86_64" version="8.70" release="15.1.1">
          <filename>ghostscript-x11-8.70-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgimpprint" arch="i586" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-4.2.7-15.1.1.i586.rpm</filename>
        </package>
        <package name="libgimpprint" arch="x86_64" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-4.2.7-15.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgimpprint-devel" arch="i586" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-devel-4.2.7-15.1.1.i586.rpm</filename>
        </package>
        <package name="libgimpprint-devel" arch="x86_64" version="4.2.7" release="15.1.1">
          <filename>libgimpprint-devel-4.2.7-15.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="14e69d4a0dd51b6a8e6b963f6a9315e2"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2806">
  <id>libwebkit</id>
  <title>libwebkit security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868857"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622994" id="622994" title="bug number 622994" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=" id="" title="" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1386" id="CVE-2010-1386" title="CVE-2010-1386" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1392" id="CVE-2010-1392" title="CVE-2010-1392" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1405" id="CVE-2010-1405" title="CVE-2010-1405" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1407" id="CVE-2010-1407" title="CVE-2010-1407" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1416" id="CVE-2010-1416" title="CVE-2010-1416" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1417" id="CVE-2010-1417" title="CVE-2010-1417" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1665" id="CVE-2010-1665" title="CVE-2010-1665" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1418" id="CVE-2010-1418" title="CVE-2010-1418" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1421" id="CVE-2010-1421" title="CVE-2010-1421" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1422" id="CVE-2010-1422" title="CVE-2010-1422" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1501" id="CVE-2010-1501" title="CVE-2010-1501" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1767" id="CVE-2010-1767" title="CVE-2010-1767" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1664" id="CVE-2010-1664" title="CVE-2010-1664" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1758" id="CVE-2010-1758" title="CVE-2010-1758" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1759" id="CVE-2010-1759" title="CVE-2010-1759" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1760" id="CVE-2010-1760" title="CVE-2010-1760" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1761" id="CVE-2010-1761" title="CVE-2010-1761" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1762" id="CVE-2010-1762" title="CVE-2010-1762" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1770" id="CVE-2010-1770" title="CVE-2010-1770" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1771" id="CVE-2010-1771" title="CVE-2010-1771" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1772" id="CVE-2010-1772" title="CVE-2010-1772" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1773" id="CVE-2010-1773" title="CVE-2010-1773" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1774" id="CVE-2010-1774" title="CVE-2010-1774" type="cve"/>
  </references>
  <description>The libwebkit browser engine version 1.2.3 fixes several
security relevant bugs

(CVE-2010-1386, CVE-2010-1392, CVE-2010-1405,
CVE-2010-1407, CVE-2010-1416, CVE-2010-1417, CVE-2010-1665,
CVE-2010-1418, CVE-2010-1421, CVE-2010-1422, CVE-2010-1501,
CVE-2010-1767, CVE-2010-1664, CVE-2010-1758, CVE-2010-1759,
CVE-2010-1760, CVE-2010-1761, CVE-2010-1762, CVE-2010-1770,
CVE-2010-1771, CVE-2010-1772, CVE-2010-1773, CVE-2010-1774)
</description>
  <pkglist>
    <collection>
        <package name="libwebkit-1_0-2" arch="i586" version="1.2.3" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2-32bit" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>libwebkit-1_0-2-32bit-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="i586" version="1.2.3" release="0.1.1">
          <filename>libwebkit-devel-1.2.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>libwebkit-devel-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-lang" arch="noarch" version="1.2.3" release="0.1.1">
          <filename>libwebkit-lang-1.2.3-0.1.1.noarch.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="i586" version="1.2.3" release="0.1.1">
          <filename>webkit-jsc-1.2.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="x86_64" version="1.2.3" release="0.1.1">
          <filename>webkit-jsc-1.2.3-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5b535cc46f901e718aa899c8998445a8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2860">
  <id>kvirc</id>
  <title>kvirc: remote CTCP commands execution via specially-crafted CTCP parameter</title>
  <release>openSUSE 11.3</release>
  <issued date="1280745619"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626942" id="626942" title="bug number 626942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2785" id="CVE-2010-2785" title="CVE-2010-2785" type="cve"/>
  </references>
  <description>This update of kvirc does not further allow remote client
to send arbitrary CTCP commands. (CVE-2010-2785)
</description>
  <pkglist>
    <collection>
        <package name="kvirc" arch="i586" version="3.4.2" release="10.1.1">
          <filename>kvirc-3.4.2-10.1.1.i586.rpm</filename>
        </package>
        <package name="kvirc" arch="x86_64" version="3.4.2" release="10.1.1">
          <filename>kvirc-3.4.2-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="kvirc-devel" arch="i586" version="3.4.2" release="10.1.1">
          <filename>kvirc-devel-3.4.2-10.1.1.i586.rpm</filename>
        </package>
        <package name="kvirc-devel" arch="x86_64" version="3.4.2" release="10.1.1">
          <filename>kvirc-devel-3.4.2-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c30e2f232540b7b0f16d2c8fb4973c36"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2852">
  <id>squidGuard</id>
  <title>squidGuard: Fixed buffer overflows</title>
  <release>openSUSE 11.3</release>
  <issued date="1280448464"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=550930" id="550930" title="bug number 550930" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625439" id="625439" title="bug number 625439" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3700" id="CVE-2009-3700" title="CVE-2009-3700" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3826" id="CVE-2009-3826" title="CVE-2009-3826" type="cve"/>
  </references>
  <description>Two buffer overflows in squidGard were fixed:

CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3
and 1.4 allows remote attackers to cause a denial of
service (application hang or loss of blocking
functionality) via a long URL with many / (slash)
characters, related to &quot;emergency mode.&quot;

CVE-2009-3826: Multiple buffer overflows in squidGuard 1.4
allow remote attackers to bypass intended URL blocking via
a long URL, related to (1) the relationship between a
certain buffer size in squidGuard and a certain buffer size
in Squid and (2) a redirect URL that contains information
about the originally requested URL.

Also a logrotate mistake was fixed.
</description>
  <pkglist>
    <collection>
        <package name="squidGuard" arch="i586" version="1.4" release="7.1.1">
          <filename>squidGuard-1.4-7.1.1.i586.rpm</filename>
        </package>
        <package name="squidGuard" arch="x86_64" version="1.4" release="7.1.1">
          <filename>squidGuard-1.4-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="squidGuard-doc" arch="i586" version="1.4" release="7.1.1">
          <filename>squidGuard-doc-1.4-7.1.1.i586.rpm</filename>
        </package>
        <package name="squidGuard-doc" arch="x86_64" version="1.4" release="7.1.1">
          <filename>squidGuard-doc-1.4-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a22386eae5045a71bfb8987ebe974a28"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2818">
  <id>pam_mount</id>
  <title>pam_mount: Fix segfault when executed from sshd</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335100"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619780" id="619780" title="bug number 619780" type="bugzilla"/>
  </references>
  <description>This update fixes a segfault in pam_mount when executed
from sshd.
</description>
  <pkglist>
    <collection>
        <package name="pam_mount" arch="i586" version="1.34" release="3.1.1">
          <filename>pam_mount-1.34-3.1.1.i586.rpm</filename>
        </package>
        <package name="pam_mount" arch="x86_64" version="1.34" release="3.1.1">
          <filename>pam_mount-1.34-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="pam_mount-32bit" arch="x86_64" version="1.34" release="3.1.1">
          <filename>pam_mount-32bit-1.34-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="39ebf45eee235aa672da56aa0d27e84e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2814">
  <id>usb_modeswitch</id>
  <title>usb_modeswitch: version upgrade to support more devices</title>
  <release>openSUSE 11.3</release>
  <issued date="1280334862"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622525" id="622525" title="bug number 622525" type="bugzilla"/>
  </references>
  <description>usb_modeswitch is upgraded to version 1.1.3 and
usb_modeswitch-data to version 20100707 to improve the
openSUSE hardware compatibility.
</description>
  <pkglist>
    <collection>
        <package name="usb_modeswitch" arch="i586" version="1.1.3" release="1.1.1">
          <filename>usb_modeswitch-1.1.3-1.1.1.i586.rpm</filename>
        </package>
        <package name="usb_modeswitch" arch="x86_64" version="1.1.3" release="1.1.1">
          <filename>usb_modeswitch-1.1.3-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="usb_modeswitch-data" arch="noarch" version="1.1.3" release="1.1.1">
          <filename>usb_modeswitch-data-1.1.3-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2d163603a5fbde7432d3934bb1445df8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2815">
  <id>ethtool</id>
  <title>ethtool: Add option to modify GRO setting</title>
  <release>openSUSE 11.3</release>
  <issued date="1280334936"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616263" id="616263" title="bug number 616263" type="bugzilla"/>
  </references>
  <description>ethtool has no way to turn off generic-receive-offload.
This patch adds commandline option to enable/disable GRO.
</description>
  <pkglist>
    <collection>
        <package name="ethtool" arch="i586" version="6" release="85.1.1">
          <filename>ethtool-6-85.1.1.i586.rpm</filename>
        </package>
        <package name="ethtool" arch="x86_64" version="6" release="85.1.1">
          <filename>ethtool-6-85.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e4a7e63d42bbeb171491a18c66798f7b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2831">
  <id>mrtg</id>
  <title>mrtg: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280448588"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625437" id="625437" title="bug number 625437" type="bugzilla"/>
  </references>
  <description>The execution of mrtg ends in a parse error when perl 5.12
is used. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="mrtg" arch="i586" version="2.16.2" release="45.1.1">
          <filename>mrtg-2.16.2-45.1.1.i586.rpm</filename>
        </package>
        <package name="mrtg" arch="x86_64" version="2.16.2" release="45.1.1">
          <filename>mrtg-2.16.2-45.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="53417085a02281bcc3daef062186baaf"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2832">
  <id>jpeg</id>
  <title>libjpeg8: Recommend to old libjpeg version to fix 3rd party applications</title>
  <release>openSUSE 11.3</release>
  <issued date="1279874350"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624583" id="624583" title="bug number 624583" type="bugzilla"/>
  </references>
  <description>Re-add libjpeg6 to the default installation so that
applications installed not from rpm can start again.
</description>
  <pkglist>
    <collection>
        <package name="jpeg" arch="i586" version="8.0.1" release="2.1.1">
          <filename>jpeg-8.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="jpeg" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>jpeg-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg-devel" arch="i586" version="8.0.1" release="2.1.1">
          <filename>libjpeg-devel-8.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libjpeg-devel" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg-devel-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg-devel-32bit" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg-devel-32bit-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg6" arch="i586" version="6.2.0" release="3.1">
          <filename>libjpeg6-6.2.0-3.1.i586.rpm</filename>
        </package>
        <package name="libjpeg6" arch="x86_64" version="6.2.0" release="3.1">
          <filename>libjpeg6-6.2.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg6-32bit" arch="x86_64" version="6.2.0" release="3.1">
          <filename>libjpeg6-32bit-6.2.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg8" arch="i586" version="8.0.1" release="2.1.1">
          <filename>libjpeg8-8.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libjpeg8" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg8-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg8-32bit" arch="x86_64" version="8.0.1" release="2.1.1">
          <filename>libjpeg8-32bit-8.0.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="15b4a4aeb0b99d5caf51f970a98c5f0d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2828">
  <id>perl</id>
  <title>perl: This update fixes a crash caused by the use of constants.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280450187"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621856" id="621856" title="bug number 621856" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624628" id="624628" title="bug number 624628" type="bugzilla"/>
  </references>
  <description>If a constant is defined with the 'use constant' pragma,
perl may crash later on when the constant is used as
function argument (like in a print statement). Also, a bug
in the h2ph translator was fixed that led to spurious
warnings about _h2ph_pre.ph if 'perl -w' was used.
</description>
  <pkglist>
    <collection>
        <package name="perl" arch="i586" version="5.12.1" release="2.1.1">
          <filename>perl-5.12.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="perl" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-32bit" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-32bit-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" arch="i586" version="5.12.1" release="2.1.1">
          <filename>perl-base-5.12.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="perl-base" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-base-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base-32bit" arch="x86_64" version="5.12.1" release="2.1.1">
          <filename>perl-base-32bit-5.12.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-doc" arch="noarch" version="5.12.1" release="2.1.1">
          <filename>perl-doc-5.12.1-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="83e99dc16d9204f941aa0e3f17622428"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2816">
  <id>iputils</id>
  <title>iputils: Fix arping</title>
  <release>openSUSE 11.3</release>
  <issued date="1280334998"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610839" id="610839" title="bug number 610839" type="bugzilla"/>
  </references>
  <description>This update makes arping work for ethernet devices
(bnc#610839).
</description>
  <pkglist>
    <collection>
        <package name="iputils" arch="i586" version="ss021109" release="300.1.1">
          <filename>iputils-ss021109-300.1.1.i586.rpm</filename>
        </package>
        <package name="iputils" arch="x86_64" version="ss021109" release="300.1.1">
          <filename>iputils-ss021109-300.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dd4b25bc99fd92514cfc1b376ea5760b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2825">
  <id>bind</id>
  <title>bind: Fixed a bug in named chrooting</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335608"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625019" id="625019" title="bug number 625019" type="bugzilla"/>
  </references>
  <description>The bind name server init script was updated to fix:
- #625019: named refuse to start : init.d/named script is
  wrong to mount /proc bind
</description>
  <pkglist>
    <collection>
        <package name="bind" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-chrootenv-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-chrootenv-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-devel" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-devel-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-devel" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-devel-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" arch="noarch" version="9.7.1" release="2.1.1">
          <filename>bind-doc-9.7.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="bind-libs" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-libs-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-libs" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-libs-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-libs-32bit" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-libs-32bit-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="bind-utils" arch="i586" version="9.7.1" release="2.1.1">
          <filename>bind-utils-9.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="bind-utils" arch="x86_64" version="9.7.1" release="2.1.1">
          <filename>bind-utils-9.7.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b3712e67d3ab02ccf8377ad5c9667233"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2819">
  <id>gpg2</id>
  <title>gpg2: reuses a freed pointer when verifying a signature</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335261"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625947" id="625947" title="bug number 625947" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547" id="CVE-2010-2547" title="CVE-2010-2547" type="cve"/>
  </references>
  <description>GnuPG2 was vulnerable to arbitrary code execution by
context-dependent attackers because of reusing a freed
pointer when verifying a signature or importing a
certificate with many &quot;Subject Alternate Names&quot;.
(CVE-2010-2547)
</description>
  <pkglist>
    <collection>
        <package name="gpg2" arch="i586" version="2.0.15" release="5.1.1">
          <filename>gpg2-2.0.15-5.1.1.i586.rpm</filename>
        </package>
        <package name="gpg2" arch="x86_64" version="2.0.15" release="5.1.1">
          <filename>gpg2-2.0.15-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-lang" arch="noarch" version="2.0.15" release="5.1.1">
          <filename>gpg2-lang-2.0.15-5.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ebd0ab5f6fffd26de0b92f19ee80e1dc"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2859">
  <id>NetworkManager</id>
  <title>NetworkManager: Fixed no longer connecting after machine crashed during suspend</title>
  <release>openSUSE 11.3</release>
  <issued date="1280743898"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=585433" id="585433" title="bug number 585433" type="bugzilla"/>
  </references>
  <description>This update fixes a bug in NetworkManager:
- #585433: NetworkManager 0.8 no longer connects after
  machine crashed during suspend
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-0.8-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-devel-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-devel-0.8-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-doc-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-doc-0.8-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="i586" version="0.8" release="8.1.1">
          <filename>NetworkManager-glib-0.8-8.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="x86_64" version="0.8" release="8.1.1">
          <filename>NetworkManager-glib-0.8-8.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="10e2f275ff8e8b65af784f22f3f8fc58"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2863">
  <id>ImageMagick</id>
  <title>ImageMagick: It cannot compress grayscale TIFF images with JPEG. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280748239"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615223" id="615223" title="bug number 615223" type="bugzilla"/>
  </references>
  <description>ImageMagick cannot compress grayscale TIFF images with
JPEG. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="ImageMagick" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="ImageMagick" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="ImageMagick-devel" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-devel-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="ImageMagick-devel" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-devel-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="ImageMagick-doc" arch="noarch" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-doc-6.6.1.0-4.1.1.noarch.rpm</filename>
        </package>
        <package name="ImageMagick-extra" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-extra-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="ImageMagick-extra" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>ImageMagick-extra-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagick++-devel" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++-devel-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagick++-devel" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++-devel-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagick++3" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++3-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagick++3" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagick++3-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickCore3" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagickCore3-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagickCore3" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickCore3-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickCore3-32bit" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickCore3-32bit-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickWand3" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>libMagickWand3-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libMagickWand3" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickWand3-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libMagickWand3-32bit" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>libMagickWand3-32bit-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-PerlMagick" arch="i586" version="6.6.1.0" release="4.1.1">
          <filename>perl-PerlMagick-6.6.1.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="perl-PerlMagick" arch="x86_64" version="6.6.1.0" release="4.1.1">
          <filename>perl-PerlMagick-6.6.1.0-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a1d0b2d9ee0ef1f656643f58eebf3a03"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2864">
  <id>star</id>
  <title>star: This updates fixes a buffer overflow in star.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280747780"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625527" id="625527" title="bug number 625527" type="bugzilla"/>
  </references>
  <description>star is trying to copy data into buffer which is not long
enough, leading to buffer overflow and crash. Fixed bz this
update.
</description>
  <pkglist>
    <collection>
        <package name="star" arch="i586" version="1.5final" release="43.1.1">
          <filename>star-1.5final-43.1.1.i586.rpm</filename>
        </package>
        <package name="star" arch="x86_64" version="1.5final" release="43.1.1">
          <filename>star-1.5final-43.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5e30580cda5ab4fa518ffba62bea8c63"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2873">
  <id>apparmor-utils</id>
  <title>apparmor-utils: It is totally broken - can't find their perl module. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280928327"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619893" id="619893" title="bug number 619893" type="bugzilla"/>
  </references>
  <description>Apparmor utils is totally broken - can't find their perl
module. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="apparmor-utils" arch="noarch" version="2.3.1" release="19.1.1">
          <filename>apparmor-utils-2.3.1-19.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d93fd570dea34dc0f11af3d8c13fb2e8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2871">
  <id>kdeartwork4</id>
  <title>kdeartwork4: fixed xscreensaver-based screensavers not working in KDE4</title>
  <release>openSUSE 11.3</release>
  <issued date="1280869202"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624288" id="624288" title="bug number 624288" type="bugzilla"/>
  </references>
  <description>This update fixes:
- bnc#624288: xscreensaver-based screensavers not working
  in KDE4
</description>
  <pkglist>
    <collection>
        <package name="kdeartwork4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdeartwork4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdeartwork4-screensaver" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-screensaver-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdeartwork4-screensaver" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdeartwork4-screensaver-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="xscreensaver" arch="i586" version="5.10" release="5.2">
          <filename>xscreensaver-5.10-5.2.i586.rpm</filename>
        </package>
        <package name="xscreensaver" arch="x86_64" version="5.10" release="5.2">
          <filename>xscreensaver-5.10-5.2.x86_64.rpm</filename>
        </package>
        <package name="xscreensaver-data" arch="i586" version="5.10" release="5.2">
          <filename>xscreensaver-data-5.10-5.2.i586.rpm</filename>
        </package>
        <package name="xscreensaver-data" arch="x86_64" version="5.10" release="5.2">
          <filename>xscreensaver-data-5.10-5.2.x86_64.rpm</filename>
        </package>
        <package name="xscreensaver-data-extra" arch="i586" version="5.10" release="5.2">
          <filename>xscreensaver-data-extra-5.10-5.2.i586.rpm</filename>
        </package>
        <package name="xscreensaver-data-extra" arch="x86_64" version="5.10" release="5.2">
          <filename>xscreensaver-data-extra-5.10-5.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="758ec3611bb79ce3ca3e572497f5867d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2854">
  <id>build</id>
  <title>build: Distribution default is wrong. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280746319"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618004" id="618004" title="bug number 618004" type="bugzilla"/>
  </references>
  <description>This update brings the build package to the 2010-07-28
version which includes many fixes and enhancements for
building openSUSE packages, including: 

- export BUILD_DEBUG so rpmlint can check for it
  (bnc#618004)
- support for Files provide
- document --repo and --dis
- update wiki links
- fix bugs in repo handling
- fix distribution autodetection code
</description>
  <pkglist>
    <collection>
        <package name="build" arch="noarch" version="2010.07.28" release="1.1.1">
          <filename>build-2010.07.28-1.1.1.noarch.rpm</filename>
        </package>
        <package name="build-mkbaselibs" arch="noarch" version="2010.07.28" release="1.1.1">
          <filename>build-mkbaselibs-2010.07.28-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3a6792deadb0ec74521b237934105a3d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2870">
  <id>xpdf-poppler</id>
  <title>xpdf-poppler: This update fixes a crash in xpdf-poppler.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280793227"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617623" id="617623" title="bug number 617623" type="bugzilla"/>
  </references>
  <description>This update fixes two crashes in XPutImage, &quot;*image is
NULL&quot;.
</description>
  <pkglist>
    <collection>
        <package name="xpdf-poppler" arch="i586" version="3.02" release="11.1.1">
          <filename>xpdf-poppler-3.02-11.1.1.i586.rpm</filename>
        </package>
        <package name="xpdf-poppler" arch="x86_64" version="3.02" release="11.1.1">
          <filename>xpdf-poppler-3.02-11.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="189f6aedeec368492119a0b5cb6dd2a9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2866">
  <id>beaver</id>
  <title>beaver: Update from 0.4.0rc1 to the stable release 0.4.0</title>
  <release>openSUSE 11.3</release>
  <issued date="1280793406"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623221" id="623221" title="bug number 623221" type="bugzilla"/>
  </references>
  <description>Beaver has been updated to stable release 0.4.0 form
previous 0.4.0 release candidate 1.
</description>
  <pkglist>
    <collection>
        <package name="beaver" arch="i586" version="0.4.0" release="0.1.1">
          <filename>beaver-0.4.0-0.1.1.i586.rpm</filename>
        </package>
        <package name="beaver" arch="x86_64" version="0.4.0" release="0.1.1">
          <filename>beaver-0.4.0-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e20735c219e7595615a134b8e00408c8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2855">
  <id>strongswan</id>
  <title>strongswan: fixing snprintf overflows</title>
  <release>openSUSE 11.3</release>
  <issued date="1280746663"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615915" id="615915" title="bug number 615915" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2628" id="CVE-2010-2628" title="CVE-2010-2628" type="cve"/>
  </references>
  <description>Remote unauthenticated attackers could cause a buffer
overflow in strongswan's IKE deamon by using specially
crafted certificates or identify information. Attackers
could potentially exploit that to execute code
(CVE-2010-2628).
</description>
  <pkglist>
    <collection>
        <package name="strongswan" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-doc" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-doc-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-doc" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-doc-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-ikev1" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev1-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-ikev1" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev1-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-ikev2" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev2-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-ikev2" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-ikev2-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-ipsec" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-ipsec-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-ipsec" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-ipsec-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-libs0" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-libs0-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-libs0" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-libs0-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="strongswan-nm" arch="i586" version="4.4.0" release="4.1.1">
          <filename>strongswan-nm-4.4.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="strongswan-nm" arch="x86_64" version="4.4.0" release="4.1.1">
          <filename>strongswan-nm-4.4.0-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6d77dba63eab3c9dd063281af6a4a8b7"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2856">
  <id>sysvinit</id>
  <title>sysvinit: &quot;startproc/checkproc/killproc&quot; do not work with scripts. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335583"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623766" id="623766" title="bug number 623766" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559534" id="559534" title="bug number 559534" type="bugzilla"/>
  </references>
  <description>&quot;startproc/checkproc/killproc&quot; do not work with scripts.
Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="sysvinit" arch="i586" version="2.88" release="10.1.1">
          <filename>sysvinit-2.88-10.1.1.i586.rpm</filename>
        </package>
        <package name="sysvinit" arch="x86_64" version="2.88" release="10.1.1">
          <filename>sysvinit-2.88-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="sysvinit-tools" arch="i586" version="2.88" release="10.1.1">
          <filename>sysvinit-tools-2.88-10.1.1.i586.rpm</filename>
        </package>
        <package name="sysvinit-tools" arch="x86_64" version="2.88" release="10.1.1">
          <filename>sysvinit-tools-2.88-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7f02e1f4a7313c0699af1ce0344e194a"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2886">
  <id>yast2-add-on-creator</id>
  <title>yast2-add-on-creator: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281001949"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623036" id="623036" title="bug number 623036" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=540627" id="540627" title="bug number 540627" type="bugzilla"/>
  </references>
  <description>Yast Add-on Creator build broken addons when multiple
addons at one time are created. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="yast2-add-on-creator" arch="noarch" version="2.19.2" release="1.1.1">
          <filename>yast2-add-on-creator-2.19.2-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="91e981205071a429636674d340b07e59"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2908">
  <id>libpcsclite1</id>
  <title>pcsc-lite: fix for CVE-2009-4901 and CVE-2009-4902</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545029"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629026" id="629026" title="bug number 629026" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4901" id="CVE-2009-4901" title="CVE-2009-4901" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4902" id="CVE-2009-4902" title="CVE-2009-4902" type="cve"/>
  </references>
  <description>This update of pcsc-liste fixes two vulnerabilities:
- CVE-2009-4901: local denial of service (daemon crash) via
  crafted SCARD_SET_ATTRIB message data, a related issue to
  CVE-2010-0407.
- CVE-2009-4902: a buffer overflow might allow local users
  to gain privileges via crafted SCARD_CONTROL message
  data, this vulnerability exists because of an incorrect
  fix for CVE-2010-0407.
</description>
  <pkglist>
    <collection>
        <package name="libpcsclite1" arch="i586" version="1.5.5" release="7.1.1">
          <filename>libpcsclite1-1.5.5-7.1.1.i586.rpm</filename>
        </package>
        <package name="libpcsclite1" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>libpcsclite1-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpcsclite1-32bit" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>libpcsclite1-32bit-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-lite" arch="i586" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-1.5.5-7.1.1.i586.rpm</filename>
        </package>
        <package name="pcsc-lite" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-lite-devel" arch="i586" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-devel-1.5.5-7.1.1.i586.rpm</filename>
        </package>
        <package name="pcsc-lite-devel" arch="x86_64" version="1.5.5" release="7.1.1">
          <filename>pcsc-lite-devel-1.5.5-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6dc0f226897e2807f0d495db198a2c41"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2895">
  <id>flash-player</id>
  <title>flash-player: Updated to security update version 10.1.82.76</title>
  <release>openSUSE 11.3</release>
  <issued date="1281521184"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630108" id="630108" title="bug number 630108" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209" id="CVE-2010-0209" title="CVE-2010-0209" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2188" id="CVE-2010-2188" title="CVE-2010-2188" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213" id="CVE-2010-2213" title="CVE-2010-2213" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214" id="CVE-2010-2214" title="CVE-2010-2214" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216" id="CVE-2010-2216" title="CVE-2010-2216" type="cve"/>
  </references>
  <description>Flash Player was updated to version 10.1.82.76 fixing
several critical security issues.

CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,
CVE2010-2215, CVE-2010-2216
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.82.76" release="0.1.1">
          <filename>flash-player-10.1.82.76-0.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3554ddb3febdeb28777206fc3f2d86c3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2884">
  <id>hal</id>
  <title>hal: This update fixes a hald-probe-input crash</title>
  <release>openSUSE 11.3</release>
  <issued date="1281025663"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=577489" id="577489" title="bug number 577489" type="bugzilla"/>
  </references>
  <description>Fixes segmentation fault in hald-probe-input. The cause was
an error structure before initialization (bnc#577489).
</description>
  <pkglist>
    <collection>
        <package name="hal" arch="i586" version="0.5.14" release="9.1.1">
          <filename>hal-0.5.14-9.1.1.i586.rpm</filename>
        </package>
        <package name="hal" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
        <package name="hal-32bit" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-32bit-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
        <package name="hal-devel" arch="i586" version="0.5.14" release="9.1.1">
          <filename>hal-devel-0.5.14-9.1.1.i586.rpm</filename>
        </package>
        <package name="hal-devel" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-devel-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
        <package name="hal-devel-32bit" arch="x86_64" version="0.5.14" release="9.1.1">
          <filename>hal-devel-32bit-0.5.14-9.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="65b103602b3fb8507b01f3b40c722b89"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2899">
  <id>release-notes-openSUSE</id>
  <title>release-notes-openSUSE: Enhancements and translation update</title>
  <release>openSUSE 11.3</release>
  <issued date="1281521893"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627596" id="627596" title="bug number 627596" type="bugzilla"/>
  </references>
  <description>Update to version 11.3.7:
* New entry: SSH Public Key Authentication (bnc#627596).
* Update translations.
</description>
  <pkglist>
    <collection>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.7" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.7-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5704f4efbb89b9a6fa242061af400fc9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2896">
  <id>anjuta</id>
  <title>anjuta: This update fixes a crash on start caused through a missing package dependency.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281522490"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624924" id="624924" title="bug number 624924" type="bugzilla"/>
  </references>
  <description>Anjuta crashes after start because of a missing dependency.
The package &quot;libgda-sqlite&quot; was missing in the
requirements. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="anjuta" arch="i586" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-2.30.1.0-3.1.1.i586.rpm</filename>
        </package>
        <package name="anjuta" arch="x86_64" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-2.30.1.0-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="anjuta-devel" arch="i586" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-devel-2.30.1.0-3.1.1.i586.rpm</filename>
        </package>
        <package name="anjuta-devel" arch="x86_64" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-devel-2.30.1.0-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="anjuta-doc" arch="i586" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-doc-2.30.1.0-3.1.1.i586.rpm</filename>
        </package>
        <package name="anjuta-doc" arch="x86_64" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-doc-2.30.1.0-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="anjuta-lang" arch="noarch" version="2.30.1.0" release="3.1.1">
          <filename>anjuta-lang-2.30.1.0-3.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="722532d27ff9c2d00dd0386f9b515dfd"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2921">
  <id>lxsession</id>
  <title>lxsession: Logout doesn't work properly without hal. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281620896"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627416" id="627416" title="bug number 627416" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- lxsession-logout can finally fully work without HAL
</description>
  <pkglist>
    <collection>
        <package name="lxsession" arch="i586" version="0.4.4" release="3.2.1">
          <filename>lxsession-0.4.4-3.2.1.i586.rpm</filename>
        </package>
        <package name="lxsession" arch="x86_64" version="0.4.4" release="3.2.1">
          <filename>lxsession-0.4.4-3.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="795ff7e086c3b416ec5068f35df88277"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2925">
  <id>libxmmsclient++-glib1</id>
  <title>xmms2-devel: It does not install xmms runtime libraries. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281632095"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627610" id="627610" title="bug number 627610" type="bugzilla"/>
  </references>
  <description>This update fix xmms2-devel missing dependencies.
</description>
  <pkglist>
    <collection>
        <package name="libxmmsclient++-glib1" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient++-glib1-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient++-glib1" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient++-glib1-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmmsclient++4" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient++4-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient++4" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient++4-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmmsclient-glib1" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient-glib1-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient-glib1" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient-glib1-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmmsclient6" arch="i586" version="0.7" release="10.1.1">
          <filename>libxmmsclient6-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="libxmmsclient6" arch="x86_64" version="0.7" release="10.1.1">
          <filename>libxmmsclient6-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-xmms2" arch="i586" version="0.7" release="10.1.1">
          <filename>python-xmms2-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="python-xmms2" arch="x86_64" version="0.7" release="10.1.1">
          <filename>python-xmms2-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-devel" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-devel-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-devel" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-devel-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-docs" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-docs-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-docs" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-docs-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-perl" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-perl-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-perl" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-perl-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-airplay" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-airplay-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-airplay" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-airplay-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-ao" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ao-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-ao" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ao-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-apefile" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-apefile-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-apefile" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-apefile-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-asf" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asf-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-asf" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asf-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-asx" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asx-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-asx" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-asx-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-base" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-base-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-base" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-base-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-cdda" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cdda-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-cdda" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cdda-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-cue" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cue-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-cue" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-cue-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-curl" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-curl-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-curl" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-curl-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-daap" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-daap-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-daap" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-daap-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-flac" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flac-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-flac" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flac-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-flv" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flv-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-flv" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-flv-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-gvfs" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-gvfs-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-gvfs" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-gvfs-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-html" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-html-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-html" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-html-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-ices" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ices-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-ices" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ices-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-icymetaint" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-icymetaint-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-icymetaint" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-icymetaint-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-id3v2" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-id3v2-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-id3v2" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-id3v2-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-jack" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-jack-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-jack" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-jack-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-karaoke" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-karaoke-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-karaoke" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-karaoke-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-m3u" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-m3u-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-m3u" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-m3u-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-modplug" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-modplug-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-modplug" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-modplug-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-mp4" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-mp4-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-mp4" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-mp4-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-musepack" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-musepack-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-musepack" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-musepack-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-normalize" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-normalize-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-normalize" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-normalize-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-ofa" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ofa-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-ofa" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-ofa-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-pulse" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-pulse-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-pulse" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-pulse-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-samba" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-samba-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-samba" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-samba-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-speex" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-speex-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-speex" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-speex-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-tta" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-tta-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-tta" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-tta-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-vocoder" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-vocoder-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-vocoder" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-vocoder-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-wave" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wave-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-wave" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wave-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-plugin-wavpack" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wavpack-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-plugin-wavpack" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-plugin-wavpack-0.7-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="xmms2-ruby" arch="i586" version="0.7" release="10.1.1">
          <filename>xmms2-ruby-0.7-10.1.1.i586.rpm</filename>
        </package>
        <package name="xmms2-ruby" arch="x86_64" version="0.7" release="10.1.1">
          <filename>xmms2-ruby-0.7-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8b7ed02eb09ad365d7df4ec597039df9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2906">
  <id>cheese</id>
  <title>cheese: Starting cheese results in a segmentation fault. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545446"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623292" id="623292" title="bug number 623292" type="bugzilla"/>
  </references>
  <description>Cheese was creating a camera device even when GStreamer
initialization failed. Trying to use this device later
resulted in a segmentation fault. This update resolves this
problem (bnc #623292).
</description>
  <pkglist>
    <collection>
        <package name="cheese" arch="i586" version="2.30.1" release="2.1.1">
          <filename>cheese-2.30.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="cheese" arch="x86_64" version="2.30.1" release="2.1.1">
          <filename>cheese-2.30.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="cheese-devel" arch="i586" version="2.30.1" release="2.1.1">
          <filename>cheese-devel-2.30.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="cheese-devel" arch="x86_64" version="2.30.1" release="2.1.1">
          <filename>cheese-devel-2.30.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="cheese-lang" arch="noarch" version="2.30.1" release="2.1.1">
          <filename>cheese-lang-2.30.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="libcheese-gtk18" arch="i586" version="2.30.1" release="2.1.1">
          <filename>libcheese-gtk18-2.30.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libcheese-gtk18" arch="x86_64" version="2.30.1" release="2.1.1">
          <filename>libcheese-gtk18-2.30.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="41d48c92fb9263b2d09888a8ec57f475"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2907">
  <id>dhcp</id>
  <title>dhcp: This update fixes the ldap-support for dhcp-server and fixes the NetworkManager dhcp-client classless route option compatibility.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545161"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625358" id="625358" title="bug number 625358" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625770" id="625770" title="bug number 625770" type="bugzilla"/>
  </references>
  <description>This update fixes the following bugs:
- #625358: ldap option number in consistence causing a
  conflict with new 4.x options in the dhcp-server.
- #625770: Renamed rfc3442-classless-static-routes_raw in
  /etc/dhclient.conf to rfc3442-classless-static-routes for
  compatibility with the NetworkManager making use of
  /etc/dhclient.conf now and adopted /sbin/dhclient-script
  to use the new option variable.
</description>
  <pkglist>
    <collection>
        <package name="dhcp" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-client" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-client-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-client" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-client-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-devel-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-devel-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-doc-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-doc-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-relay-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-relay-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-server" arch="i586" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-server-4.1.1.P1-4.1.1.i586.rpm</filename>
        </package>
        <package name="dhcp-server" arch="x86_64" version="4.1.1.P1" release="4.1.1">
          <filename>dhcp-server-4.1.1.P1-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ed00c789134d7b85782ad20e84b9b590"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2917">
  <id>jedit</id>
  <title>jedit: It refuses to start due wrong bsh2 version. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281631385"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629375" id="629375" title="bug number 629375" type="bugzilla"/>
  </references>
  <description>jedit refuses to start, because it's not compatible with
bsh2 2.0.0b5 distributed with openSUSE 11.3. This update
adds the older compatible bsh2 version to make jedit
working again.
</description>
  <pkglist>
    <collection>
        <package name="jedit" arch="noarch" version="4.2" release="315.1.1">
          <filename>jedit-4.2-315.1.1.noarch.rpm</filename>
        </package>
        <package name="jedit-javadoc" arch="noarch" version="4.2" release="315.1.1">
          <filename>jedit-javadoc-4.2-315.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="24893beeaf1b82a1d14695b2319fc0b2"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2909">
  <id>tomoe</id>
  <title>tomoe: &quot;Handwriting recognation&quot; doesn't work. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545246"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625396" id="625396" title="bug number 625396" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- #625396: Tomoe handwriting recognition does not work
  (SCIM)
</description>
  <pkglist>
    <collection>
        <package name="tomoe" arch="i586" version="0.6.0" release="31.1.1">
          <filename>tomoe-0.6.0-31.1.1.i586.rpm</filename>
        </package>
        <package name="tomoe" arch="x86_64" version="0.6.0" release="31.1.1">
          <filename>tomoe-0.6.0-31.1.1.x86_64.rpm</filename>
        </package>
        <package name="tomoe-devel" arch="i586" version="0.6.0" release="31.1.1">
          <filename>tomoe-devel-0.6.0-31.1.1.i586.rpm</filename>
        </package>
        <package name="tomoe-devel" arch="x86_64" version="0.6.0" release="31.1.1">
          <filename>tomoe-devel-0.6.0-31.1.1.x86_64.rpm</filename>
        </package>
        <package name="tomoe-doc" arch="i586" version="0.6.0" release="31.1.1">
          <filename>tomoe-doc-0.6.0-31.1.1.i586.rpm</filename>
        </package>
        <package name="tomoe-doc" arch="x86_64" version="0.6.0" release="31.1.1">
          <filename>tomoe-doc-0.6.0-31.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0a7f774d53e116719578f65800ad3af0"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2911">
  <id>xaw3d</id>
  <title>xaw3d: xterm doesn't use the right xaw3d libs. This is fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281617605"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627314" id="627314" title="bug number 627314" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- #627314: xterm doesn't use xaw3d libs as the 3D version
  for libXaw7.so is missed
</description>
  <pkglist>
    <collection>
        <package name="xaw3d" arch="i586" version="1.5E" release="417.1.1">
          <filename>xaw3d-1.5E-417.1.1.i586.rpm</filename>
        </package>
        <package name="xaw3d" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3d-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
        <package name="xaw3d-32bit" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3d-32bit-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
        <package name="xaw3d-devel" arch="i586" version="1.5E" release="417.1.1">
          <filename>xaw3d-devel-1.5E-417.1.1.i586.rpm</filename>
        </package>
        <package name="xaw3d-devel" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3d-devel-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
        <package name="xaw3dd" arch="i586" version="1.5E" release="417.1.1">
          <filename>xaw3dd-1.5E-417.1.1.i586.rpm</filename>
        </package>
        <package name="xaw3dd" arch="x86_64" version="1.5E" release="417.1.1">
          <filename>xaw3dd-1.5E-417.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="897bd719866f010500e7bf90f708b537"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2924">
  <id>device-mapper</id>
  <title>lvm2: &quot;lvcreate --snapshot&quot; results in scary error messages. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281631501"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=556177" id="556177" title="bug number 556177" type="bugzilla"/>
  </references>
  <description>&quot;lvcreate --snapshot&quot; results in scary error messages to
console and /var/log/messages. This bug is fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="device-mapper" arch="i586" version="1.02.49" release="4.1.1">
          <filename>device-mapper-1.02.49-4.1.1.i586.rpm</filename>
        </package>
        <package name="device-mapper" arch="x86_64" version="1.02.49" release="4.1.1">
          <filename>device-mapper-1.02.49-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="device-mapper-32bit" arch="x86_64" version="1.02.49" release="4.1.1">
          <filename>device-mapper-32bit-1.02.49-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="device-mapper-devel" arch="i586" version="1.02.49" release="4.1.1">
          <filename>device-mapper-devel-1.02.49-4.1.1.i586.rpm</filename>
        </package>
        <package name="device-mapper-devel" arch="x86_64" version="1.02.49" release="4.1.1">
          <filename>device-mapper-devel-1.02.49-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" arch="i586" version="2.02.67" release="4.1.1">
          <filename>lvm2-2.02.67-4.1.1.i586.rpm</filename>
        </package>
        <package name="lvm2" arch="x86_64" version="2.02.67" release="4.1.1">
          <filename>lvm2-2.02.67-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1e979e1c56ca2240b838160efa298aba"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2923">
  <id>cups-drivers-splix</id>
  <title>cups-drivers-splix: splix should not contain PPDs for printers which require JBIG. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281631643"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628698" id="628698" title="bug number 628698" type="bugzilla"/>
  </references>
  <description>This update remove all PPD files that require the patented
JBIG library. This update also fix PPDs paths. Cups is now
able to locate CMS files.
</description>
  <pkglist>
    <collection>
        <package name="cups-drivers-splix" arch="i586" version="2.0.0" release="2.1.1">
          <filename>cups-drivers-splix-2.0.0-2.1.1.i586.rpm</filename>
        </package>
        <package name="cups-drivers-splix" arch="x86_64" version="2.0.0" release="2.1.1">
          <filename>cups-drivers-splix-2.0.0-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e5c4fd1c2b8828f3308849c56ad72f28"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2905">
  <id>xfig</id>
  <title>xfig: After the last security update for ghostscript it is unable to import .eps files. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281545435"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629462" id="629462" title="bug number 629462" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update: After the last
security update for ghostscript, xfig is unable to import
.eps files (bnc#629462)
</description>
  <pkglist>
    <collection>
        <package name="xfig" arch="i586" version="3.2.5b" release="6.1.1">
          <filename>xfig-3.2.5b-6.1.1.i586.rpm</filename>
        </package>
        <package name="xfig" arch="x86_64" version="3.2.5b" release="6.1.1">
          <filename>xfig-3.2.5b-6.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3b12b96d5228239cb605a57571038f80"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2928">
  <id>exiv2</id>
  <title>exiv2: Add pkg-config provides</title>
  <release>openSUSE 11.3</release>
  <issued date="1281941573"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625466" id="625466" title="bug number 625466" type="bugzilla"/>
  </references>
  <description>This update adds pkg-config provides to the package.
</description>
  <pkglist>
    <collection>
        <package name="exiv2" arch="i586" version="0.19" release="5.1.1">
          <filename>exiv2-0.19-5.1.1.i586.rpm</filename>
        </package>
        <package name="exiv2" arch="x86_64" version="0.19" release="5.1.1">
          <filename>exiv2-0.19-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="exiv2-lang" arch="noarch" version="0.19" release="5.1.1">
          <filename>exiv2-lang-0.19-5.1.1.noarch.rpm</filename>
        </package>
        <package name="libexiv2-6" arch="i586" version="0.19" release="5.1.1">
          <filename>libexiv2-6-0.19-5.1.1.i586.rpm</filename>
        </package>
        <package name="libexiv2-6" arch="x86_64" version="0.19" release="5.1.1">
          <filename>libexiv2-6-0.19-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libexiv2-6-32bit" arch="x86_64" version="0.19" release="5.1.1">
          <filename>libexiv2-6-32bit-0.19-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libexiv2-devel" arch="i586" version="0.19" release="5.1.1">
          <filename>libexiv2-devel-0.19-5.1.1.i586.rpm</filename>
        </package>
        <package name="libexiv2-devel" arch="x86_64" version="0.19" release="5.1.1">
          <filename>libexiv2-devel-0.19-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b2fa8e1c22ec69ab64ef54caa97bf383"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2946">
  <id>cifs-utils</id>
  <title>mount.cifs: Does not appear to support the (documented, preferred) credentials option. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282059525"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618877" id="618877" title="bug number 618877" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620856" id="620856" title="bug number 620856" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621525" id="621525" title="bug number 621525" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623763" id="623763" title="bug number 623763" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627243" id="627243" title="bug number 627243" type="bugzilla"/>
  </references>
  <description>The following bug is fixed with this update:
- #618877: mount.cifs does not appear to support the
  (documented, preferred) credentials option
</description>
  <pkglist>
    <collection>
        <package name="cifs-utils" arch="i586" version="4.6" release="1.1.1">
          <filename>cifs-utils-4.6-1.1.1.i586.rpm</filename>
        </package>
        <package name="cifs-utils" arch="x86_64" version="4.6" release="1.1.1">
          <filename>cifs-utils-4.6-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4c9562fd2fd1a790086f7e919316bef7"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2948">
  <id>libpulse-browse0</id>
  <title>pulseaudio: Fix setup-pulseaudio script to set up the environment variables correctly.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282048334"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623837" id="623837" title="bug number 623837" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619859" id="619859" title="bug number 619859" type="bugzilla"/>
  </references>
  <description>The setup-pulseaudio script included in 11.3 pulseaudio
package doesn't set the environment variables correctly for
enabling/disabling PulseAudio support. This update fixes
the script so that the variables are properly set.
</description>
  <pkglist>
    <collection>
        <package name="libpulse-browse0" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse-browse0-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse-browse0" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-browse0-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-devel" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse-devel-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse-devel" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-devel-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse-mainloop-glib0-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-mainloop-glib0-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0-32bit" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse-mainloop-glib0-32bit-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse0" arch="i586" version="0.9.21" release="10.1.1">
          <filename>libpulse0-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="libpulse0" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse0-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse0-32bit" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>libpulse0-32bit-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-esound-compat" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-esound-compat-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-esound-compat" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-esound-compat-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-gdm-hooks" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-gdm-hooks-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-gdm-hooks" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-gdm-hooks-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-lang" arch="noarch" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-lang-0.9.21-10.1.1.noarch.rpm</filename>
        </package>
        <package name="pulseaudio-module-bluetooth" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-bluetooth-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-bluetooth" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-bluetooth-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-gconf" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-gconf-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-gconf" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-gconf-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-jack" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-jack-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-jack" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-jack-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-lirc" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-lirc-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-lirc" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-lirc-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-x11" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-x11-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-x11" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-x11-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-zeroconf" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-zeroconf-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-zeroconf" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-module-zeroconf-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-utils" arch="i586" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-utils-0.9.21-10.1.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-utils" arch="x86_64" version="0.9.21" release="10.1.1">
          <filename>pulseaudio-utils-0.9.21-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1dc0ee893c473cea91397f3ecfb51f9e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2927">
  <id>input-utils</id>
  <title>inputattach: Fix syntax errors in the init script</title>
  <release>openSUSE 11.3</release>
  <issued date="1281703562"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629911" id="629911" title="bug number 629911" type="bugzilla"/>
  </references>
  <description>This update fixes bug #629911 that causes syntax error
whenever trying to run the init script.
</description>
  <pkglist>
    <collection>
        <package name="input-utils" arch="i586" version="2007.06.22" release="165.1.1">
          <filename>input-utils-2007.06.22-165.1.1.i586.rpm</filename>
        </package>
        <package name="input-utils" arch="x86_64" version="2007.06.22" release="165.1.1">
          <filename>input-utils-2007.06.22-165.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9c4eeffb12c34bb9b6d6861786176fc4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2940">
  <id>smpppd</id>
  <title>smpppd: allow to control non-dialup interfaces</title>
  <release>openSUSE 11.3</release>
  <issued date="1281974096"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628138" id="628138" title="bug number 628138" type="bugzilla"/>
  </references>
  <description>smpppd ignored non-dialup interfaces even if USERCONTROL
was set to &quot;yes&quot;.  This update enables support for such
interfaces again.
</description>
  <pkglist>
    <collection>
        <package name="smpppd" arch="i586" version="1.60.46" release="1.1.1">
          <filename>smpppd-1.60.46-1.1.1.i586.rpm</filename>
        </package>
        <package name="smpppd" arch="x86_64" version="1.60.46" release="1.1.1">
          <filename>smpppd-1.60.46-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="961582125f8546c881e8520edd7c8e09"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2941">
  <id>NetworkManager</id>
  <title>NetworkManager: Remove call to NFS restart</title>
  <release>openSUSE 11.3</release>
  <issued date="1281974625"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559021" id="559021" title="bug number 559021" type="bugzilla"/>
  </references>
  <description>The NetworkManager start does no longer run NFS restart
during NetworkManager startup (bnc#559021)
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-0.8-8.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-devel-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-devel-0.8-8.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-doc-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-doc-0.8-8.2.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="i586" version="0.8" release="8.2.1">
          <filename>NetworkManager-glib-0.8-8.2.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="x86_64" version="0.8" release="8.2.1">
          <filename>NetworkManager-glib-0.8-8.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d76c8c3047851597b3bedca918499940"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2947">
  <id>cpio</id>
  <title>cpio: It crashes on non existing pattern file. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282048210"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629860" id="629860" title="bug number 629860" type="bugzilla"/>
  </references>
  <description>cpio crashes on non existing pattern file (cpio -i -E
no-file) because of improper error checking. Fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="cpio" arch="i586" version="2.11" release="4.1.1">
          <filename>cpio-2.11-4.1.1.i586.rpm</filename>
        </package>
        <package name="cpio" arch="x86_64" version="2.11" release="4.1.1">
          <filename>cpio-2.11-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="cpio-lang" arch="noarch" version="2.11" release="4.1.1">
          <filename>cpio-lang-2.11-4.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="fc29e8522bfe42b16ef8fe80ce17ecf6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2991">
  <id>opera</id>
  <title>opera: version 10.61 fixes various vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1282650223"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630771" id="630771" title="bug number 630771" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2576" id="CVE-2010-2576" title="CVE-2010-2576" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3019" id="CVE-2010-3019" title="CVE-2010-3019" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3020" id="CVE-2010-3020" title="CVE-2010-3020" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3021" id="CVE-2010-3021" title="CVE-2010-3021" type="cve"/>
  </references>
  <description>This update of opera fixes the following vulnerabilities:
- CVE-2010-2576: CVSS v2 Base Score: 6.8 (CWE-94):
  unexpected changes in tab focus could be used to run
  programs from the Internet, as reported by Jakob Balle
  and Sven Krewitt of Secunia
- CVE-2010-3019: CVSS v2 Base Score: 9.3 (CWE-119): heap
  buffer overflow in HTML5 canvas could be used to execute
  arbitrary code, as reported by Kuzzcc
- CVE-2010-3020: CVSS v2 Base Score: 5.0 (CWE-264): news
  feed preview could subscribe to feeds without
  interaction, as reported by Alexios Fakos
- CVE-2010-3021: CVSS v2 Base Score: 4.3 (CWE-399): remote
  attackers could trigger a remote denial of service (CPU
  consumption and application hang) via an animated PNG
  image
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.61" release="0.1.1">
          <filename>opera-10.61-0.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.61" release="0.1.1">
          <filename>opera-10.61-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="796b885991b3fbcd870eecc67509c6dd"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2918">
  <id>libfreetype6</id>
  <title>freetype2: security update for various bugs</title>
  <release>openSUSE 11.3</release>
  <issued date="1281617277"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628213" id="628213" title="bug number 628213" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619562" id="619562" title="bug number 619562" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629447" id="629447" title="bug number 629447" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1797" id="CVE-2010-1797" title="CVE-2010-1797" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2497" id="CVE-2010-2497" title="CVE-2010-2497" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2498" id="CVE-2010-2498" title="CVE-2010-2498" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2499" id="CVE-2010-2499" title="CVE-2010-2499" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2500" id="CVE-2010-2500" title="CVE-2010-2500" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2519" id="CVE-2010-2519" title="CVE-2010-2519" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2520" id="CVE-2010-2520" title="CVE-2010-2520" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2527" id="CVE-2010-2527" title="CVE-2010-2527" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2541" id="CVE-2010-2541" title="CVE-2010-2541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2805" id="CVE-2010-2805" title="CVE-2010-2805" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2806" id="CVE-2010-2806" title="CVE-2010-2806" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2807" id="CVE-2010-2807" title="CVE-2010-2807" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2808" id="CVE-2010-2808" title="CVE-2010-2808" type="cve"/>
  </references>
  <description>This update of freetype2 fixes several vulnerabilities that
could lead to remote system compromise by executing
arbitrary code with user privileges:
- CVE-2010-1797: stack-based buffer overflow while
  processing CFF opcodes
- CVE-2010-2497: integer underflow
- CVE-2010-2498: invalid free
- CVE-2010-2499: buffer overflow
- CVE-2010-2500: integer overflow
- CVE-2010-2519: heap buffer overflow
- CVE-2010-2520: heap buffer overflow
- CVE-2010-2527: buffer overflows in the freetype demo
- CVE-2010-2541: buffer overflow in ftmulti demo program
- CVE-2010-2805: improper bounds checking
- CVE-2010-2806: improper bounds checking
- CVE-2010-2807: improper type comparisons
- CVE-2010-2808: memory corruption flaw by processing
  certain LWFN fonts
</description>
  <pkglist>
    <collection>
        <package name="libfreetype6" arch="i586" version="2.3.12" release="7.1.1">
          <filename>libfreetype6-2.3.12-7.1.1.i586.rpm</filename>
        </package>
        <package name="libfreetype6" arch="x86_64" version="2.3.12" release="7.1.1">
          <filename>libfreetype6-2.3.12-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-32bit" arch="x86_64" version="2.3.12" release="7.1.1">
          <filename>libfreetype6-32bit-2.3.12-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4dd6ccb8c236dd688f4a48bdd9e85c37"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2945">
  <id>lxdm</id>
  <title>lxdm: Collective update for lxdm</title>
  <release>openSUSE 11.3</release>
  <issued date="1282059449"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629728" id="629728" title="bug number 629728" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619769" id="619769" title="bug number 619769" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630862" id="630862" title="bug number 630862" type="bugzilla"/>
  </references>
  <description>This update fixes the following bugs:
* bnc#629728 : lxdm run greeters as root user, this update
  fix lxdm and add lxdm user/group
* bnc#630862 : lxdm can't login when space in password
* bnc#619769 : lxdm doesn't switch to tty1 and no splash
  screen is showed
</description>
  <pkglist>
    <collection>
        <package name="lxdm" arch="i586" version="0.2.97_git20100730" release="0.1.1">
          <filename>lxdm-0.2.97_git20100730-0.1.1.i586.rpm</filename>
        </package>
        <package name="lxdm" arch="x86_64" version="0.2.97_git20100730" release="0.1.1">
          <filename>lxdm-0.2.97_git20100730-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="53108168e90ec4204c928c6b491029a5"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2952">
  <id>pstoedit</id>
  <title>pstoedit: This update fixes an crash of pstoedit when it is called from inkscape.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282059639"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622977" id="622977" title="bug number 622977" type="bugzilla"/>
  </references>
  <description>This update fixes the following bug:
* pstoedit crashes in dl_close() when closing plugins. This
  update fixes this problem. (#622977)
</description>
  <pkglist>
    <collection>
        <package name="pstoedit" arch="i586" version="3.50" release="7.1.1">
          <filename>pstoedit-3.50-7.1.1.i586.rpm</filename>
        </package>
        <package name="pstoedit" arch="x86_64" version="3.50" release="7.1.1">
          <filename>pstoedit-3.50-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="pstoedit-devel" arch="i586" version="3.50" release="7.1.1">
          <filename>pstoedit-devel-3.50-7.1.1.i586.rpm</filename>
        </package>
        <package name="pstoedit-devel" arch="x86_64" version="3.50" release="7.1.1">
          <filename>pstoedit-devel-3.50-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0dd5e864caa58861d13eb11eec6e74f6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3003">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1282312610"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623905" id="623905" title="bug number 623905" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2783" id="CVE-2010-2783" title="CVE-2010-2783" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2548" id="CVE-2010-2548" title="CVE-2010-2548" type="cve"/>
  </references>
  <description>icedtea included in java-1_6_0-openjdk  was updated to
version 1.8.1 which fixes two security issues:

CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary
file access CVE-2010-2548: IcedTea Incomplete property
access check for unsigned applications

The new version also fixes many non-security bugs. For
details please see
http://blog.fuseyism.com/index.php/2010/07/28/icedtea6-181-r
eleased/
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-1.6.0.0_b18-1.1.5.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-1.6.0.0_b18-1.1.5.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b18-1.1.5.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b18-1.1.5.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b18-1.1.5.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b18-1.1.5.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.1.5.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.1.5.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b18" release="1.1.5">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b18-1.1.5.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3fe83148ecfde4147fcdbc9d70c986e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2817">
  <id>ivman</id>
  <title>ivman: Fixed not receiving hal events</title>
  <release>openSUSE 11.3</release>
  <issued date="1280335029"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=576567" id="576567" title="bug number 576567" type="bugzilla"/>
  </references>
  <description>This update of ivman fixes:
- #576567: ivman not receiving hal events
</description>
  <pkglist>
    <collection>
        <package name="ivman" arch="i586" version="0.6.14" release="208.1.1">
          <filename>ivman-0.6.14-208.1.1.i586.rpm</filename>
        </package>
        <package name="ivman" arch="x86_64" version="0.6.14" release="208.1.1">
          <filename>ivman-0.6.14-208.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9c8b6da4223930544129699c2400e196"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2973">
  <id>xorg-x11-Xvnc</id>
  <title>xorg-x11-server: Fix multiple bugs and security vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1282232217"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618152" id="618152" title="bug number 618152" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625593" id="625593" title="bug number 625593" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=546632" id="546632" title="bug number 546632" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623254" id="623254" title="bug number 623254" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=597232" id="597232" title="bug number 597232" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240" id="CVE-2010-2240" title="CVE-2010-2240" type="cve"/>
  </references>
  <description>The X.Org X11 Server was updated to fix several bugs and 2
security issues:

Two security issues were fixed: CVE-2010-2240: This fix
adds a workaround for overlapping stacks and heaps in case
of OOM conditions.This workaround is necessary if the
kernel is not properly adding guard or gap-pages below the
stack. 

CVE-2010-1166: The fbComposite function in fbpict.c in the
Render extension in the X server in X.Org X11R7.1 allows
remote authenticated users to cause a denial of service
(memory corruption and daemon crash) or possibly execute
arbitrary code via a crafted request, related to an
incorrect macro definition.

Non-Security Bugs fixed: Fix some shortcomings in the Xdmcp
implementation. It used to suppress loopback addresses from
the list of potential display addresses to report to xdm,
even when talking to xdm through a loopback address. Now
only display addresses of the same kind as the xdm
connection are reported to xdm.

This most notably helps Xvnc servers contacting the local
xdm,  because they were severely affected by the
suppression of loopback addresses.
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11-Xvnc" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-Xvnc" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server-extra" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-extra-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server-extra" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-extra-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server-sdk" arch="i586" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-sdk-7.5_1.8.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server-sdk" arch="x86_64" version="7.5_1.8.0" release="10.3.1">
          <filename>xorg-x11-server-sdk-7.5_1.8.0-10.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="86d2b66d25ba6d7dbae64c6919cf6a53"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2984">
  <id>desktop-translations</id>
  <title>desktop-translations: Translation update</title>
  <release>openSUSE 11.3</release>
  <issued date="1282606284"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=592237" id="592237" title="bug number 592237" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615842" id="615842" title="bug number 615842" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624344" id="624344" title="bug number 624344" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632285" id="632285" title="bug number 632285" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624991" id="624991" title="bug number 624991" type="bugzilla"/>
  </references>
  <description>Update various translations (desktop menus and YaST texts)
and release notes plus translations.
</description>
  <pkglist>
    <collection>
        <package name="desktop-translations" arch="noarch" version="11.3" release="12.1.1">
          <filename>desktop-translations-11.3-12.1.1.noarch.rpm</filename>
        </package>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.8" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.8-0.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-af" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-af-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ar" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ar-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ast" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ast-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-bg" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-bg-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-bn" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-bn-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-bs" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-bs-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ca" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ca-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-cs" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-cs-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-cy" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-cy-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-da" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-da-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-de" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-de-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-el" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-el-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-en_GB" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-en_GB-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-en_US" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-en_US-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-es" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-es-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-et" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-et-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-fa" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-fa-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-fi" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-fi-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-fr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-fr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-gl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-gl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-gu" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-gu-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-hi" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-hi-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-hr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-hr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-hu" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-hu-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-id" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-id-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-it" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-it-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ja" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ja-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-jv" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-jv-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ka" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ka-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-km" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-km-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-kn" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-kn-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ko" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ko-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ku" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ku-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-lo" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-lo-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-lt" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-lt-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-mk" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-mk-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-mr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-mr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-nb" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-nb-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-nl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-nl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pa" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pa-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pt" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pt-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-pt_BR" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-pt_BR-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ro" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ro-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ru" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ru-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-si" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-si-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sk" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sk-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sl" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sl-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sv" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sv-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-sw" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-sw-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-ta" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-ta-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-tg" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-tg-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-th" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-th-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-tr" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-tr-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-uk" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-uk-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-vi" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-vi-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-wa" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-wa-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-xh" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-xh-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-zh_CN" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-zh_CN-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-zh_TW" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-zh_TW-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-trans-zu" arch="noarch" version="2.19.0" release="16.1.1">
          <filename>yast2-trans-zu-2.19.0-16.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c5ce636421da47162a180f4ff777df73"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3037">
  <id>gwibber</id>
  <title>Gwibber: Fix runtime requires</title>
  <release>openSUSE 11.3</release>
  <issued date="1278382548"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633495" id="633495" title="bug number 633495" type="bugzilla"/>
  </references>
  <description>This update adds the previously missing
gnome-python-desktop runtime requirement to Gwibber
</description>
  <pkglist>
    <collection>
        <package name="gnome-python-desktop" arch="i586" version="2.30.0" release="1.13">
          <filename>gnome-python-desktop-2.30.0-1.13.i586.rpm</filename>
        </package>
        <package name="gnome-python-desktop" arch="x86_64" version="2.30.0" release="1.13">
          <filename>gnome-python-desktop-2.30.0-1.13.x86_64.rpm</filename>
        </package>
        <package name="gwibber" arch="i586" version="2.31.1+bzr720" release="5.1.1">
          <filename>gwibber-2.31.1+bzr720-5.1.1.i586.rpm</filename>
        </package>
        <package name="gwibber" arch="x86_64" version="2.31.1+bzr720" release="5.1.1">
          <filename>gwibber-2.31.1+bzr720-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gwibber-lang" arch="noarch" version="2.31.1+bzr720" release="5.1.1">
          <filename>gwibber-lang-2.31.1+bzr720-5.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d7a72bfe9a8a11fbc682572cefb7630b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2985">
  <id>libopenais-devel</id>
  <title>openais: corosync/openais fail to launch on x86_64. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282605943"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623427" id="623427" title="bug number 623427" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628243" id="628243" title="bug number 628243" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- Install openais libraries to /usr/lib64 on x86_64
- Fixing corosync startup on x86_64 architecture
  (bnc#623427)
- Make pacemaker conflict with libheartbeat2 &lt; 3.0.0, to
  ensure the the correct libglue library is installed
  (bnc#628243)
</description>
  <pkglist>
    <collection>
        <package name="libopenais-devel" arch="i586" version="1.1.2" release="2.1.1">
          <filename>libopenais-devel-1.1.2-2.1.1.i586.rpm</filename>
        </package>
        <package name="libopenais-devel" arch="x86_64" version="1.1.2" release="2.1.1">
          <filename>libopenais-devel-1.1.2-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopenais3" arch="i586" version="1.1.2" release="2.1.1">
          <filename>libopenais3-1.1.2-2.1.1.i586.rpm</filename>
        </package>
        <package name="libopenais3" arch="x86_64" version="1.1.2" release="2.1.1">
          <filename>libopenais3-1.1.2-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpacemaker-devel" arch="i586" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker-devel-1.1.2.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libpacemaker-devel" arch="x86_64" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker-devel-1.1.2.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpacemaker3" arch="i586" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker3-1.1.2.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libpacemaker3" arch="x86_64" version="1.1.2.1" release="2.1.1">
          <filename>libpacemaker3-1.1.2.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="openais" arch="i586" version="1.1.2" release="2.1.1">
          <filename>openais-1.1.2-2.1.1.i586.rpm</filename>
        </package>
        <package name="openais" arch="x86_64" version="1.1.2" release="2.1.1">
          <filename>openais-1.1.2-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="pacemaker" arch="i586" version="1.1.2.1" release="2.1.1">
          <filename>pacemaker-1.1.2.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="pacemaker" arch="x86_64" version="1.1.2.1" release="2.1.1">
          <filename>pacemaker-1.1.2.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="284df35b8020d80b9fd70e9deb0282f4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2992">
  <id>eID-belgium</id>
  <title>opensc: This update fixes opensc and packages depending on the provided macro SC_TEST_RET</title>
  <release>openSUSE 11.3</release>
  <issued date="1282656040"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627619" id="627619" title="bug number 627619" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- opensc and all package depending on the broken macro:
  SC_TEST_RET. 
- webkit based browsers (epiphany, midori) freezes when
  opensc is installed.

Warning: If your third party smart card driver was compiled
against openSUSE 11.3 and contains references to
SC_TEST_RET, you need to recompile it as well.
</description>
  <pkglist>
    <collection>
        <package name="eID-belgium" arch="i586" version="2.6.0" release="130.1.1">
          <filename>eID-belgium-2.6.0-130.1.1.i586.rpm</filename>
        </package>
        <package name="eID-belgium" arch="x86_64" version="2.6.0" release="130.1.1">
          <filename>eID-belgium-2.6.0-130.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopensc2" arch="i586" version="0.11.13" release="2.1.1">
          <filename>libopensc2-0.11.13-2.1.1.i586.rpm</filename>
        </package>
        <package name="libopensc2" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>libopensc2-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopensc2-32bit" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>libopensc2-32bit-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" arch="i586" version="0.11.13" release="2.1.1">
          <filename>opensc-0.11.13-2.1.1.i586.rpm</filename>
        </package>
        <package name="opensc" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>opensc-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-32bit" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>opensc-32bit-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-devel" arch="i586" version="0.11.13" release="2.1.1">
          <filename>opensc-devel-0.11.13-2.1.1.i586.rpm</filename>
        </package>
        <package name="opensc-devel" arch="x86_64" version="0.11.13" release="2.1.1">
          <filename>opensc-devel-0.11.13-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d70c8589df22988def86b589a89e1348"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2986">
  <id>pinentry-qt</id>
  <title>pinentry-qt: It appears behind other windows and grabs alt+tab. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282606083"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629502" id="629502" title="bug number 629502" type="bugzilla"/>
  </references>
  <description>pinentry-qt, when invoked e.g. by kmail, pops behind other
windows and grabs focus, making it impossible to bring it
on top with Alt+Tab. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="pinentry-qt" arch="i586" version="0.8.0" release="17.1.1">
          <filename>pinentry-qt-0.8.0-17.1.1.i586.rpm</filename>
        </package>
        <package name="pinentry-qt" arch="x86_64" version="0.8.0" release="17.1.1">
          <filename>pinentry-qt-0.8.0-17.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8c5d52459cd6e1a7c90ff202f9309d4d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3011">
  <id>timezone-2010l</id>
  <title>timezone: glibc timezone/DST update to 2010l</title>
  <release>openSUSE 11.3</release>
  <issued date="1282730522"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615937" id="615937" title="bug number 615937" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607532" id="607532" title="bug number 607532" type="bugzilla"/>
  </references>
  <description>This update fixes zic -l to copy the timezone also
correctly when hardlinking fails (due to /usr being on a
separate partition) (bnc#607532)

* DST changes: Africa/Cairo (Egypt) and Asia/Gaza
  (Palestine) do not use daylight saving during the month
  of Ramadan in order to prevent Muslims from fasting one
  hour longer.
http://www.timeanddate.com/news/time/egypt-ends-dst-2010.htm
  l
http://www.timeanddate.com/news/time/westbank-gaza-end-dst-2
  010.html

  Africa/Casablanca (Marocco) has spent the period from May
2 to Aug 8 using daylight saving. Marocco adopted regular
daylight saving, but the start and end dates vary every
year.
http://www.timeanddate.com/news/time/morocco-starts-dst-2010
.html

  America/Argentina/San_Luis (Argentina region) local
government did not terminate its DST period as planned and
instead decided to extend its use of the UTC-3 time
indefinitely.
http://www.worldtimezone.com/dst_news/dst_news_argentina08.h
tml

* New zones: America/Bahia_Banderas (Mexican state of
  Nayarit) has declared that it is to follow the UCT-6 time
  instead of UCT-7, with the aim to have the same time as
  the nearby city of Puerto Vallarta.
http://www.worldtimezone.com/dst_news/dst_news_mexico08.html
  

* Historical changes: Asia/Taipei information on DST usage
  listed 1980 as one year using DST, which should read 1979
  instead according to government resources.

  Europe/Helsinki, before switching to Central European
standard DST in 1983, trialled DST for two years. However,
the database omitted to specify that in these trials of
1981 and 1982, switches have been made one hour earlier
than in 1983.

* Spelling changes in Micronesia: Pacific/Truk has been
  renamed to Pacific/Chuuk in 1989.
</description>
  <pkglist>
    <collection>
        <package name="timezone" arch="i586" version="2010l" release="0.3.1">
          <filename>timezone-2010l-0.3.1.i586.rpm</filename>
        </package>
        <package name="timezone" arch="x86_64" version="2010l" release="0.3.1">
          <filename>timezone-2010l-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-java" arch="noarch" version="2010l" release="0.3.1">
          <filename>timezone-java-2010l-0.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="cf42df06792fbc140654995f11bbcd1c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3036">
  <id>acroread</id>
  <title>acroread security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1282833446"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629134" id="629134" title="bug number 629134" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1240" id="CVE-2010-1240" title="CVE-2010-1240" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2862" id="CVE-2010-2862" title="CVE-2010-2862" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209" id="CVE-2010-0209" title="CVE-2010-0209" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2188" id="CVE-2010-2188" title="CVE-2010-2188" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213" id="CVE-2010-2213" title="CVE-2010-2213" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214" id="CVE-2010-2214" title="CVE-2010-2214" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2215" id="CVE-2010-2215" title="CVE-2010-2215" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216" id="CVE-2010-2216" title="CVE-2010-2216" type="cve"/>
  </references>
  <description>Specially crafted PDF documents could crash acroread or
lead to execution of arbitrary code (CVE-2010-1240,
CVE-2010-2862).

This update also incorporate the Adobe Flash Player update
APSB10-16 for the bundled flash player parts
(CVE-2010-0209, CVE-2010-2188, CVE-2010-2213,
CVE-2010-2214, CVE-2010-2215, CVE-2010-2216).
</description>
  <pkglist>
    <collection>
        <package name="acroread" arch="i586" version="9.3.4" release="0.2.1">
          <filename>acroread-9.3.4-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4c058032673b2766d3779358759be119"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2987">
  <id>sysconfig</id>
  <title>sysconfig: This update contains fixes for wireless networking with ifup + WPA/WPA2 and detection of disabled ipv6 in the dhcp script</title>
  <release>openSUSE 11.3</release>
  <issued date="1282576511"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623340" id="623340" title="bug number 623340" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623676" id="623676" title="bug number 623676" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624182" id="624182" title="bug number 624182" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625403" id="625403" title="bug number 625403" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631283" id="631283" title="bug number 631283" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616765" id="616765" title="bug number 616765" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- #625403: Fixed wireless hardware to wext/nl80211 WPA
  driver mapping and changed to use -Dnl80211,wext by
  default for untested drivers to let the wpa_supplicant
  fallback to wext when nl80211 is not available and avoid
  failures with non-mac80211 based hardware drivers.
  Adjusted info message about untested drivers and enabled
  untested driver handling also in case wpa_supplicant is
  not required but the user prefers to use it. Fixes also
  bugs #623340,#623676,#624182,#631283.
- #616765: Fixed check whether ipv6 is enabled or not in
  /sbin/ifup-dhcp to avoid dhcpv6 client start in case the
  interface is configured to start both, dhcpv4 and dhcpv6
  clients.
</description>
  <pkglist>
    <collection>
        <package name="sysconfig" arch="i586" version="0.73.7" release="2.1.1">
          <filename>sysconfig-0.73.7-2.1.1.i586.rpm</filename>
        </package>
        <package name="sysconfig" arch="x86_64" version="0.73.7" release="2.1.1">
          <filename>sysconfig-0.73.7-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61a2d9458c5a97f9a018d113b1a4182f"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3061">
  <id>yast2-country</id>
  <title>yast2-country: Fix Clock at boot when using local time</title>
  <release>openSUSE 11.3</release>
  <issued date="1283424848"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627116" id="627116" title="bug number 627116" type="bugzilla"/>
  </references>
  <description>When HW clock is set to local time, clock is wrong on boot
after change in YaST. mkinitrd call is needed (bnc #627116)
</description>
  <pkglist>
    <collection>
        <package name="yast2-country" arch="i586" version="2.19.19" release="0.1.1">
          <filename>yast2-country-2.19.19-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-country" arch="x86_64" version="2.19.19" release="0.1.1">
          <filename>yast2-country-2.19.19-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-country-data" arch="i586" version="2.19.19" release="0.1.1">
          <filename>yast2-country-data-2.19.19-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-country-data" arch="x86_64" version="2.19.19" release="0.1.1">
          <filename>yast2-country-data-2.19.19-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d050ba440c630f6c06debcac5b4f6c45"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3059">
  <id>yast2-core</id>
  <title>yast2-core: Fix  slow startup in some AppArmor setups</title>
  <release>openSUSE 11.3</release>
  <issued date="1283424132"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629882" id="629882" title="bug number 629882" type="bugzilla"/>
  </references>
  <description>YaST read YCP include files 1 byte at a time. If its
AppArmor profile is enabled, auditd logs it all, taking
several minutes for a module to start (bnc#629882).
</description>
  <pkglist>
    <collection>
        <package name="yast2-core" arch="i586" version="2.19.3" release="1.1.1">
          <filename>yast2-core-2.19.3-1.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-core" arch="x86_64" version="2.19.3" release="1.1.1">
          <filename>yast2-core-2.19.3-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-core-devel" arch="i586" version="2.19.3" release="1.1.1">
          <filename>yast2-core-devel-2.19.3-1.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-core-devel" arch="x86_64" version="2.19.3" release="1.1.1">
          <filename>yast2-core-devel-2.19.3-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a0da96f92e34b28fb3e366543f49fb57"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3083">
  <id>sudo</id>
  <title>sudo security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283864476"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635843" id="635843" title="bug number 635843" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2956" id="CVE-2010-2956" title="CVE-2010-2956" type="cve"/>
  </references>
  <description>sudo's handling of the -g command line option allowed to
also specify -u in some cases, therefore allowing users to
actually run commands as root (CVE-2010-2956).
</description>
  <pkglist>
    <collection>
        <package name="sudo" arch="i586" version="1.7.2p7" release="2.1.1">
          <filename>sudo-1.7.2p7-2.1.1.i586.rpm</filename>
        </package>
        <package name="sudo" arch="x86_64" version="1.7.2p7" release="2.1.1">
          <filename>sudo-1.7.2p7-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dd4dbb1a9703e355bd477f608a23bd4a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3038">
  <id>Kernel</id>
  <title>Linux Kernel: Security/Bugfix update to 2.6.34.4</title>
  <release>openSUSE 11.3</release>
  <issued date="1282677085"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=529535" id="529535" title="bug number 529535" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=584720" id="584720" title="bug number 584720" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=586643" id="586643" title="bug number 586643" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=594362" id="594362" title="bug number 594362" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599671" id="599671" title="bug number 599671" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608300" id="608300" title="bug number 608300" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610362" id="610362" title="bug number 610362" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610828" id="610828" title="bug number 610828" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615656" id="615656" title="bug number 615656" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617530" id="617530" title="bug number 617530" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617912" id="617912" title="bug number 617912" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618678" id="618678" title="bug number 618678" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619021" id="619021" title="bug number 619021" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619416" id="619416" title="bug number 619416" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619440" id="619440" title="bug number 619440" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619727" id="619727" title="bug number 619727" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621598" id="621598" title="bug number 621598" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623005" id="623005" title="bug number 623005" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623472" id="623472" title="bug number 623472" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624118" id="624118" title="bug number 624118" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624606" id="624606" title="bug number 624606" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624814" id="624814" title="bug number 624814" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625339" id="625339" title="bug number 625339" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627212" id="627212" title="bug number 627212" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627310" id="627310" title="bug number 627310" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627386" id="627386" title="bug number 627386" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629908" id="629908" title="bug number 629908" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631066" id="631066" title="bug number 631066" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631185" id="631185" title="bug number 631185" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631319" id="631319" title="bug number 631319" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627447" id="627447" title="bug number 627447" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624587" id="624587" title="bug number 624587" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2798" id="CVE-2010-2798" title="CVE-2010-2798" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2524" id="CVE-2010-2524" title="CVE-2010-2524" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2537" id="CVE-2010-2537" title="CVE-2010-2537" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2538" id="CVE-2010-2538" title="CVE-2010-2538" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3110" id="CVE-2010-3110" title="CVE-2010-3110" type="cve"/>
  </references>
  <description>This update of the openSUSE 11.3 kernel brings the kernel
to version 2.6.34.4 and contains a lot of bug and security
fixes

CVE-2010-3110: Missing bounds checks in several ioctls of
the Novell Client novfs /proc interface allowed
unprivileged local users to crash the kernel or even
execute code in kernel context.

CVE-2010-2524: a malicious local user could fill the cache
used by CIFS do perform dns lookups with chosen data,
therefore tricking the kernel into mounting a wrong CIFS
server.

CVE-2010-2798: a local user could trigger a NULL derefence
on a gfs2 file system

CVE-2010-2537: a local user could overwrite append-only
files on a btrfs file system

CVE-2010-2538: a local user could read kernel memory of a
btrfs file system
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-debug-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-default-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-desktop-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.4" release="0.1.1">
          <filename>kernel-devel-2.6.34.4-0.1.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-ec2-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-ec2-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-pae-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-pae-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-pae-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.4" release="0.1.1">
          <filename>kernel-source-2.6.34.4-0.1.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.4" release="0.1.1">
          <filename>kernel-source-vanilla-2.6.34.4-0.1.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-syms-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-syms-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-trace-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vanilla-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-vmi-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-base-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-base-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-devel-2.6.34.4-0.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.4" release="0.1.1">
          <filename>kernel-xen-devel-2.6.34.4-0.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-default-1.1_k2.6.34.4_0.1-19.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-default-1.1_k2.6.34.4_0.1-19.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-desktop-1.1_k2.6.34.4_0.1-19.1.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.4_0.1" release="19.1.1">
          <filename>preload-kmp-desktop-1.1_k2.6.34.4_0.1-19.1.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1bdb65860dd9c5a73f747918071b7799"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3092">
  <id>liblirc_client0</id>
  <title>ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283989118"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637880" id="637880" title="bug number 637880" type="bugzilla"/>
  </references>
  <description>The ndiswrapper, wacom and lirc kernel modules needed to be
rebuilt after kernel update.
</description>
  <pkglist>
    <collection>
        <package name="liblirc_client0" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="liblirc_client0" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="liblirc_client0-32bit" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-32bit-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-devel" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-devel" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-pae" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-pae-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.4_0.1" release="0.1.1">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="i586" version="1.55" release="8.1.1">
          <filename>ndiswrapper-1.55-8.1.1.i586.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="x86_64" version="1.55" release="8.1.1">
          <filename>ndiswrapper-1.55-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="i586" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.4_0.1-8.1.1.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="x86_64" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.4_0.1-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="i586" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.4_0.1-8.1.1.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="x86_64" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.4_0.1-8.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-pae" arch="i586" version="1.55_k2.6.34.4_0.1" release="8.1.1">
          <filename>ndiswrapper-kmp-pae-1.55_k2.6.34.4_0.1-8.1.1.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="i586" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.4_0.1-11.1.1.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="x86_64" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.4_0.1-11.1.1.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="i586" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.4_0.1-11.1.1.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="x86_64" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.4_0.1-11.1.1.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-pae" arch="i586" version="0.8.1_k2.6.34.4_0.1" release="11.1.1">
          <filename>wacom-kmp-pae-0.8.1_k2.6.34.4_0.1-11.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="adbe558aaed0ce88ddee31d8ef37423d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2796">
  <id>java-1_6_0-sun</id>
  <title>SUN Java update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279891520"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624569" id="624569" title="bug number 624569" type="bugzilla"/>
  </references>
  <description>Oracle has released JRE 6 Update 21 in order to numerous
defects.

Please refer to Oracle's site for more information:
http://java.sun.com/javase/6/webnotes/6u21.html
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-src-1.6.0.u21-0.1.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u21" release="0.1.1">
          <filename>java-1_6_0-sun-src-1.6.0.u21-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="04d7af1b010b9bd2736fdd80a7be9a92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2929">
  <id>apache2-mod_php5</id>
  <title>php5 security update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1281619328"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=588975" id="588975" title="bug number 588975" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604315" id="604315" title="bug number 604315" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604652" id="604652" title="bug number 604652" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604654" id="604654" title="bug number 604654" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604656" id="604656" title="bug number 604656" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605097" id="605097" title="bug number 605097" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605100" id="605100" title="bug number 605100" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609763" id="609763" title="bug number 609763" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609766" id="609766" title="bug number 609766" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609768" id="609768" title="bug number 609768" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609769" id="609769" title="bug number 609769" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612555" id="612555" title="bug number 612555" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612556" id="612556" title="bug number 612556" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616232" id="616232" title="bug number 616232" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619483" id="619483" title="bug number 619483" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619486" id="619486" title="bug number 619486" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619487" id="619487" title="bug number 619487" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619489" id="619489" title="bug number 619489" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633932" id="633932" title="bug number 633932" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633934" id="633934" title="bug number 633934" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636923" id="636923" title="bug number 636923" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0397" id="CVE-2010-0397" title="CVE-2010-0397" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1860" id="CVE-2010-1860" title="CVE-2010-1860" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1862" id="CVE-2010-1862" title="CVE-2010-1862" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1864" id="CVE-2010-1864" title="CVE-2010-1864" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1866" id="CVE-2010-1866" title="CVE-2010-1866" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1914" id="CVE-2010-1914" title="CVE-2010-1914" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1915" id="CVE-2010-1915" title="CVE-2010-1915" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917" id="CVE-2010-1917" title="CVE-2010-1917" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2093" id="CVE-2010-2093" title="CVE-2010-2093" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2094" id="CVE-2010-2094" title="CVE-2010-2094" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2097" id="CVE-2010-2097" title="CVE-2010-2097" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2100" id="CVE-2010-2100" title="CVE-2010-2100" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2101" id="CVE-2010-2101" title="CVE-2010-2101" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2190" id="CVE-2010-2190" title="CVE-2010-2190" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2191" id="CVE-2010-2191" title="CVE-2010-2191" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225" id="CVE-2010-2225" title="CVE-2010-2225" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2531" id="CVE-2010-2531" title="CVE-2010-2531" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2950" id="CVE-2010-2950" title="CVE-2010-2950" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3062" id="CVE-2010-3062" title="CVE-2010-3062" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3063" id="CVE-2010-3063" title="CVE-2010-3063" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3064" id="CVE-2010-3064" title="CVE-2010-3064" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3065" id="CVE-2010-3065" title="CVE-2010-3065" type="cve"/>
  </references>
  <description>PHP was updated to version 5.3.3 to fix serveral security
issues.

(CVE-2010-0397, CVE-2010-1860, CVE-2010-1862,
CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915,
CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097,
CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191,
CVE-2010-2225, CVE-2010-2531, CVE-2010-2950, CVE-2010-3062,
CVE-2010-3063, CVE-2010-3064, CVE-2010-3065)
</description>
  <pkglist>
    <collection>
        <package name="apache2-mod_php5" arch="i586" version="5.3.3" release="0.1.2">
          <filename>apache2-mod_php5-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="apache2-mod_php5" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>apache2-mod_php5-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-bcmath-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-bcmath-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-bz2" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-bz2-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-bz2" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-bz2-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-calendar" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-calendar-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-calendar" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-calendar-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-ctype" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-ctype-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-ctype" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-ctype-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-curl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-curl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-curl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-curl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-dba" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-dba-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-dba" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-dba-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-devel" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-devel-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-devel" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-devel-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-dom" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-dom-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-dom" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-dom-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-enchant" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-enchant-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-enchant" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-enchant-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-exif" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-exif-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-exif" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-exif-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-fastcgi-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-fastcgi-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-fileinfo-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-fileinfo-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-ftp" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-ftp-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-ftp" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-ftp-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-gd" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-gd-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-gd" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-gd-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-gettext" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-gettext-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-gettext" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-gettext-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-gmp" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-gmp-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-gmp" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-gmp-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-hash" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-hash-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-hash" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-hash-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-iconv" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-iconv-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-iconv" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-iconv-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-imap" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-imap-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-imap" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-imap-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-intl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-intl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-intl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-intl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-json" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-json-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-json" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-json-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-ldap" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-ldap-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-ldap" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-ldap-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-mbstring-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-mbstring-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-mcrypt-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-mcrypt-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-mysql" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-mysql-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-mysql" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-mysql-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-odbc" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-odbc-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-odbc" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-odbc-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-openssl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-openssl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-openssl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-openssl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pcntl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pcntl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pdo" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pdo-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pdo" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pdo-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pear" arch="noarch" version="5.3.3" release="0.1.2">
          <filename>php5-pear-5.3.3-0.1.2.noarch.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pgsql-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pgsql-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-phar" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-phar-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-phar" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-phar-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-posix" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-posix-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-posix" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-posix-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-pspell" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-pspell-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-pspell" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-pspell-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-readline" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-readline-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-readline" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-readline-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-shmop" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-shmop-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-shmop" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-shmop-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-snmp" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-snmp-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-snmp" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-snmp-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-soap" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-soap-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-soap" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-soap-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sockets" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sockets-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sockets" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sockets-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sqlite-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sqlite-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-suhosin-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-suhosin-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sysvmsg-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sysvmsg-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sysvsem-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sysvsem-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-sysvshm-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-sysvshm-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-tidy" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-tidy-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-tidy" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-tidy-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-tokenizer-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-tokenizer-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-wddx" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-wddx-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-wddx" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-wddx-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xmlreader-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xmlreader-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xmlrpc-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xmlrpc-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xmlwriter-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xmlwriter-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-xsl" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-xsl-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-xsl" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-xsl-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-zip" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-zip-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-zip" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-zip-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="php5-zlib" arch="i586" version="5.3.3" release="0.1.2">
          <filename>php5-zlib-5.3.3-0.1.2.i586.rpm</filename>
        </package>
        <package name="php5-zlib" arch="x86_64" version="5.3.3" release="0.1.2">
          <filename>php5-zlib-5.3.3-0.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4db9a1c6f547129a7ba0b581d6254caa"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2877">
  <id>iscsitarget</id>
  <title>iscsitarget/tgt: multiple buffer overflows fixed</title>
  <release>openSUSE 11.3</release>
  <issued date="1281025255"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618574" id="618574" title="bug number 618574" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2221" id="CVE-2010-2221" title="CVE-2010-2221" type="cve"/>
  </references>
  <description>This update of iscscitarget/tgt fixes multiple overflows
and a format string vulnerability:
- CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability
  (CWE-134)
</description>
  <pkglist>
    <collection>
        <package name="iscsitarget" arch="i586" version="1.4.19" release="4.1.1">
          <filename>iscsitarget-1.4.19-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget" arch="x86_64" version="1.4.19" release="4.1.1">
          <filename>iscsitarget-1.4.19-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-default" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-default-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-default" arch="x86_64" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-default-1.4.19_k2.6.34.0_12-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-desktop" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-desktop-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-desktop" arch="x86_64" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-desktop-1.4.19_k2.6.34.0_12-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-pae" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-pae-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-xen" arch="i586" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-xen-1.4.19_k2.6.34.0_12-4.1.1.i586.rpm</filename>
        </package>
        <package name="iscsitarget-kmp-xen" arch="x86_64" version="1.4.19_k2.6.34.0_12" release="4.1.1">
          <filename>iscsitarget-kmp-xen-1.4.19_k2.6.34.0_12-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9b74cdb843432feb8f09b3e35de01b33"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2874">
  <id>tgt</id>
  <title>iscsitarget/tgt: multiple buffer overflows fixed</title>
  <release>openSUSE 11.3</release>
  <issued date="1281025203"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618574" id="618574" title="bug number 618574" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=592928" id="592928" title="bug number 592928" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2221" id="CVE-2010-2221" title="CVE-2010-2221" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0743" id="CVE-2010-0743" title="CVE-2010-0743" type="cve"/>
  </references>
  <description>This update of iscscitarget/tgt fixes multiple overflows
and a format string vulnerability:
- CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability
  (CWE-134)
</description>
  <pkglist>
    <collection>
        <package name="tgt" arch="i586" version="0.9.0" release="7.1.1">
          <filename>tgt-0.9.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="tgt" arch="x86_64" version="0.9.0" release="7.1.1">
          <filename>tgt-0.9.0-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b8696a6c72ba928fbcc55724f615e36e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3055">
  <id>pam_mount</id>
  <title>pam_mount: Avoid useless warning output</title>
  <release>openSUSE 11.3</release>
  <issued date="1283346063"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626127" id="626127" title="bug number 626127" type="bugzilla"/>
  </references>
  <description>Do not warn about missing fskeyhash when no fskey is
specified.
</description>
  <pkglist>
    <collection>
        <package name="pam_mount" arch="i586" version="1.34" release="3.2.1">
          <filename>pam_mount-1.34-3.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="pam_mount" arch="x86_64" version="1.34" release="3.2.1">
          <filename>pam_mount-1.34-3.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="pam_mount-32bit" arch="x86_64" version="1.34" release="3.2.1">
          <filename>pam_mount-32bit-1.34-3.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="da94ffa45509fc34c666f5c86c595410"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3082">
  <id>python-xlib</id>
  <title>python-xlib: Fixed cannot connect to display problem</title>
  <release>openSUSE 11.3</release>
  <issued date="1283863681"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623507" id="623507" title="bug number 623507" type="bugzilla"/>
  </references>
  <description>A bug where python-xlib could not connect to local displays
was fixed. (bnc#623507)
</description>
  <pkglist>
    <collection>
        <package name="python-xlib" arch="i586" version="0.14" release="90.1.1">
          <filename>python-xlib-0.14-90.1.1.i586.rpm</filename>
        </package>
        <package name="python-xlib" arch="x86_64" version="0.14" release="90.1.1">
          <filename>python-xlib-0.14-90.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bb5b71fd7148a30e8daa6e27f0034bd5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2739">
  <id>tomcat6</id>
  <title>tomcat security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527633"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622188" id="622188" title="bug number 622188" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2227" id="CVE-2010-2227" title="CVE-2010-2227" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1157" id="CVE-2010-1157" title="CVE-2010-1157" type="cve"/>
  </references>
  <description>This update of tomcat fixes denial of service and
information disclosure vulnerabilities which could
potentially be exploited by remote attackers to crash
tomcat or to obtain sensitive information (CVE-2010-2227,
CVE-2010-1157).
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-admin-webapps-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-docs-webapp-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-el-1_0-api" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-el-1_0-api-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-javadoc-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-jsp-2_1-api-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-lib-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-servlet-2_5-api-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.24" release="5.1.1">
          <filename>tomcat6-webapps-6.0.24-5.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f4d61c91f7de0dba12b7fc732a7ec3e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2903">
  <id>libvirt</id>
  <title>libvirt security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1281448033"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618155" id="618155" title="bug number 618155" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619991" id="619991" title="bug number 619991" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2237" id="CVE-2010-2237" title="CVE-2010-2237" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2238" id="CVE-2010-2238" title="CVE-2010-2238" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2239" id="CVE-2010-2239" title="CVE-2010-2239" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2242" id="CVE-2010-2242" title="CVE-2010-2242" type="cve"/>
  </references>
  <description>libvirt did not properly handle configured disk formats
which potenially allowed users to read arbitrary files
(CVE-2010-2237, CVE-2010-2238, CVE-2010-2239)

Improperly mapped source privileged ports in guests may
allow obtaining privileged resources on the host
(CVE-2010-2242).
</description>
  <pkglist>
    <collection>
        <package name="libvirt" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-client-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-client" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-client-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-devel-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-devel-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-doc-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-doc-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-python" arch="i586" version="0.8.1" release="4.2.1">
          <filename>libvirt-python-0.8.1-4.2.1.i586.rpm</filename>
        </package>
        <package name="libvirt-python" arch="x86_64" version="0.8.1" release="4.2.1">
          <filename>libvirt-python-0.8.1-4.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="abb34e6ed4d720d7dcc00eb8ca96550a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3117">
  <id>libtiff-devel</id>
  <title>libtiff security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284583468"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624215" id="624215" title="bug number 624215" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087" id="CVE-2010-3087" title="CVE-2010-3087" type="cve"/>
  </references>
  <description>specially crafted tiff files could cause a memory
corruption in libtiff. Attackers could potentially exploit
that to execute arbitrary code in applications that use
libtiff for processing tiff files (CVE-2010-3087).
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.2.1">
          <filename>libtiff-devel-3.9.2-5.2.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff-devel-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff-devel-32bit-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.2.1">
          <filename>libtiff3-3.9.2-5.2.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff3-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>libtiff3-32bit-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.2.1">
          <filename>tiff-3.9.2-5.2.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.2.1">
          <filename>tiff-3.9.2-5.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4c0b25572497cbde8fae1186f2281e5a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3132">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Security update to 3.6.10</title>
  <release>openSUSE 11.3</release>
  <issued date="1284631529"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla Firefox was updated to version 3.6.10, fixing
various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for  completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-branding-upstream-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-branding-upstream-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-common-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-common-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-other-3.6.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.10" release="0.3.1">
          <filename>MozillaFirefox-translations-other-3.6.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-js192-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-js192-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-js192-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.10-0.4.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.10" release="0.4.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.10-0.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="88f2cbbbab1f3b99edf6fb069cecbe65"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3105">
  <id>kernel</id>
  <title>kernel: security and bugfix update to 2.6.34.7</title>
  <release>openSUSE 11.3</release>
  <issued date="1284592469"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633543" id="633543" title="bug number 633543" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637436" id="637436" title="bug number 637436" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=600948" id="600948" title="bug number 600948" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636112" id="636112" title="bug number 636112" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633581" id="633581" title="bug number 633581" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632309" id="632309" title="bug number 632309" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628604" id="628604" title="bug number 628604" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635862" id="635862" title="bug number 635862" type="bugzilla"/>
  </references>
  <description>The openSUSE 11.3 kernel was updated to versiuon 2.6.34.7.
It fixes lots of bugs and security issues.

A major regression in handling some USB Input devices (Mice
and Keyboard) introduced by the previous update was fixed.

Fixed lots of bugs in the ATH5K wireless driver.

Following security issues were fixed: CVE-2010-3078: A XFS
stack memory information disclosure was fixed.

CVE-2010-2954: A NULL pointer dereference in the IRDA stack
was fixed, which could lead to kernel crashes.

CVE-2010-2959: A privilege escalation possibility in the
CAN bus protocol module can_bcm was fixed.

CVE-2010-2942: Several memory leaks in the net scheduling
code were fixed.

CVE-2010-2803: Fixed kernel memory information leaks from
DRM ioctls.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-debug-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-default-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-desktop-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.2.2">
          <filename>kernel-devel-2.6.34.7-0.2.2.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-extra-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-ec2-extra-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-pae-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-pae-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-pae-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.2.2">
          <filename>kernel-source-2.6.34.7-0.2.2.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.2.2">
          <filename>kernel-source-vanilla-2.6.34.7-0.2.2.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-syms-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-syms-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-trace-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vanilla-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vmi-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vmi-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-vmi-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-base-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-base-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-devel-2.6.34.7-0.2.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.2.2">
          <filename>kernel-xen-devel-2.6.34.7-0.2.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.2-19.1.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.2-19.1.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.2-19.1.2.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.2" release="19.1.2">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.2-19.1.2.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ed3e62706da760c33362255aa25e7896"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3136">
  <id>kmps</id>
  <title>ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283989118"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637880" id="637880" title="bug number 637880" type="bugzilla"/>
  </references>
  <description>The ndiswrapper, wacom and lirc kernel modules needed to be
rebuilt after the last kernel update.
</description>
  <pkglist>
    <collection>
        <package name="liblirc_client0" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="liblirc_client0" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="liblirc_client0-32bit" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>liblirc_client0-32bit-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-devel" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-devel" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-devel-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-default" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-desktop" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="lirc-kmp-pae" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-pae-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="i586" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.i586.rpm</filename>
        </package>
        <package name="lirc-kmp-xen" arch="x86_64" version="0.8.6_0.8.7pre1_k2.6.34.7_0.2" release="0.1.2">
          <filename>lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.7_0.2-0.1.2.x86_64.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="i586" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.i586.rpm</filename>
        </package>
        <package name="lirc-remotes" arch="x86_64" version="0.8.6_0.8.7pre1" release="0.1.1">
          <filename>lirc-remotes-0.8.6_0.8.7pre1-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="i586" version="1.55" release="8.1.2">
          <filename>ndiswrapper-1.55-8.1.2.i586.rpm</filename>
        </package>
        <package name="ndiswrapper" arch="x86_64" version="1.55" release="8.1.2">
          <filename>ndiswrapper-1.55-8.1.2.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="i586" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.7_0.2-8.1.2.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-default" arch="x86_64" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-default-1.55_k2.6.34.7_0.2-8.1.2.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="i586" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.7_0.2-8.1.2.i586.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-desktop" arch="x86_64" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-desktop-1.55_k2.6.34.7_0.2-8.1.2.x86_64.rpm</filename>
        </package>
        <package name="ndiswrapper-kmp-pae" arch="i586" version="1.55_k2.6.34.7_0.2" release="8.1.2">
          <filename>ndiswrapper-kmp-pae-1.55_k2.6.34.7_0.2-8.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-default" arch="x86_64" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-default-0.8.1_k2.6.34.7_0.2-11.1.2.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-desktop" arch="x86_64" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-desktop-0.8.1_k2.6.34.7_0.2-11.1.2.x86_64.rpm</filename>
        </package>
        <package name="wacom-kmp-pae" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-pae-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-xen" arch="i586" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-xen-0.8.1_k2.6.34.7_0.2-11.1.2.i586.rpm</filename>
        </package>
        <package name="wacom-kmp-xen" arch="x86_64" version="0.8.1_k2.6.34.7_0.2" release="11.1.2">
          <filename>wacom-kmp-xen-0.8.1_k2.6.34.7_0.2-11.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e1e3048ba55b8c28635500353ce179fa"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3138">
  <id>seamonkey</id>
  <title>seamonkey: Security update to 2.0.8</title>
  <release>openSUSE 11.3</release>
  <issued date="1284724491"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla Seamonkey 2.0 was updated to version 2.0.8, fixing
various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-dom-inspector-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-dom-inspector-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-irc-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-irc-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-common-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-common-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-other-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-translations-other-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.8" release="0.3.1">
          <filename>seamonkey-venkman-2.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.8" release="0.3.1">
          <filename>seamonkey-venkman-2.0.8-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="be86c69e5fa10afc95539fde0801fe92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3137">
  <id>dovecot12</id>
  <title>dovecot security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284723241"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640005" id="640005" title="bug number 640005" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3304" id="CVE-2010-3304" title="CVE-2010-3304" type="cve"/>
  </references>
  <description>When using Maildir all  ACLs on INBOX were copied to newly
created mailboxes although only default ACLs should have
been copied (CVE-2010-3304).
</description>
  <pkglist>
    <collection>
        <package name="dovecot12" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-mysql-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-mysql-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-pgsql-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-pgsql-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-sqlite-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-backend-sqlite-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-devel-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-devel-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-lucene-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-lucene-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="i586" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-solr-1.2.11-3.1.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="x86_64" version="1.2.11" release="3.1.1">
          <filename>dovecot12-fts-solr-1.2.11-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f1e7112169d9e184e5af5e359cc59b1"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2988">
  <id>virt-manager</id>
  <title>xen: Collective update for xen</title>
  <release>openSUSE 11.3</release>
  <issued date="1282605744"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626262" id="626262" title="bug number 626262" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=584204" id="584204" title="bug number 584204" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625520" id="625520" title="bug number 625520" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613529" id="613529" title="bug number 613529" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623833" id="623833" title="bug number 623833" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625003" id="625003" title="bug number 625003" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605186" id="605186" title="bug number 605186" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623438" id="623438" title="bug number 623438" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624285" id="624285" title="bug number 624285" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623201" id="623201" title="bug number 623201" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620694" id="620694" title="bug number 620694" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=586221" id="586221" title="bug number 586221" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599550" id="599550" title="bug number 599550" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604611" id="604611" title="bug number 604611" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609153" id="609153" title="bug number 609153" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612189" id="612189" title="bug number 612189" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610658" id="610658" title="bug number 610658" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608191" id="608191" title="bug number 608191" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608194" id="608194" title="bug number 608194" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=569744" id="569744" title="bug number 569744" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606882" id="606882" title="bug number 606882" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=591799" id="591799" title="bug number 591799" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607219" id="607219" title="bug number 607219" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603008" id="603008" title="bug number 603008" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605182" id="605182" title="bug number 605182" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599929" id="599929" title="bug number 599929" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629226" id="629226" title="bug number 629226" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629261" id="629261" title="bug number 629261" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613957" id="613957" title="bug number 613957" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627449" id="627449" title="bug number 627449" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626299" id="626299" title="bug number 626299" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624250" id="624250" title="bug number 624250" type="bugzilla"/>
  </references>
  <description>Collective Xen Update, fixing the following reports:

Xen Hypervisor and Tools bnc#626262 - Populate-on-demand
memory problem on xen with hvm guest bnc#584204 - xm
usb-list broken bnc#625520 - TP-L3: NMI cannot be triggered
for xen kernel bnc#613529 - TP-L3: kdump kernel hangs when
crash was initiated from xen kernel bnc#623833 - Error in
Xend-API method VM_set_actions_after_crash bnc#625003 - Fix
vm config options coredump-{restart,destroy} bnc#605186 -
Squelch harmless error messages in block-iscsi bnc#623438 -
Add ability to control SCSI device path scanning in xend
bnc#624285 - TP-L3: xen rdtsc emulation reports wrong
frequency bnc#623201 - drbd xvd will fail in new xen4
packages due to wrong popen2 arguments in blkif.py
bnc#620694 - Xen yast vm-install for existing
paravirtualized disk fails with UnboundLocalError: local
variable 'dev_type' referenced before assignment bnc#586221
- cannot add DomU with USB host controller defined
bnc#599550 - Xen cannot distinguish the status of 'pause'
bnc#604611 - Do not store vif device details when vif
config contains invalid mac address. bnc#609153 - xm
migrate &lt;domain_name&gt; localhost -l fails on Windows VMs
bnc#612189 - Clear APIC Timer Initial Count Register when
masking timer interrupt bnc#610658 - XEN: PXE boot fails
for fully virtualized guests - e1000 virtual nic.
bnc#608191 - /var/adm/fillup-templates/sysconfig.xend from
package xen-tools is no a valid sysconfig file bnc#608194 -
/etc/xen/* config files are not packaged with noreplace
bnc#569744 - SLE HVM guest clock/timezone is incorrect
after reboot bnc#606882 - Allow spaces in vbd path names
bnc#591799 - The status of Caps Lock is incorrect in domU
bnc#607219 - AMD Erratum 383 workaround for Xen bnc#603008
- On an 8 Socket Nehalem-EX system, the fix for 593536
causes a hang during network setup. bnc#605182 -
/etc/xen/scripts/xen-hotplug-cleanup: line 24: [: !=: unary
operator expected bnc#599929 - Hot add/remove Kawela NIC
device over 500 times will cause guest domain crash

Virtual Machine Installer (vm-install) bnc#629226 -
vm-install --vm-settings does not work with kvm config
bnc#629261 - vm-install for KVM fails if more than one ISO
image is configured bnc#613957 - Fedora 13 PV DomU can't be
installed with virt-manager bnc#627449 - Wrong MAC assigned
to NIC card when using KVM when installing machine using
vm-install bnc#626299 - vmdk wont work with virt-manager

Virtual Machine Manager (virt-manager) bnc#624250 - L3:
virt-manager doesn't update &quot;Autostart&quot; setting in vm
configuration correctly
</description>
  <pkglist>
    <collection>
        <package name="virt-manager" arch="i586" version="0.8.4" release="5.1.1">
          <filename>virt-manager-0.8.4-5.1.1.i586.rpm</filename>
        </package>
        <package name="virt-manager" arch="x86_64" version="0.8.4" release="5.1.1">
          <filename>virt-manager-0.8.4-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="vm-install" arch="i586" version="0.4.26" release="0.1.1">
          <filename>vm-install-0.4.26-0.1.1.i586.rpm</filename>
        </package>
        <package name="vm-install" arch="x86_64" version="0.4.26" release="0.1.1">
          <filename>vm-install-0.4.26-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-devel-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-devel" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-devel-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-html-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-html-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-pdf-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-doc-pdf-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="i586" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-default-4.0.0_21091_06_k2.6.34.0_12-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="x86_64" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-default-4.0.0_21091_06_k2.6.34.0_12-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="i586" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-desktop-4.0.0_21091_06_k2.6.34.0_12-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="x86_64" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-desktop-4.0.0_21091_06_k2.6.34.0_12-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-pae" arch="i586" version="4.0.0_21091_06_k2.6.34.0_12" release="0.1.1">
          <filename>xen-kmp-pae-4.0.0_21091_06_k2.6.34.0_12-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-libs-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-libs-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-tools" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="i586" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-domU-4.0.0_21091_06-0.1.1.i586.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="x86_64" version="4.0.0_21091_06" release="0.1.1">
          <filename>xen-tools-domU-4.0.0_21091_06-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9a48c4cfa1b57258588b7815ee70c16b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3110">
  <id>libQtWebKit-devel</id>
  <title>libQtWebKit4: Fix Flash Player 10.1 support</title>
  <release>openSUSE 11.3</release>
  <issued date="1284586965"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613818" id="613818" title="bug number 613818" type="bugzilla"/>
  </references>
  <description>This update initializes gtk2 before invoking the flash
player initialisation, as it crashes otherwise.
</description>
  <pkglist>
    <collection>
        <package name="libQtWebKit-devel" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit-devel-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libQtWebKit-devel" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit-devel-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libQtWebKit4" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit4-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libQtWebKit4" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit4-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libQtWebKit4-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libQtWebKit4-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-devel" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-devel-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-devel" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-devel-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-qt3support" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-qt3support-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-qt3support" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-qt3support-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-qt3support-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-qt3support-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-sql" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql-sqlite" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-sqlite-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-sql-sqlite" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-sqlite-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-sql-sqlite-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-sql-sqlite-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-x11" arch="i586" version="4.6.3" release="2.1.1">
          <filename>libqt4-x11-4.6.3-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqt4-x11" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-x11-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libqt4-x11-32bit" arch="x86_64" version="4.6.3" release="2.1.1">
          <filename>libqt4-x11-32bit-4.6.3-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e7f90a5d8add7dd775f1e8f0fe26aed6"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3104">
  <id>postfix</id>
  <title>postfix: Collective update for postfix</title>
  <release>openSUSE 11.3</release>
  <issued date="1284473445"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625657" id="625657" title="bug number 625657" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=586486" id="586486" title="bug number 586486" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622873" id="622873" title="bug number 622873" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- #625657: SuSEconfig.postfix and smtp_use_tls
- #622873: postfix doesn't start if ipv6 is disabled
- #627632: /etc/postfix/virtual.db is older than source
  file /etc/postfix/virtual
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-devel-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-devel-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.2.1">
          <filename>postfix-doc-2.7.1-2.2.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-mysql-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-mysql-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.2.1">
          <filename>postfix-postgresql-2.7.1-2.2.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.2.1">
          <filename>postfix-postgresql-2.7.1-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-mail" arch="noarch" version="2.18.5" release="2.1.1">
          <filename>yast2-mail-2.18.5-2.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-mail-plugins" arch="noarch" version="2.18.5" release="2.1.1">
          <filename>yast2-mail-plugins-2.18.5-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="72800e6c726875b81faa5d3b0d4f387d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3107">
  <id>cups</id>
  <title>cups: Set CUPS default size of RIPCache  to 128 MB</title>
  <release>openSUSE 11.3</release>
  <issued date="1284583963"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628233" id="628233" title="bug number 628233" type="bugzilla"/>
  </references>
  <description>The CUPS upstream default &quot;RIPCache 8m&quot; is too small for
nowadays higher resolution printing and can cause various
kind of printout failures (see CUPS STR 3535 at
http://www.cups.org/str.php?L3535 and the openSUSE Bugzilla
bug 628233). Such issues are avoided with a default
&quot;RIPCache 128m&quot; setting. If needed a different value can be
explicitly specified in /etc/cups/cupsd.conf via a line
like &quot;RIPCache 256m&quot;.
</description>
  <pkglist>
    <collection>
        <package name="cups" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-client" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-client-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-client" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-client-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-ddk" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-ddk-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-ddk" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-ddk-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-devel" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-devel-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-devel" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-devel-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-libs" arch="i586" version="1.4.4" release="3.1.1">
          <filename>cups-libs-1.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="cups-libs" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-libs-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-libs-32bit" arch="x86_64" version="1.4.4" release="3.1.1">
          <filename>cups-libs-32bit-1.4.4-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2aa806510b3bfa91d1245b25981ab9b4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3111">
  <id>libgphoto2</id>
  <title>libgphoto2: Fixed Olympus x-750 camera cannot be mounted</title>
  <release>openSUSE 11.3</release>
  <issued date="1284583710"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634208" id="634208" title="bug number 634208" type="bugzilla"/>
  </references>
  <description>This update fixes incorrect detection of mass storage
cameras as ptp cameras:
- bnc#634208: gphoto: Olympus x-750 camera cannot be mounted
</description>
  <pkglist>
    <collection>
        <package name="libgphoto2" arch="i586" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-2.4.9-4.1.1.i586.rpm</filename>
        </package>
        <package name="libgphoto2" arch="x86_64" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-2.4.9-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgphoto2-32bit" arch="x86_64" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-32bit-2.4.9-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgphoto2-devel" arch="i586" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-devel-2.4.9-4.1.1.i586.rpm</filename>
        </package>
        <package name="libgphoto2-devel" arch="x86_64" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-devel-2.4.9-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libgphoto2-lang" arch="noarch" version="2.4.9" release="4.1.1">
          <filename>libgphoto2-lang-2.4.9-4.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d69e5e453eb077a610413e892cb2668e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3170">
  <id>flash-player</id>
  <title>flash-player security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285055945"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639541" id="639541" title="bug number 639541" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2884" id="CVE-2010-2884" title="CVE-2010-2884" type="cve"/>
  </references>
  <description>Flash Player was updated to version 10.1.85.3 to fix a
critical security issue (CVE-2010-2884).
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.85.3" release="0.1.1">
          <filename>flash-player-10.1.85.3-0.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="88444f657c04ca8cab3adb2bf83ec5f3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3173">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1285037798"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639709" id="639709" title="bug number 639709" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638274" id="638274" title="bug number 638274" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635425" id="635425" title="bug number 635425" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635413" id="635413" title="bug number 635413" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634637" id="634637" title="bug number 634637" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638277" id="638277" title="bug number 638277" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639708" id="639708" title="bug number 639708" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639728" id="639728" title="bug number 639728" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637502" id="637502" title="bug number 637502" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639483" id="639483" title="bug number 639483" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639481" id="639481" title="bug number 639481" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639482" id="639482" title="bug number 639482" type="bugzilla"/>
  </references>
  <description>This update of the openSUSE 11.3 kernel fixes two local
root exploits, various other security issues and some bugs.

Following security issues are fixed by this update:
CVE-2010-3301: Mismatch between 32bit and 64bit register
usage in the system call entry path could be used by local
attackers to gain root privileges. This problem only
affects x86_64 kernels.

CVE-2010-3081: Incorrect buffer handling in the
biarch-compat buffer handling could be used by local
attackers to gain root privileges. This problem affects
foremost x86_64, or potentially other biarch platforms,
like PowerPC and S390x.

CVE-2010-3084: A buffer overflow in the ETHTOOL_GRXCLSRLALL
code could be used to crash the kernel or potentially
execute code.

CVE-2010-2955: A kernel information leak via the WEXT ioctl
was fixed.

CVE-2010-2960: The keyctl_session_to_parent function in
security/keys/keyctl.c in the Linux kernel expects that a
certain parent session keyring exists, which allows local
users to cause a denial of service (NULL pointer
dereference and system crash) or possibly have unspecified
other impact via a KEYCTL_SESSION_TO_PARENT argument to the
keyctl function.

CVE-2010-3080: A double free in an alsa error path was
fixed, which could lead to kernel crashes.

CVE-2010-3079: Fixed a ftrace NULL pointer dereference
problem which could lead to kernel crashes.

CVE-2010-3298: Fixed a kernel information leak in the
net/usb/hso driver.

CVE-2010-3296: Fixed a kernel information leak in the cxgb3
driver.

CVE-2010-3297: Fixed a kernel information leak in the
net/eql driver.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-debug-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-default-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.3.1">
          <filename>kernel-devel-2.6.34.7-0.3.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-pae-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-pae-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-pae-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.3.1">
          <filename>kernel-source-2.6.34.7-0.3.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.3.1">
          <filename>kernel-source-vanilla-2.6.34.7-0.3.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-syms-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-syms-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-trace-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vmi-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vmi-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-vmi-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-base-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-base-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-devel-2.6.34.7-0.3.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.3.1">
          <filename>kernel-xen-devel-2.6.34.7-0.3.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.3-19.1.3.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.3-19.1.3.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.3-19.1.3.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.3" release="19.1.3">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.3-19.1.3.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="13872b4180866950c95a2565b8265480"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3115">
  <id>ldapsmb</id>
  <title>samba security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284586719"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=567013" id="567013" title="bug number 567013" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=573246" id="573246" title="bug number 573246" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=592198" id="592198" title="bug number 592198" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599873" id="599873" title="bug number 599873" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613459" id="613459" title="bug number 613459" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617153" id="617153" title="bug number 617153" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619787" id="619787" title="bug number 619787" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630812" id="630812" title="bug number 630812" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632055" id="632055" title="bug number 632055" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632852" id="632852" title="bug number 632852" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637218" id="637218" title="bug number 637218" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3069" id="CVE-2010-3069" title="CVE-2010-3069" type="cve"/>
  </references>
  <description>A buffer overflow in the sid_parse() function of samba
could potentially be exploited by remote attackers to
execute arbitrary code (CVE-2010-3069).

Additionally the update also contains fixes for the
following non-security issues:

bnc#567013 - Failed to join ADS Domain bnc#573246 - mounted
shares via mount.cifs disappear when dhclient renews lease
bnc#592198 - Samba 3.0 / 3.2 doesn't work with Windows 2008
R2 (NTLMv2) bnc#599873 - SAMBA - Problem using NTLM
authentication with 2008R2 bnc#613459 - winbindd crashes in
rpccli_set_timeout bnc#617153 - new printers are not seen
in samba with registry bnc#619787 - Samba Causes Too Many
Files In Use Error On Windows 7 bnc#630812 - net ads join
failing due to malformed UPN bnc#632055 - No authentication
dialog to access SMB share through Nautilus bnc#632852 -
root preexec does not work as expected
</description>
  <pkglist>
    <collection>
        <package name="ldapsmb" arch="i586" version="1.34b" release="5.1.2">
          <filename>ldapsmb-1.34b-5.1.2.i586.rpm</filename>
        </package>
        <package name="ldapsmb" arch="x86_64" version="1.34b" release="5.1.2">
          <filename>ldapsmb-1.34b-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libldb-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libldb-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libldb-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libldb-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libldb0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libldb0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libldb0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libldb0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libnetapi-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libnetapi-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libnetapi0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libnetapi0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libnetapi0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libnetapi0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbclient-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbclient-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbclient0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbclient0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbclient0-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libsmbsharemodes0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtalloc-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtalloc-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtalloc2" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtalloc2-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtalloc2" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtalloc2-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtdb-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtdb-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtdb1" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtdb1-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtdb1" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtdb1-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtdb1-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtdb1-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtevent-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtevent-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libtevent0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libtevent0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libtevent0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libtevent0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libwbclient-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libwbclient-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0" arch="i586" version="3.5.4" release="5.1.2">
          <filename>libwbclient0-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="libwbclient0" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libwbclient0-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>libwbclient0-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-client" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-client-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-client" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-client-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-client-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-client-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-devel" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-devel-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-devel" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-devel-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-doc" arch="noarch" version="3.5.4" release="5.1.1">
          <filename>samba-doc-3.5.4-5.1.1.noarch.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-krb-printing-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-krb-printing-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind" arch="i586" version="3.5.4" release="5.1.2">
          <filename>samba-winbind-3.5.4-5.1.2.i586.rpm</filename>
        </package>
        <package name="samba-winbind" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-winbind-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind-32bit" arch="x86_64" version="3.5.4" release="5.1.2">
          <filename>samba-winbind-32bit-3.5.4-5.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6c3051a4927013b3038e41497d05506d"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2998">
  <id>libgdiplus0</id>
  <title>mono: libgdiplus image processing integer overflow vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1282659439"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630756" id="630756" title="bug number 630756" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1526" id="CVE-2010-1526" title="CVE-2010-1526" type="cve"/>
  </references>
  <description>This update fixes three integer overflows found by Secunia
Research member Stefan Cornelius that could possibly be
exploited to execute arbitrary code:
- &quot;gdip_load_tiff_image()&quot; by processing specially crafted
  TIFF images
- &quot;gdip_load_jpeg_image_internal()&quot; by processing specially
  crafted JPEG images
- &quot;gdip_read_bmp_image()&quot;by processing specially crafted
  BMP image (CVE-2010-1526)
</description>
  <pkglist>
    <collection>
        <package name="libgdiplus0" arch="i586" version="2.6.4" release="2.1.1">
          <filename>libgdiplus0-2.6.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libgdiplus0" arch="x86_64" version="2.6.4" release="2.1.1">
          <filename>libgdiplus0-2.6.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4060aa7c59bd870811ff835bc2e1edf3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3187">
  <id>libwebkit</id>
  <title>libwebkit security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284983987"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640409" id="640409" title="bug number 640409" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1781" id="CVE-2010-1781" title="CVE-2010-1781" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1782" id="CVE-2010-1782" title="CVE-2010-1782" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1784" id="CVE-2010-1784" title="CVE-2010-1784" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1785" id="CVE-2010-1785" title="CVE-2010-1785" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1786" id="CVE-2010-1786" title="CVE-2010-1786" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1787" id="CVE-2010-1787" title="CVE-2010-1787" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1788" id="CVE-2010-1788" title="CVE-2010-1788" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1790" id="CVE-2010-1790" title="CVE-2010-1790" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1792" id="CVE-2010-1792" title="CVE-2010-1792" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1793" id="CVE-2010-1793" title="CVE-2010-1793" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2648" id="CVE-2010-2648" title="CVE-2010-2648" type="cve"/>
  </references>
  <description>The browser engine libwebkit was updated to version 1.2.4
to fix several security bugs. (CVE-2010-1781,
CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786,
CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792,
CVE-2010-1793, CVE-2010-2648)
</description>
  <pkglist>
    <collection>
        <package name="libwebkit-1_0-2" arch="i586" version="1.2.4" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.4-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>libwebkit-1_0-2-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2-32bit" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>libwebkit-1_0-2-32bit-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="i586" version="1.2.4" release="0.1.1">
          <filename>libwebkit-devel-1.2.4-0.1.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>libwebkit-devel-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-lang" arch="noarch" version="1.2.4" release="0.1.1">
          <filename>libwebkit-lang-1.2.4-0.1.1.noarch.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="i586" version="1.2.4" release="0.1.1">
          <filename>webkit-jsc-1.2.4-0.1.1.i586.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="x86_64" version="1.2.4" release="0.1.1">
          <filename>webkit-jsc-1.2.4-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a589a440bf6f461b51820bd7247ef1e8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3106">
  <id>yast2-gtk</id>
  <title>yast2-gtk: Update to version 2.21.70 fixing several bugs</title>
  <release>openSUSE 11.3</release>
  <issued date="1284582860"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624310" id="624310" title="bug number 624310" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632377" id="632377" title="bug number 632377" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633173" id="633173" title="bug number 633173" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633498" id="633498" title="bug number 633498" type="bugzilla"/>
  </references>
  <description>This update of yast2-gtk fixes the following bugs:
bnc#624310: File &gt; Import and Export menu items faltering
(gtk) bnc#632377: Volatile package count in the filter box
(gtk) bnc#633173: Crash when selecting esoteric filename
(gtk) bnc#633498: Correlate window size to font size (gtk)
</description>
  <pkglist>
    <collection>
        <package name="yast2-gtk" arch="i586" version="2.21.70" release="2.2.1">
          <filename>yast2-gtk-2.21.70-2.2.1.i586.rpm</filename>
        </package>
        <package name="yast2-gtk" arch="x86_64" version="2.21.70" release="2.2.1">
          <filename>yast2-gtk-2.21.70-2.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ec6755d54e99e75db7894c2f2c10d1ae"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3113">
  <id>pm-utils</id>
  <title>pm-utils: This updates fixes a wrong function use</title>
  <release>openSUSE 11.3</release>
  <issued date="1284582785"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623290" id="623290" title="bug number 623290" type="bugzilla"/>
  </references>
  <description>The log() is declared in the pm-functions. But pm-functions
includes functions. The correct solution is to put the
log() into the functions. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="pm-utils" arch="i586" version="1.3.0" release="10.1.1">
          <filename>pm-utils-1.3.0-10.1.1.i586.rpm</filename>
        </package>
        <package name="pm-utils" arch="x86_64" version="1.3.0" release="10.1.1">
          <filename>pm-utils-1.3.0-10.1.1.x86_64.rpm</filename>
        </package>
        <package name="pm-utils-ndiswrapper" arch="i586" version="1.3.0" release="10.1.1">
          <filename>pm-utils-ndiswrapper-1.3.0-10.1.1.i586.rpm</filename>
        </package>
        <package name="pm-utils-ndiswrapper" arch="x86_64" version="1.3.0" release="10.1.1">
          <filename>pm-utils-ndiswrapper-1.3.0-10.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="cccc3fa1550c195c3c7be4f7ec3714b9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3128">
  <id>kde-201009</id>
  <title>KDE 4.4 Collective Update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284020481"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626053" id="626053" title="bug number 626053" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=571546" id="571546" title="bug number 571546" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=601711" id="601711" title="bug number 601711" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619563" id="619563" title="bug number 619563" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619753" id="619753" title="bug number 619753" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620232" id="620232" title="bug number 620232" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623459" id="623459" title="bug number 623459" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=627419" id="627419" title="bug number 627419" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609396" id="609396" title="bug number 609396" type="bugzilla"/>
  </references>
  <description>- #626053: Initial online update umbrella bug
  akonadi-runtime:
* Fix mysql upgrade errors on akonadi startup (bnc#571546)

kdelibs4:
* Currently Spell checker treats numbers as misspelled
  words: https://bugs.kde.org/show_bug.cgi?id=238026
* Spell checker ignores 'ignore all caps' settings:
  https://bugs.kde.org/show_bug.cgi?id=244907
* Fix resource deallocation crash in Nepomuk

kdepimlibs4:
* POP3 mails sometimes not deleted on server (bko#230072)
* KMail address autocompletion broken
  (bko#237511,bnc#627419)
* 'No resource agents found' Akonadi error on start
  (bko#236538)
* Skype doesn't work from KAddressbook (bko#240617)
* Crash on activating caldav calendar (bko#236462)
* KOrganizer crash on startup (bko#242191)
* Performance fixes on PIM search
* Move spamassassin requirement to kdepim4 (bnc#619563)
* 'No resource agents found' Akonadi error on start
  (bko#236538) 

kdebase4-runtime:
* Patch Soprano backend identification, fixes KMail address
  auto-completion (bko#231546)
* Fix reference counting bug in Nepomuk recent search cache
* Fix bug in exclude filters for file indexing
* Add runtime dependency on soprano-backend-redland,
  otherwise Nepomuk will not work (bnc#619753)
  kdebase4-runtime:
* Fix missing system tray and widget icons due to improper
  package splitting of shared default desktop theme
  elements (bnc#623459)

kdebase4-workspace:
* Dragging a wallpaper to the desktop when not in Image
  wallpaper mode sets Slideshow mode instead of Image
  (bko#245606)

kdepim4:
* Take spamassassin runtime dependency from kdepimlibs4

* KAddressBook
  ** CSV import not working (bko#242063)
  ** CSV export does not export PO Box (bko#240635)
  ** New Contact not disabled when no contacts exist
   (bko#238375)
  * KOrganizer
  ** Editing events removes prior recurrences (bko#226394)
  ** Fix KMail composer autocompletion
   (bko#237511,bnc#627419, bko#244256)
  ** Increase/Decrease indent buttons nonfunctional
   (bko#244882)
  ** Restore autosave files on restart (bko#236229)
  ** Fix message-status header parsing (bko#112724)
  ** Fix crash on mail redirect with no transports
  * Blogilo
  ** Crash on inserting image (bko#226776)
  * KAlarm
  ** Crash when updating reminder alarms (bko#244507)
* KMail
    ** Adding addresses to the address book is broken
(bnc#627419)

kdepim4-runtime
  * Fix KMail GSSAPI authentication
  * Take spamassassin runtime dependency from kdepimlibs4
</description>
  <pkglist>
    <collection>
        <package name="akonadi-runtime" arch="i586" version="1.3.1" release="6.1.1">
          <filename>akonadi-runtime-1.3.1-6.1.1.i586.rpm</filename>
        </package>
        <package name="akonadi-runtime" arch="x86_64" version="1.3.1" release="6.1.1">
          <filename>akonadi-runtime-1.3.1-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="akregator" arch="i586" version="4.4.4" release="3.1.1">
          <filename>akregator-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="akregator" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>akregator-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="blogilo" arch="i586" version="4.4.4" release="3.1.1">
          <filename>blogilo-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="blogilo" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>blogilo-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kaddressbook" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kaddressbook-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kaddressbook" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kaddressbook-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kalarm" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kalarm-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kalarm" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kalarm-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kde4-kgreeter-plugins" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kde4-kgreeter-plugins-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kde4-kgreeter-plugins" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kde4-kgreeter-plugins-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-runtime" arch="i586" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="kdebase4-runtime" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-runtime-branding-upstream" arch="i586" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-branding-upstream-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="kdebase4-runtime-branding-upstream" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-branding-upstream-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-runtime-xine" arch="i586" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-xine-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="kdebase4-runtime-xine" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>kdebase4-runtime-xine-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-branding-upstream" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-branding-upstream-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-branding-upstream" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-branding-upstream-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-devel" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-devel-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-devel" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-devel-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-google-gadgets" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-google-gadgets-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-google-gadgets" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-google-gadgets-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-ksysguardd" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-ksysguardd-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-ksysguardd" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdebase4-workspace-ksysguardd-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-core-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-core-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-doc-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdelibs4-doc-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdepim4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdepim4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdepim4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdepim4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-runtime" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-runtime" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-runtime-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-runtime-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdepim4-runtime-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-wizards" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kdepim4-wizards-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-wizards" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kdepim4-wizards-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdepimlibs4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdepimlibs4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdepimlibs4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdepimlibs4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdm" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdm-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdm" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdm-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdm-branding-upstream" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kdm-branding-upstream-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kdm-branding-upstream" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kdm-branding-upstream-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="kjots" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kjots-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kjots" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kjots-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kmail" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kmail-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kmail" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kmail-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="knode" arch="i586" version="4.4.4" release="3.1.1">
          <filename>knode-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="knode" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>knode-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="knotes" arch="i586" version="4.4.4" release="3.1.1">
          <filename>knotes-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="knotes" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>knotes-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kontact" arch="i586" version="4.4.4" release="3.1.1">
          <filename>kontact-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="kontact" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>kontact-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="korganizer" arch="i586" version="4.4.4" release="3.1.1">
          <filename>korganizer-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="korganizer" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>korganizer-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="ktimetracker" arch="i586" version="4.4.4" release="3.1.1">
          <filename>ktimetracker-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="ktimetracker" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>ktimetracker-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="kwin" arch="i586" version="4.4.4" release="6.1.1">
          <filename>kwin-4.4.4-6.1.1.i586.rpm</filename>
        </package>
        <package name="kwin" arch="x86_64" version="4.4.4" release="6.1.1">
          <filename>kwin-4.4.4-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libakonadi4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libakonadi4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libakonadi4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libakonadi4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals-devel" arch="i586" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals-devel-1.3.1-6.1.1.i586.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals-devel" arch="x86_64" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals-devel-1.3.1-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals1" arch="i586" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals1-1.3.1-6.1.1.i586.rpm</filename>
        </package>
        <package name="libakonadiprotocolinternals1" arch="x86_64" version="1.3.1" release="6.1.1">
          <filename>libakonadiprotocolinternals1-1.3.1-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkde4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkde4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkde4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-32bit" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkde4-32bit-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkde4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkde4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-32bit" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-32bit-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdecore4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepim4" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepim4" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepim4-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepim4-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libkdepim4-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepimlibs4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepimlibs4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepimlibs4-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdepimlibs4-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdepimlibs4-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall-devel-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall-devel-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="i586" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall1-4.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall1-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1-32bit" arch="x86_64" version="4.4.4" release="3.1.1">
          <filename>libksuseinstall1-32bit-4.4.4-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="plasma-theme-oxygen" arch="i586" version="4.4.4" release="3.1.2">
          <filename>plasma-theme-oxygen-4.4.4-3.1.2.i586.rpm</filename>
        </package>
        <package name="plasma-theme-oxygen" arch="x86_64" version="4.4.4" release="3.1.2">
          <filename>plasma-theme-oxygen-4.4.4-3.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="87bb2197e93cf80f12414658f9e48ae9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3186">
  <id>yast2-apparmor</id>
  <title>yast2-apparmor: This update fixes the function of AppArmor YaST module (control center)</title>
  <release>openSUSE 11.3</release>
  <issued date="1285118593"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635830" id="635830" title="bug number 635830" type="bugzilla"/>
  </references>
  <description>This update fixes a packaging bug in yast2-apparmor
(Immunix/Notify.pm component located outside Perl @INC
path), due to which some parts of AppArmor YaST modules,
especially its control center, were broken.
</description>
  <pkglist>
    <collection>
        <package name="yast2-apparmor" arch="noarch" version="2.19.1" release="0.1.1">
          <filename>yast2-apparmor-2.19.1-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="756a6a434c2a02e4a020c6807df86da1"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3185">
  <id>iotop</id>
  <title>iotop: It shows too high values. Fixed by this update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285117074"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617281" id="617281" title="bug number 617281" type="bugzilla"/>
  </references>
  <description>Because of changed alignment in the data iotop used T/s and
P/s instead of K/s or M/s on x86-64 systems. This update
fixes iotop and take the coorect field size from the data
header and then displays the correct values.
</description>
  <pkglist>
    <collection>
        <package name="iotop" arch="i586" version="0.2.1" release="38.1.1">
          <filename>iotop-0.2.1-38.1.1.i586.rpm</filename>
        </package>
        <package name="iotop" arch="x86_64" version="0.2.1" release="38.1.1">
          <filename>iotop-0.2.1-38.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e407d6748749e6e6024e5bb37c13be0e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3183">
  <id>bzip2</id>
  <title>bzip2 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285112657"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636978" id="636978" title="bug number 636978" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405" id="CVE-2010-0405" title="CVE-2010-0405" type="cve"/>
  </references>
  <description>This update fixes an integer overflow in the BZ2_decompress
function of bzip2/libbz2. This can be exploited via a
crafted archive to cause a denial of service or even
execute arbitrary code. (CVE-2010-0405)
</description>
  <pkglist>
    <collection>
        <package name="bzip2" arch="i586" version="1.0.5" release="39.1.1">
          <filename>bzip2-1.0.5-39.1.1.i586.rpm</filename>
        </package>
        <package name="bzip2" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>bzip2-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
        <package name="bzip2-doc" arch="noarch" version="1.0.5" release="39.1.1">
          <filename>bzip2-doc-1.0.5-39.1.1.noarch.rpm</filename>
        </package>
        <package name="libbz2-1" arch="i586" version="1.0.5" release="39.1.1">
          <filename>libbz2-1-1.0.5-39.1.1.i586.rpm</filename>
        </package>
        <package name="libbz2-1" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>libbz2-1-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
        <package name="libbz2-1-32bit" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>libbz2-1-32bit-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
        <package name="libbz2-devel" arch="i586" version="1.0.5" release="39.1.1">
          <filename>libbz2-devel-1.0.5-39.1.1.i586.rpm</filename>
        </package>
        <package name="libbz2-devel" arch="x86_64" version="1.0.5" release="39.1.1">
          <filename>libbz2-devel-1.0.5-39.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8d06266e05317178f56e01e86d56acc2"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3228">
  <id>libiw-devel</id>
  <title>wireless-tools: Fix crash in iwevent</title>
  <release>openSUSE 11.3</release>
  <issued date="1285885827"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639111" id="639111" title="bug number 639111" type="bugzilla"/>
  </references>
  <description>Avoid overflow and increase the buffer to dump hex in
iwevent(1) (bnc#639111).
</description>
  <pkglist>
    <collection>
        <package name="libiw-devel" arch="i586" version="30.pre8" release="12.1.1">
          <filename>libiw-devel-30.pre8-12.1.1.i586.rpm</filename>
        </package>
        <package name="libiw-devel" arch="x86_64" version="30.pre8" release="12.1.1">
          <filename>libiw-devel-30.pre8-12.1.1.x86_64.rpm</filename>
        </package>
        <package name="libiw30" arch="i586" version="30.pre8" release="12.1.1">
          <filename>libiw30-30.pre8-12.1.1.i586.rpm</filename>
        </package>
        <package name="libiw30" arch="x86_64" version="30.pre8" release="12.1.1">
          <filename>libiw30-30.pre8-12.1.1.x86_64.rpm</filename>
        </package>
        <package name="wireless-tools" arch="i586" version="30.pre8" release="12.1.1">
          <filename>wireless-tools-30.pre8-12.1.1.i586.rpm</filename>
        </package>
        <package name="wireless-tools" arch="x86_64" version="30.pre8" release="12.1.1">
          <filename>wireless-tools-30.pre8-12.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ff7a03a098dc213be2a45f665b5ebc41"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3127">
  <id>xorg-x11-driver-input</id>
  <title>xorg-x11-driver-input: Update for clickpad and synaptics touchpad devices</title>
  <release>openSUSE 11.3</release>
  <issued date="1284592721"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620000" id="620000" title="bug number 620000" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620328" id="620328" title="bug number 620328" type="bugzilla"/>
  </references>
  <description>Lots of fixes for synaptics touchpad device, especially for
clickpad device:
- Fix / improve the behavior in clickpad button area
- Fix left/right-button capability check
- Fix 64bit compatibility
- Avoid unexpected jumps by multiple finger touches
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11-driver-input" arch="i586" version="7.5" release="9.1.1">
          <filename>xorg-x11-driver-input-7.5-9.1.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-driver-input" arch="x86_64" version="7.5" release="9.1.1">
          <filename>xorg-x11-driver-input-7.5-9.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="37b439436163e073e7df1927e0984c78"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3080">
  <id>gwenview</id>
  <title>okular security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283423842"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634743" id="634743" title="bug number 634743" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2575" id="CVE-2010-2575" title="CVE-2010-2575" type="cve"/>
  </references>
  <description>This update fixes a heap-based overflow in okular. The RLE
decompression in the TranscribePalmImageToJPEG() function
can be exploited to execute arbitrary code with user
privileges by providing a crafted PDF file. (CVE-2010-2575).
</description>
  <pkglist>
    <collection>
        <package name="gwenview" arch="i586" version="4.4.4" release="2.1.1">
          <filename>gwenview-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="gwenview" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>gwenview-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kcolorchooser" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kcolorchooser-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kcolorchooser" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kcolorchooser-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kdegraphics4" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kdegraphics4-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kdegraphics4" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kdegraphics4-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kgamma" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kgamma-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kgamma" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kgamma-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kio_kamera" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kio_kamera-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kio_kamera" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kio_kamera-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kolourpaint" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kolourpaint-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kolourpaint" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kolourpaint-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="kruler" arch="i586" version="4.4.4" release="2.1.1">
          <filename>kruler-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="kruler" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>kruler-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="ksnapshot" arch="i586" version="4.4.4" release="2.1.1">
          <filename>ksnapshot-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="ksnapshot" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>ksnapshot-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdcraw-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdcraw-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdcraw-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdcraw-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkdcraw8" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkdcraw8-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkdcraw8" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkdcraw8-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkexiv2-8" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-8-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkexiv2-8" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-8-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkexiv2-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkexiv2-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkexiv2-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkipi-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkipi-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkipi-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkipi-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libkipi7" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libkipi7-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libkipi7" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libkipi7-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksane-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libksane-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libksane-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libksane-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libksane0" arch="i586" version="4.4.4" release="2.1.1">
          <filename>libksane0-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libksane0" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>libksane0-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="okular" arch="i586" version="4.4.4" release="2.1.1">
          <filename>okular-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="okular" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>okular-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="okular-devel" arch="i586" version="4.4.4" release="2.1.1">
          <filename>okular-devel-4.4.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="okular-devel" arch="x86_64" version="4.4.4" release="2.1.1">
          <filename>okular-devel-4.4.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a6a9a0427a14a0620493b55da308559d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3201">
  <id>kst</id>
  <title>kst: Update to final 2.0.0</title>
  <release>openSUSE 11.3</release>
  <issued date="1285336513"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=548228" id="548228" title="bug number 548228" type="bugzilla"/>
  </references>
  <description>This updates to the final 2.0.0 release with various fixes
and packaging improvements.
</description>
  <pkglist>
    <collection>
        <package name="kst" arch="i586" version="2.0.0.0" release="0.1.1">
          <filename>kst-2.0.0.0-0.1.1.i586.rpm</filename>
        </package>
        <package name="kst" arch="x86_64" version="2.0.0.0" release="0.1.1">
          <filename>kst-2.0.0.0-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="kst-devel" arch="i586" version="2.0.0.0" release="0.1.1">
          <filename>kst-devel-2.0.0.0-0.1.1.i586.rpm</filename>
        </package>
        <package name="kst-devel" arch="x86_64" version="2.0.0.0" release="0.1.1">
          <filename>kst-devel-2.0.0.0-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="44c9da2412f96e7ae2f12866fdab2c2e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3236">
  <id>opensuse-gnomequick_de-pdf</id>
  <title>opensuse-manuals_de: Update of the German Translation of the openSUSE Documentation</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807370"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639823" id="639823" title="bug number 639823" type="bugzilla"/>
  </references>
  <description>This is the final update of the German translation of the
openSUSE documentation.
</description>
  <pkglist>
    <collection>
        <package name="opensuse-gnomequick_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-gnomequick_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-installquick_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-installquick_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdequick_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-kdequick_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_de" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-manuals_de-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-reference_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-reference_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-startup_de-pdf" arch="noarch" version="11.3" release="1.1.1">
          <filename>opensuse-startup_de-pdf-11.3-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="016e127353bdbae52f15f6a3f66fbf9a"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2969">
  <id>yast2-ncurses-pkg</id>
  <title>yast2-ncurses-pkg: This update fixes a problem with showing patterns and sorting of the them.</title>
  <release>openSUSE 11.3</release>
  <issued date="1282264933"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624996" id="624996" title="bug number 624996" type="bugzilla"/>
  </references>
  <description>General problem with showing patterns:

Patterns may be available or not. There was a problem with
sorting the categories. The category containing the pattern
with the highest priority should be the first in the list.
The bug in the ncurses package selector: if there was more
than one category with the same order (priority) only one
was stored in an internal set, so sometimes SLMS patterns
were shown, sometimes not.
</description>
  <pkglist>
    <collection>
        <package name="yast2-ncurses-pkg" arch="i586" version="2.19.4" release="1.1.1">
          <filename>yast2-ncurses-pkg-2.19.4-1.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-ncurses-pkg" arch="x86_64" version="2.19.4" release="1.1.1">
          <filename>yast2-ncurses-pkg-2.19.4-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="eed8891c855fdc5625db820413b29d27"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3275">
  <id>acroread</id>
  <title>acroread security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286478701"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638466" id="638466" title="bug number 638466" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2883" id="CVE-2010-2883" title="CVE-2010-2883" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2884" id="CVE-2010-2884" title="CVE-2010-2884" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2887" id="CVE-2010-2887" title="CVE-2010-2887" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2889" id="CVE-2010-2889" title="CVE-2010-2889" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2890" id="CVE-2010-2890" title="CVE-2010-2890" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3619" id="CVE-2010-3619" title="CVE-2010-3619" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3620" id="CVE-2010-3620" title="CVE-2010-3620" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3621" id="CVE-2010-3621" title="CVE-2010-3621" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3622" id="CVE-2010-3622" title="CVE-2010-3622" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3623" id="CVE-2010-3623" title="CVE-2010-3623" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3624" id="CVE-2010-3624" title="CVE-2010-3624" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3625" id="CVE-2010-3625" title="CVE-2010-3625" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3626" id="CVE-2010-3626" title="CVE-2010-3626" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3627" id="CVE-2010-3627" title="CVE-2010-3627" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3628" id="CVE-2010-3628" title="CVE-2010-3628" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3629" id="CVE-2010-3629" title="CVE-2010-3629" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3630" id="CVE-2010-3630" title="CVE-2010-3630" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3631" id="CVE-2010-3631" title="CVE-2010-3631" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3632" id="CVE-2010-3632" title="CVE-2010-3632" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3656" id="CVE-2010-3656" title="CVE-2010-3656" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3657" id="CVE-2010-3657" title="CVE-2010-3657" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3658" id="CVE-2010-3658" title="CVE-2010-3658" type="cve"/>
  </references>
  <description>Specially crafted PDF documents could crash acroread or
lead to execution of arbitrary code (CVE-2010-2883,
CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890,
CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622,
CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,
CVE-2010-3627, CVE-2010-3628, CVE-2010-3629, CVE-2010-3630,
CVE-2010-3631, CVE-2010-3632, CVE-2010-3656, CVE-2010-3657,
CVE-2010-3658).
</description>
  <pkglist>
    <collection>
        <package name="acroread" arch="i586" version="9.4" release="0.1.1">
          <filename>acroread-9.4-0.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="11bf9c3698a4f32debc3b53a02f5aa11"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3219">
  <id>opensuse-apparmor-quick_en-pdf</id>
  <title>opensuse-manuals_en: General openSUSE documentation update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807387"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639823" id="639823" title="bug number 639823" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626368" id="626368" title="bug number 626368" type="bugzilla"/>
  </references>
  <description>This is the next general openSUSE Documentation Update.
Especially,  the Security Guide is now up-to-date.
</description>
  <pkglist>
    <collection>
        <package name="opensuse-apparmor-quick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-apparmor-quick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-apps_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-apps_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-gnomequick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-gnomequick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-gnomeuser_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-gnomeuser_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-installquick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-installquick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdequick_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-kdequick_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdeuser_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-kdeuser_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_en" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-manuals_en-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-reference_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-reference_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-security_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-security_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-startup_en-pdf" arch="noarch" version="11.3" release="6.1.1">
          <filename>opensuse-startup_en-pdf-11.3-6.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="933b6bd9dda9e3282b8213e42081c079"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3259">
  <id>krb5</id>
  <title>krb5 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286399237"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640990" id="640990" title="bug number 640990" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1322" id="CVE-2010-1322" title="CVE-2010-1322" type="cve"/>
  </references>
  <description>remote authenticated clients could crash the kdc
(CVE-2010-1322).
</description>
  <pkglist>
    <collection>
        <package name="krb5" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-32bit" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-32bit-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-client" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-client-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-client" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-client-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-devel-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-devel" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-devel-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel-32bit" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-devel-32bit-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" arch="i586" version="1.8.1" release="5.1.1">
          <filename>krb5-server-1.8.1-5.1.1.i586.rpm</filename>
        </package>
        <package name="krb5-server" arch="x86_64" version="1.8.1" release="5.1.1">
          <filename>krb5-server-1.8.1-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0de7529b85fd8845fdf2eaa8174dec19"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3218">
  <id>perl-Bootloader</id>
  <title>perl-Bootloader:  The update fixes an enumeration bug in perl-Bootloader</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807365"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626132" id="626132" title="bug number 626132" type="bugzilla"/>
  </references>
  <description>This bugs is fixed by using udev devices for device mapper
now.
</description>
  <pkglist>
    <collection>
        <package name="perl-Bootloader" arch="i586" version="0.5.12.1" release="0.1.1">
          <filename>perl-Bootloader-0.5.12.1-0.1.1.i586.rpm</filename>
        </package>
        <package name="perl-Bootloader" arch="x86_64" version="0.5.12.1" release="0.1.1">
          <filename>perl-Bootloader-0.5.12.1-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f98c93fe4e79db95b2ee1e49ee37f12"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3226">
  <id>lilo</id>
  <title>lilo: Fix device-mapper support</title>
  <release>openSUSE 11.3</release>
  <issued date="1285886940"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642400" id="642400" title="bug number 642400" type="bugzilla"/>
  </references>
  <description>This update adds device-mapper support to lilo (bnc#642400).
</description>
  <pkglist>
    <collection>
        <package name="lilo" arch="i586" version="22.8" release="48.1.1">
          <filename>lilo-22.8-48.1.1.i586.rpm</filename>
        </package>
        <package name="lilo" arch="x86_64" version="22.8" release="48.1.1">
          <filename>lilo-22.8-48.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3561711407b55f4ba346ebb9cb14b576"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3154">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Security update to 3.0.7</title>
  <release>openSUSE 11.3</release>
  <issued date="1284652660"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird 3.0 was updated to version 3.0.7,
fixing various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-devel-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-devel-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-common-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-common-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-other-3.0.8-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.8" release="0.3.1">
          <filename>MozillaThunderbird-translations-other-3.0.8-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="3.3.1">
          <filename>enigmail-1.0.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="3.3.1">
          <filename>enigmail-1.0.1-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="304674e113be0505ef0fdcd161330c41"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3141">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Security update to 1.9.1.13</title>
  <release>openSUSE 11.3</release>
  <issued date="1284724806"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637303" id="637303" title="bug number 637303" type="bugzilla"/>
  </references>
  <description>Mozilla XULRunner 1.9.1 was updated to version 1.9.1.13,
fixing various bugs and security issues.

Following security issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying DLL.

As this is a Windows only problem, it does not affect the
Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL &lt;tree&gt; objects could be manipulated such that the
setting of certain properties on the object would trigger
the removal of the tree from the DOM and cause certain
sections of deleted memory to be accessed. In products
based on Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1)
and newer this memory has been overwritten by a value that
will cause an unexploitable crash. In products based on
Gecko version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and
SeaMonkey 2.0) and older an attacker could potentially use
this vulnerability to crash a victim's browser and run
arbitrary code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL &lt;tree&gt;'s content view
contains a dangling pointer vulnerability. One of the
content view's methods for accessing the internal structure
of the tree could be manipulated into removing a node prior
to accessing it, resulting in the accessing of deleted
memory. If an attacker can control the contents of the
deleted memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer.

This issue probably does not affect the Linux builds and so
is listed for  completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges.

Michal Zalewski's recent contributions helped to identify
this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
moz_bug_r_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an &lt;object&gt; tag can override the charset of a
framed HTML document, even when the document is included
across origins. A page could be constructed containing such
an &lt;object&gt; tag which sets the charset of the framed
document to UTF-7. This could potentially allow an attacker
to inject UTF-7 encoded JavaScript into a site, bypassing
the site's XSS filters, and then executing the code using
the above technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.

This issue was also independently reported to Mozilla by
Nicholas Berthaume
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.13" release="0.3.1">
          <filename>python-xpcom191-1.9.1.13-0.3.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.13" release="0.3.1">
          <filename>python-xpcom191-1.9.1.13-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5f2b42f07586830be7780c7ed2578c98"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3299">
  <id>kvm</id>
  <title>kvm: Collective update for kvm</title>
  <release>openSUSE 11.3</release>
  <issued date="1286803971"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603179" id="603179" title="bug number 603179" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=598298" id="598298" title="bug number 598298" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621793" id="621793" title="bug number 621793" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619991" id="619991" title="bug number 619991" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603161" id="603161" title="bug number 603161" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610682" id="610682" title="bug number 610682" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599095" id="599095" title="bug number 599095" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=598271" id="598271" title="bug number 598271" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637297" id="637297" title="bug number 637297" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640093" id="640093" title="bug number 640093" type="bugzilla"/>
  </references>
  <description>The following bugs are fixed by this update:
- Bug 603179-  Same MAC used to often by KVM
- Bug 598298 - restoring a KVM guest using Realtek 8139
  results broken guest networking
- Bug 621793 - sles11-sp1-jeos xen image failed to boot in
  testdrive
- Bug 619991 - libvirt doesn't accept &quot;cache=writeback&quot;
  anymore
- Bug 603161 - 11.3 / FACTORY ISOs don't boot in FACTORY's
  kvm
- Bug 610682 - KVM doesn't boot multiboot images
- Bug 599095 - SLE11SP1 kvm version slows down building
  dramatically (flushing)
- Bug 598271 - kvm not build with libaio/linux-aio support
  due to missing BuildReq
- Bug 637297 - Revert Changed WB behavior 
- Bug 640093 - Change default memory from 384MB to 512MB,
  which is in keeping with the default used by vm-install.
</description>
  <pkglist>
    <collection>
        <package name="kvm" arch="i586" version="0.12.5" release="1.2.1">
          <filename>kvm-0.12.5-1.2.1.i586.rpm</filename>
        </package>
        <package name="kvm" arch="x86_64" version="0.12.5" release="1.2.1">
          <filename>kvm-0.12.5-1.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a34fee3651b37f0fe3076adafe6eed1f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2976">
  <id>libHX22</id>
  <title>libHX: buffer overflow in HX_split()</title>
  <release>openSUSE 11.3</release>
  <issued date="1282565395"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631582" id="631582" title="bug number 631582" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2947" id="CVE-2010-2947" title="CVE-2010-2947" type="cve"/>
  </references>
  <description>This update fixes a heap-based buffer overflow in
HX_split() of libHX. (CVE-2010-2947)
</description>
  <pkglist>
    <collection>
        <package name="libHX22" arch="i586" version="3.4" release="2.1.1">
          <filename>libHX22-3.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="libHX22" arch="x86_64" version="3.4" release="2.1.1">
          <filename>libHX22-3.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="libHX22-32bit" arch="x86_64" version="3.4" release="2.1.1">
          <filename>libHX22-32bit-3.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="35cdbe0ae41b2eede7a95bdce718ab94"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3322">
  <id>freetype2</id>
  <title>freetype2 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286990517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633938" id="633938" title="bug number 633938" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633943" id="633943" title="bug number 633943" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641580" id="641580" title="bug number 641580" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3311" id="CVE-2010-3311" title="CVE-2010-3311" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3053" id="CVE-2010-3053" title="CVE-2010-3053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3054" id="CVE-2010-3054" title="CVE-2010-3054" type="cve"/>
  </references>
  <description>When loading specially crafted font files applications
linked against freetype2 could crash or potentially even
execute arbitrary code (CVE-2010-3311, CVE-2010-3053,
CVE-2010-3054).
</description>
  <pkglist>
    <collection>
        <package name="freetype2-devel" arch="i586" version="2.3.12" release="7.2.1">
          <filename>freetype2-devel-2.3.12-7.2.1.i586.rpm</filename>
        </package>
        <package name="freetype2-devel" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>freetype2-devel-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
        <package name="freetype2-devel-32bit" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>freetype2-devel-32bit-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" arch="i586" version="2.3.12" release="7.2.1">
          <filename>libfreetype6-2.3.12-7.2.1.i586.rpm</filename>
        </package>
        <package name="libfreetype6" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>libfreetype6-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-32bit" arch="x86_64" version="2.3.12" release="7.2.1">
          <filename>libfreetype6-32bit-2.3.12-7.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a8ee0d4865546d7ed0f2ac2582580694"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3081">
  <id>OpenOffice_org-draw</id>
  <title>OpenOffice_org security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1283762238"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629085" id="629085" title="bug number 629085" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2935" id="CVE-2010-2935" title="CVE-2010-2935" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2936" id="CVE-2010-2936" title="CVE-2010-2936" type="cve"/>
  </references>
  <description>Specially crafted ppt files could cause a heap based buffer
overflow in OpenOffice_org Impress. Attackers could exploit
that to crash OpenOffice_org or potentially even execute
arbitrary code (CVE-2010-2935, CVE-2010-2936).
</description>
  <pkglist>
    <collection>
        <package name="OpenOffice_org-draw" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-draw-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-draw" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-draw-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-devel" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-devel-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-devel" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-devel-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-l10n-prebuilt" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-l10n-prebuilt-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-impress-l10n-prebuilt" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-impress-l10n-prebuilt-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-devel" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-devel-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-devel" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-devel-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-l10n-prebuilt" arch="i586" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-l10n-prebuilt-3.2.1.4-2.1.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org-libs-gui-l10n-prebuilt" arch="x86_64" version="3.2.1.4" release="2.1.1">
          <filename>OpenOffice_org-libs-gui-l10n-prebuilt-3.2.1.4-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f3c1e132352912583f94eb60c2703be5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3328">
  <id>squid3</id>
  <title>squid: remote crash by trusted client</title>
  <release>openSUSE 11.3</release>
  <issued date="1287079765"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637287" id="637287" title="bug number 637287" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3072" id="CVE-2010-3072" title="CVE-2010-3072" type="cve"/>
  </references>
  <description>A remote trusted client can cause a NULL pointer
dereference within squid to make it crash. (CVE-2010-3072:
CVSS v2 Base Score: 5.0)
</description>
  <pkglist>
    <collection>
        <package name="squid3" arch="i586" version="3.0.STABLE25" release="2.1.1">
          <filename>squid3-3.0.STABLE25-2.1.1.i586.rpm</filename>
        </package>
        <package name="squid3" arch="x86_64" version="3.0.STABLE25" release="2.1.1">
          <filename>squid3-3.0.STABLE25-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4e5c455484d450163ae99bb1a926a403"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3324">
  <id>opera</id>
  <title>opera: Opera 10.63 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1287074236"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646108" id="646108" title="bug number 646108" type="bugzilla"/>
  </references>
  <description>Opera 10.63 fixes some security issues as described in
their changelog:
http://www.opera.com/docs/changelogs/unix/1063/
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.63" release="1.1.1">
          <filename>opera-10.63-1.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.63" release="1.1.1">
          <filename>opera-10.63-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="opera-gtk" arch="i586" version="10.63" release="1.1.1">
          <filename>opera-gtk-10.63-1.1.1.i586.rpm</filename>
        </package>
        <package name="opera-gtk" arch="x86_64" version="10.63" release="1.1.1">
          <filename>opera-gtk-10.63-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="opera-kde4" arch="i586" version="10.63" release="1.1.1">
          <filename>opera-kde4-10.63-1.1.1.i586.rpm</filename>
        </package>
        <package name="opera-kde4" arch="x86_64" version="10.63" release="1.1.1">
          <filename>opera-kde4-10.63-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d0a7d8f91194d49d17006fb488ba2923"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3315">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1286531094"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613835" id="613835" title="bug number 613835" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=614670" id="614670" title="bug number 614670" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638709" id="638709" title="bug number 638709" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640338" id="640338" title="bug number 640338" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640568" id="640568" title="bug number 640568" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640721" id="640721" title="bug number 640721" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641479" id="641479" title="bug number 641479" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642009" id="642009" title="bug number 642009" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=644046" id="644046" title="bug number 644046" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3310" id="CVE-2010-3310" title="CVE-2010-3310" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2962" id="CVE-2010-2962" title="CVE-2010-2962" type="cve"/>
  </references>
  <description>This updated openSUSE 11.3 kernel fixes the following
security bugs:

CVE-2010-3310: local users could corrupt kernel heap memory
via ROSE sockets.

CVE-2010-2962: local users could write to any kernel memory
location via the i915 GEM ioctl interface.

Additionally the update restores the
compat_alloc_userspace() inline function and includes
several other bug fixes.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-debug-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-default-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.4.1">
          <filename>kernel-devel-2.6.34.7-0.4.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-pae-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-pae-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-pae-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.4.1">
          <filename>kernel-source-2.6.34.7-0.4.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.4.1">
          <filename>kernel-source-vanilla-2.6.34.7-0.4.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-syms-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-syms-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-trace-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vmi-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vmi-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-vmi-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-base-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-base-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-devel-2.6.34.7-0.4.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.4.1">
          <filename>kernel-xen-devel-2.6.34.7-0.4.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.4-19.1.7.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.4-19.1.7.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.4-19.1.7.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.4" release="19.1.7">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.4-19.1.7.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="aa292ed251e943e5657cebd5c7f4fcf2"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3093">
  <id>mipv6d</id>
  <title>mipv6d security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284119771"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=424311" id="424311" title="bug number 424311" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2522" id="CVE-2010-2522" title="CVE-2010-2522" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2523" id="CVE-2010-2523" title="CVE-2010-2523" type="cve"/>
  </references>
  <description>the mipv6 daemon did not check the origin of netlink
messages, therefore allowing local users to spoof messages
(CVE-2010-2522). remote attackers could cause buffer
overflows in mipv6d (CVE-2010-2523).
</description>
  <pkglist>
    <collection>
        <package name="mipv6d" arch="i586" version="2.0.2" release="8.1.1">
          <filename>mipv6d-2.0.2-8.1.1.i586.rpm</filename>
        </package>
        <package name="mipv6d" arch="x86_64" version="2.0.2" release="8.1.1">
          <filename>mipv6d-2.0.2-8.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bea3384fc1b917010403e20143c6d993"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2797">
  <id>yast2-kerberos-server</id>
  <title>yast2-ldap-server: YaST fails to create a kerberos server configuration. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1279891585"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619549" id="619549" title="bug number 619549" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615805" id="615805" title="bug number 615805" type="bugzilla"/>
  </references>
  <description>A backwards incompatible change in the API of
yast2-ldap-server caused yast2-kerberos-server to error out
when creating a LDAP based kerberos server setup. This
updates fixes the API of yast2-ldap-server to be backwards
compatible with older versions again. Additionally
yast2-kerberos-server was fixed, to use the correct LDAP
server name when creating the initial configuration.
</description>
  <pkglist>
    <collection>
        <package name="yast2-kerberos-server" arch="noarch" version="2.18.1" release="0.1.1">
          <filename>yast2-kerberos-server-2.18.1-0.1.1.noarch.rpm</filename>
        </package>
        <package name="yast2-ldap-server" arch="i586" version="2.19.2" release="0.1.1">
          <filename>yast2-ldap-server-2.19.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-ldap-server" arch="x86_64" version="2.19.2" release="0.1.1">
          <filename>yast2-ldap-server-2.19.2-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a5c6aea3a4a0f6746025f17c6d220cbf"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3320">
  <id>choqok</id>
  <title>choqok: Fixed for the new Twitter authentication APIs</title>
  <release>openSUSE 11.3</release>
  <issued date="1286983826"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636217" id="636217" title="bug number 636217" type="bugzilla"/>
  </references>
  <description>This fixes the switch of Twitter to use OAUTH only.
- #636217: shipped version of choqok no longer works with
  Twitter due to removal of http basic auth
</description>
  <pkglist>
    <collection>
        <package name="choqok" arch="i586" version="0.9.90+svn1171227" release="1.2.1">
          <filename>choqok-0.9.90+svn1171227-1.2.1.i586.rpm</filename>
        </package>
        <package name="choqok" arch="x86_64" version="0.9.90+svn1171227" release="1.2.1">
          <filename>choqok-0.9.90+svn1171227-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="libqoauth1" arch="i586" version="1.0.1" release="2.1.1">
          <filename>libqoauth1-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="libqoauth1" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>libqoauth1-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="qoauth-devel" arch="i586" version="1.0.1" release="2.1.1">
          <filename>qoauth-devel-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="qoauth-devel" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>qoauth-devel-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="491e1a7a67f05f9d95f281271c245d91"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3354">
  <id>java-1_6_0-sun</id>
  <title>java-1_6_0-sun: Security Update to U22</title>
  <release>openSUSE 11.3</release>
  <issued date="1287492753"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646073" id="646073" title="bug number 646073" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3556" id="CVE-2010-3556" title="CVE-2010-3556" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3562" id="CVE-2010-3562" title="CVE-2010-3562" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3565" id="CVE-2010-3565" title="CVE-2010-3565" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3566" id="CVE-2010-3566" title="CVE-2010-3566" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3567" id="CVE-2010-3567" title="CVE-2010-3567" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3571" id="CVE-2010-3571" title="CVE-2010-3571" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3554" id="CVE-2010-3554" title="CVE-2010-3554" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3563" id="CVE-2010-3563" title="CVE-2010-3563" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3568" id="CVE-2010-3568" title="CVE-2010-3568" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3569" id="CVE-2010-3569" title="CVE-2010-3569" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3558" id="CVE-2010-3558" title="CVE-2010-3558" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3552" id="CVE-2010-3552" title="CVE-2010-3552" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3559" id="CVE-2010-3559" title="CVE-2010-3559" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3572" id="CVE-2010-3572" title="CVE-2010-3572" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3553" id="CVE-2010-3553" title="CVE-2010-3553" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3555" id="CVE-2010-3555" title="CVE-2010-3555" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3550" id="CVE-2010-3550" title="CVE-2010-3550" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3570" id="CVE-2010-3570" title="CVE-2010-3570" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3561" id="CVE-2010-3561" title="CVE-2010-3561" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" id="CVE-2009-3555" title="CVE-2009-3555" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321" id="CVE-2010-1321" title="CVE-2010-1321" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3549" id="CVE-2010-3549" title="CVE-2010-3549" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3557" id="CVE-2010-3557" title="CVE-2010-3557" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3541" id="CVE-2010-3541" title="CVE-2010-3541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3573" id="CVE-2010-3573" title="CVE-2010-3573" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574" id="CVE-2010-3574" title="CVE-2010-3574" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3548" id="CVE-2010-3548" title="CVE-2010-3548" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3551" id="CVE-2010-3551" title="CVE-2010-3551" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3560" id="CVE-2010-3560" title="CVE-2010-3560" type="cve"/>
  </references>
  <description>Sun Java 1.6.0 was updated to Security Update U22.

The release notes for this release are on:
http://www.oracle.com/technetwork/java/javase/6u22releasenot
es-176121.html

Security advisory page for this update:
http://www.oracle.com/technetwork/topics/security/javacpuoct
2010-176258.html

Following CVEs are tracked by the update: CVE-2010-3556
CVE-2010-3562 CVE-2010-3565 CVE-2010-3566 CVE-2010-3567
CVE-2010-3571 CVE-2010-3554 CVE-2010-3563 CVE-2010-3568
CVE-2010-3569 CVE-2010-3558 CVE-2010-3552 CVE-2010-3559
CVE-2010-3572 CVE-2010-3553 CVE-2010-3555 CVE-2010-3550
CVE-2010-3570 CVE-2010-3561 CVE-2009-3555 CVE-2010-1321
CVE-2010-3549 CVE-2010-3557 CVE-2010-3541 CVE-2010-3573
CVE-2010-3574 CVE-2010-3548 CVE-2010-3551 CVE-2010-3560
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-1.6.0.u22-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-1.6.0.u22-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u22-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u22-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u22-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u22-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u22-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u22-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u22-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u22-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u22-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u22" release="1.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u22-1.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a66c9e550edb68911c494a2f01d0da5f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3374">
  <id>festival</id>
  <title>festival security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1287619441"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642507" id="642507" title="bug number 642507" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3996" id="CVE-2010-3996" title="CVE-2010-3996" type="cve"/>
  </references>
  <description>festival_server uses an unsafe LD_LIBRARY_PATH. Local users
could exploit that to execute code as another user if that
user  runs festival_server. CVE-2010-3996 has been assigned
to this issue.
</description>
  <pkglist>
    <collection>
        <package name="festival" arch="i586" version="1.96" release="126.3.1">
          <filename>festival-1.96-126.3.1.i586.rpm</filename>
        </package>
        <package name="festival" arch="x86_64" version="1.96" release="126.3.1">
          <filename>festival-1.96-126.3.1.x86_64.rpm</filename>
        </package>
        <package name="festival-devel" arch="i586" version="1.96" release="126.3.1">
          <filename>festival-devel-1.96-126.3.1.i586.rpm</filename>
        </package>
        <package name="festival-devel" arch="x86_64" version="1.96" release="126.3.1">
          <filename>festival-devel-1.96-126.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6848dfd11d831e6725981cafd3922dc5"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3313">
  <id>whois</id>
  <title>whois: Command fails if the output contains non ASCII-US characters. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1286982539"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642681" id="642681" title="bug number 642681" type="bugzilla"/>
  </references>
  <description>Whois command is broken for .de domains, because DENIC
recently upgraded its WHOIS servers. Due to strict,
explicit US-ASCII calls that whois does, when not
configureed with ICONV support, the queries fail when the
response data contains non ASCII-US characters. This update
enables ICONV support.
</description>
  <pkglist>
    <collection>
        <package name="whois" arch="i586" version="5.0.0" release="4.1.1">
          <filename>whois-5.0.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="whois" arch="x86_64" version="5.0.0" release="4.1.1">
          <filename>whois-5.0.0-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a237ae14919841863576110a9c262adb"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3298">
  <id>hdparm</id>
  <title>hdparm: &quot;wiper.sh&quot; does not work with some SSD drives. Fixed by this update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286803506"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635920" id="635920" title="bug number 635920" type="bugzilla"/>
  </references>
  <description>wiper.sh script from hdparm package does not work with OCZ
Vertex 2E SSD (and probably with other SSD drives as well),
because the drive cannot handle arbitrarily long TRIM
payload. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="hdparm" arch="i586" version="9.28" release="4.1.1">
          <filename>hdparm-9.28-4.1.1.i586.rpm</filename>
        </package>
        <package name="hdparm" arch="x86_64" version="9.28" release="4.1.1">
          <filename>hdparm-9.28-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f774bc9498c8edd3c8e64e353b6cf79f"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3342">
  <id>info</id>
  <title>info: Fixed a problem where the info directory is empty</title>
  <release>openSUSE 11.3</release>
  <issued date="1287439121"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640417" id="640417" title="bug number 640417" type="bugzilla"/>
  </references>
  <description>This fixes a bug in the info directory handling:
- #640417: info directory is empty
</description>
  <pkglist>
    <collection>
        <package name="info" arch="i586" version="4.13a" release="4.3.1">
          <filename>info-4.13a-4.3.1.i586.rpm</filename>
        </package>
        <package name="info" arch="x86_64" version="4.13a" release="4.3.1">
          <filename>info-4.13a-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0d27f71c8c526944c6fdd4e2a5422878"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3396">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1288056103"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=564324" id="564324" title="bug number 564324" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643477" id="643477" title="bug number 643477" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647392" id="647392" title="bug number 647392" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646045" id="646045" title="bug number 646045" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=573330" id="573330" title="bug number 573330" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645066" id="645066" title="bug number 645066" type="bugzilla"/>
  </references>
  <description>This update of the openSUSE 11.3 Linux kernel fixes two
critical security issues and some bugs.

Following security issues were fixed: CVE-2010-3904: A
local privilege escalation in RDS sockets allowed local
attackers to gain privileges.

CVE-2010-2963: A problem in the compat ioctl handling in
video4linux allowed local attackers with a video device
plugged in to gain privileges on x86_64 systems.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-debug-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-debug-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-debug-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-debug-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-debug-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-debug-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-default-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-default-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-default-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-default-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-default-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-default-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-desktop-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-desktop-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-desktop-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-desktop-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.5.1">
          <filename>kernel-devel-2.6.34.7-0.5.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-pae-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-pae-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-pae-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.5.1">
          <filename>kernel-source-2.6.34.7-0.5.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.5.1">
          <filename>kernel-source-vanilla-2.6.34.7-0.5.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-syms-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-syms-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-trace-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-trace-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-trace-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-trace-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-trace-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-trace-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vanilla-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vanilla-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vmi-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vmi-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-vmi-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-xen-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-xen-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-xen-base-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-xen-base-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.5.1">
          <filename>kernel-xen-devel-2.6.34.7-0.5.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.5.1">
          <filename>kernel-xen-devel-2.6.34.7-0.5.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.5" release="19.1.8">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.5-19.1.8.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.5" release="19.1.8">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.5-19.1.8.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.5" release="19.1.8">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.5-19.1.8.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.5" release="19.1.8">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.5-19.1.8.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2fb000c38a14a96b78e19a27a88b66f1"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3356">
  <id>postgresql</id>
  <title>postgesql security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1287506693"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643771" id="643771" title="bug number 643771" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3433" id="CVE-2010-3433" title="CVE-2010-3433" type="cve"/>
  </references>
  <description>PostgreSQL functions implemented in Perl or TCL shared a
global state even across different user user ids. A user
could therefore influence functions of other users in an
unexpected or even malicious way (CVE-2010-3433).
</description>
  <pkglist>
    <collection>
        <package name="postgresql" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-contrib" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-contrib-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-contrib" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-contrib-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-devel" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-devel-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-devel" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-devel-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-docs" arch="noarch" version="8.4.5" release="0.3.1">
          <filename>postgresql-docs-8.4.5-0.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-libs" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-libs-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-libs" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-libs-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-libs-32bit" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-libs-32bit-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-plperl" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-plperl-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-plperl" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-plperl-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-plpython" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-plpython-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-plpython" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-plpython-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-pltcl" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-pltcl-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-pltcl" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-pltcl-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-server" arch="i586" version="8.4.5" release="0.3.1">
          <filename>postgresql-server-8.4.5-0.3.1.i586.rpm</filename>
        </package>
        <package name="postgresql-server" arch="x86_64" version="8.4.5" release="0.3.1">
          <filename>postgresql-server-8.4.5-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="32e930a50eca8c752cb161077c686997"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3241">
  <id>libfreebl3</id>
  <title>mozilla-nss: Update to current version for security and other fixes</title>
  <release>openSUSE 11.3</release>
  <issued date="1285887420"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637290" id="637290" title="bug number 637290" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" id="CVE-2010-3170" title="CVE-2010-3170" type="cve"/>
  </references>
  <description>The Mozilla NSS Library was updated to version 3.12.8 and
the Mozilla NSPR Library was updated to 4.8.6 to fix
various bugs and one security issue.

CVE-2010-3170: Disallow wildcard matching in X509
certificate Common Names.

This update also has preparations for Firefox 4 support,
and a updated Root Certificate Authority list.
</description>
  <pkglist>
    <collection>
        <package name="libfreebl3" arch="i586" version="3.12.8" release="1.1.1">
          <filename>libfreebl3-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="libfreebl3" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>libfreebl3-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-32bit" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>libfreebl3-32bit-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" arch="i586" version="3.12.8" release="1.1.1">
          <filename>libsoftokn3-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="libsoftokn3" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>libsoftokn3-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-32bit" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>libsoftokn3-32bit-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr" arch="i586" version="4.8.6" release="1.1.1">
          <filename>mozilla-nspr-4.8.6-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nspr" arch="x86_64" version="4.8.6" release="1.1.1">
          <filename>mozilla-nspr-4.8.6-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr-32bit" arch="x86_64" version="4.8.6" release="1.1.1">
          <filename>mozilla-nspr-32bit-4.8.6-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr-devel" arch="i586" version="4.8.6" release="1.1.1">
          <filename>mozilla-nspr-devel-4.8.6-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nspr-devel" arch="x86_64" version="4.8.6" release="1.1.1">
          <filename>mozilla-nspr-devel-4.8.6-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" arch="i586" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nss" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-32bit" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-32bit-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" arch="i586" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-certs-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-certs-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs-32bit" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-certs-32bit-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-devel" arch="i586" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-devel-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nss-devel" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-devel-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-sysinit" arch="i586" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-sysinit-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nss-sysinit" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-sysinit-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-sysinit-32bit" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-sysinit-32bit-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" arch="i586" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-tools-3.12.8-1.1.1.i586.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" arch="x86_64" version="3.12.8" release="1.1.1">
          <filename>mozilla-nss-tools-3.12.8-1.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dfecf4af4b1aa0403d44b3d1158232ef"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3378">
  <id>MozillaThunderbird</id>
  <title>seamonkey: Update to version 3.0.9</title>
  <release>openSUSE 11.3</release>
  <issued date="1287621042"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645315" id="645315" title="bug number 645315" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" id="CVE-2010-3170" title="CVE-2010-3170" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" id="CVE-2010-3174" title="CVE-2010-3174" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" id="CVE-2010-3175" title="CVE-2010-3175" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" id="CVE-2010-3176" title="CVE-2010-3176" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" id="CVE-2010-3177" title="CVE-2010-3177" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" id="CVE-2010-3178" title="CVE-2010-3178" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" id="CVE-2010-3179" title="CVE-2010-3179" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" id="CVE-2010-3180" title="CVE-2010-3180" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" id="CVE-2010-3182" title="CVE-2010-3182" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" id="CVE-2010-3183" title="CVE-2010-3183" type="cve"/>
  </references>
  <description>This update brings Mozilla Thunderbird to version 3.0.9,
fixing various bugs and security issues.

The following security  issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying
DLL. As this is a Windows only problem, it does not affect
the Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL objects could be manipulated such that the setting
of certain properties on the object would trigger the
removal of the tree from the DOM and cause certain sections
of deleted memory to be accessed. In products based on
Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1) and
newer this memory has been overwritten by a value that will
cause an unexploitable crash. In products based on Gecko
version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and SeaMonkey
2.0) and older an attacker could potentially use this
vulnerability to crash a victim's browser and run arbitrary
code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL's content view contains a
dangling pointer vulnerability. One of the content view's
methods for accessing the internal structure of the tree
could be manipulated into removing a node prior to
accessing it, resulting in the accessing of deleted memory.
If an attacker can control the contents of the deleted
memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer. This issue probably does not affect the
Linux builds and so is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges. Michal Zalewski's recent contributions
helped to identify this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
mozbugr_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an tag can override the charset of a framed
HTML document, even when the document is included across
origins. A page could be constructed containing such an tag
which sets the charset of the framed document to UTF-7.
This could potentially allow an attacker to inject UTF-7
encoded JavaScript into a site, bypassing the site's XSS
filters, and then executing the code using the above
technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.
This issue was also independently reported to Mozilla by
Nicholas Berthaume.

MFSA 2010-64: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. References

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov
and Josh Soref reported memory safety problems that
affected Firefox 3.6 and Firefox 3.5.
    * Memory safety bugs - Firefox 3.6, Firefox 3.5
    * CVE-2010-3176

Jesse Ruderman reported a crash which affected Firefox 3.5
only.
    * https://bugzilla.mozilla.org/show_bug.cgi?id=476547
    * CVE-2010-3174



MFSA 2010-65 / CVE-2010-3179: Security researcher Alexander
Miller reported that passing an excessively long string to
document.write could cause text rendering routines to end
up in an inconsistent state with sections of stack memory
being overwritten with the string data. An attacker could
use this flaw to crash a victim's browser and potentially
run arbitrary code on their computer.


MFSA 2010-66 / CVE-2010-3180: Security researcher Sergey
Glazunov reported that it was possible to access the
locationbar property of a window object after it had been
closed. Since the closed window's memory could have been
subsequently reused by the system it was possible that an
attempt to access the locationbar property could result in
the execution of attacker-controlled memory.


MFSA 2010-67 / CVE-2010-3183: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that when window.__lookupGetter__ is called with no
arguments the code assumes the top JavaScript stack value
is a property name. Since there were no arguments passed
into the function, the top value could represent
uninitialized memory or a pointer to a previously freed
JavaScript object. Under such circumstances the value is
passed to another subroutine which calls through the
dangling pointer, potentially executing attacker-controlled
memory.

MFSA 2010-68 / CVE-2010-3177: Google security researcher
Robert Swiecki reported that functions used by the Gopher
parser to convert text to HTML tags could be exploited to
turn text into executable JavaScript. If an attacker could
create a file or directory on a Gopher server with the
encoded script as part of its name the script would then
run in a victim's browser within the context of the site.

MFSA 2010-69 / CVE-2010-3178: Security researcher Eduardo
Vela Nava reported that if a web page opened a new window
and used a javascript: URL to make a modal call, such as
alert(), then subsequently navigated the page to a
different domain, once the modal call returned the opener
of the window could get access to objects in the navigated
window. This is a violation of the same-origin policy and
could be used by an attacker to steal information from
another web site.


MFSA 2010-70 / CVE-2010-3170: Security researcher Richard
Moore reported that when an SSL certificate was created
with a common name containing a wildcard followed by a
partial IP address a valid SSL connection could be
established with a server whose IP address matched the
wildcard range by browsing directly to the IP address. It
is extremely unlikely that such a certificate would be
issued by a Certificate Authority.

MFSA 2010-71 / CVE-2010-3182: Dmitri Gribenko reported that
the script used to launch Mozilla applications on Linux was
effectively including the current working directory in the
LD_LIBRARY_PATH environment variable. If an attacker was
able to place into the current working directory a
malicious shared library with the same name as a library
that the bootstrapping script depends on the attacker could
have their library loaded instead of the legitimate library.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-3.0.9-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-3.0.9-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-devel-3.0.9-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-devel-3.0.9-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-translations-common-3.0.9-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-translations-common-3.0.9-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-translations-other-3.0.9-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.9" release="0.2.1">
          <filename>MozillaThunderbird-translations-other-3.0.9-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="3.2.1">
          <filename>enigmail-1.0.1-3.2.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="3.2.1">
          <filename>enigmail-1.0.1-3.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="06d93a6ef3aeb4df49003f48d9ff324b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3372">
  <id>seamonkey</id>
  <title>seamonkey: Update to version 2.0.9</title>
  <release>openSUSE 11.3</release>
  <issued date="1287620441"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645315" id="645315" title="bug number 645315" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" id="CVE-2010-3170" title="CVE-2010-3170" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" id="CVE-2010-3174" title="CVE-2010-3174" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" id="CVE-2010-3175" title="CVE-2010-3175" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" id="CVE-2010-3176" title="CVE-2010-3176" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" id="CVE-2010-3177" title="CVE-2010-3177" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" id="CVE-2010-3178" title="CVE-2010-3178" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" id="CVE-2010-3179" title="CVE-2010-3179" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" id="CVE-2010-3180" title="CVE-2010-3180" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" id="CVE-2010-3182" title="CVE-2010-3182" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" id="CVE-2010-3183" title="CVE-2010-3183" type="cve"/>
  </references>
  <description>This update brings Mozilla Seamonkey to version 2.0.9,
fixing various bugs and security issues.

The following security  issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying
DLL. As this is a Windows only problem, it does not affect
the Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL objects could be manipulated such that the setting
of certain properties on the object would trigger the
removal of the tree from the DOM and cause certain sections
of deleted memory to be accessed. In products based on
Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1) and
newer this memory has been overwritten by a value that will
cause an unexploitable crash. In products based on Gecko
version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and SeaMonkey
2.0) and older an attacker could potentially use this
vulnerability to crash a victim's browser and run arbitrary
code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL's content view contains a
dangling pointer vulnerability. One of the content view's
methods for accessing the internal structure of the tree
could be manipulated into removing a node prior to
accessing it, resulting in the accessing of deleted memory.
If an attacker can control the contents of the deleted
memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer. This issue probably does not affect the
Linux builds and so is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges. Michal Zalewski's recent contributions
helped to identify this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
mozbugr_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an tag can override the charset of a framed
HTML document, even when the document is included across
origins. A page could be constructed containing such an tag
which sets the charset of the framed document to UTF-7.
This could potentially allow an attacker to inject UTF-7
encoded JavaScript into a site, bypassing the site's XSS
filters, and then executing the code using the above
technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.
This issue was also independently reported to Mozilla by
Nicholas Berthaume.

MFSA 2010-64: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. References

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov
and Josh Soref reported memory safety problems that
affected Firefox 3.6 and Firefox 3.5.
    * Memory safety bugs - Firefox 3.6, Firefox 3.5
    * CVE-2010-3176

Jesse Ruderman reported a crash which affected Firefox 3.5
only.
    * https://bugzilla.mozilla.org/show_bug.cgi?id=476547
    * CVE-2010-3174



MFSA 2010-65 / CVE-2010-3179: Security researcher Alexander
Miller reported that passing an excessively long string to
document.write could cause text rendering routines to end
up in an inconsistent state with sections of stack memory
being overwritten with the string data. An attacker could
use this flaw to crash a victim's browser and potentially
run arbitrary code on their computer.


MFSA 2010-66 / CVE-2010-3180: Security researcher Sergey
Glazunov reported that it was possible to access the
locationbar property of a window object after it had been
closed. Since the closed window's memory could have been
subsequently reused by the system it was possible that an
attempt to access the locationbar property could result in
the execution of attacker-controlled memory.


MFSA 2010-67 / CVE-2010-3183: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that when window.__lookupGetter__ is called with no
arguments the code assumes the top JavaScript stack value
is a property name. Since there were no arguments passed
into the function, the top value could represent
uninitialized memory or a pointer to a previously freed
JavaScript object. Under such circumstances the value is
passed to another subroutine which calls through the
dangling pointer, potentially executing attacker-controlled
memory.

MFSA 2010-68 / CVE-2010-3177: Google security researcher
Robert Swiecki reported that functions used by the Gopher
parser to convert text to HTML tags could be exploited to
turn text into executable JavaScript. If an attacker could
create a file or directory on a Gopher server with the
encoded script as part of its name the script would then
run in a victim's browser within the context of the site.

MFSA 2010-69 / CVE-2010-3178: Security researcher Eduardo
Vela Nava reported that if a web page opened a new window
and used a javascript: URL to make a modal call, such as
alert(), then subsequently navigated the page to a
different domain, once the modal call returned the opener
of the window could get access to objects in the navigated
window. This is a violation of the same-origin policy and
could be used by an attacker to steal information from
another web site.


MFSA 2010-70 / CVE-2010-3170: Security researcher Richard
Moore reported that when an SSL certificate was created
with a common name containing a wildcard followed by a
partial IP address a valid SSL connection could be
established with a server whose IP address matched the
wildcard range by browsing directly to the IP address. It
is extremely unlikely that such a certificate would be
issued by a Certificate Authority.

MFSA 2010-71 / CVE-2010-3182: Dmitri Gribenko reported that
the script used to launch Mozilla applications on Linux was
effectively including the current working directory in the
LD_LIBRARY_PATH environment variable. If an attacker was
able to place into the current working directory a
malicious shared library with the same name as a library
that the bootstrapping script depends on the attacker could
have their library loaded instead of the legitimate library.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.9" release="0.5.1">
          <filename>seamonkey-2.0.9-0.5.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.9" release="0.5.1">
          <filename>seamonkey-2.0.9-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.9" release="0.5.1">
          <filename>seamonkey-dom-inspector-2.0.9-0.5.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.9" release="0.5.1">
          <filename>seamonkey-dom-inspector-2.0.9-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.9" release="0.5.1">
          <filename>seamonkey-irc-2.0.9-0.5.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.9" release="0.5.1">
          <filename>seamonkey-irc-2.0.9-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.9" release="0.5.1">
          <filename>seamonkey-translations-common-2.0.9-0.5.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.9" release="0.5.1">
          <filename>seamonkey-translations-common-2.0.9-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.9" release="0.5.1">
          <filename>seamonkey-translations-other-2.0.9-0.5.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.9" release="0.5.1">
          <filename>seamonkey-translations-other-2.0.9-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.9" release="0.5.1">
          <filename>seamonkey-venkman-2.0.9-0.5.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.9" release="0.5.1">
          <filename>seamonkey-venkman-2.0.9-0.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0ab0be7a0ebb3acad57de85916ad6c23"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3300">
  <id>tomcat6</id>
  <title>tomcat6: It does not have permissions to its own directories. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1286803442"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625415" id="625415" title="bug number 625415" type="bugzilla"/>
  </references>
  <description>The small semantics change in new rpm produces a tomcat6
package without write rights for its own work, logs and
temp dir. That prevented tomcat to deploy webapps, or write
problems to log files. This update returns the permissions
back to normal.
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-admin-webapps-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-docs-webapp-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-el-1_0-api" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-el-1_0-api-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-javadoc-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-jsp-2_1-api-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-lib-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-servlet-2_5-api-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.24" release="5.2.1">
          <filename>tomcat6-webapps-6.0.24-5.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0b962449ffd0f93f559ee9fddf37e9fd"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3401">
  <id>glibc</id>
  <title>glibc: Security update to fix security problems</title>
  <release>openSUSE 11.3</release>
  <issued date="1288170268"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=572188" id="572188" title="bug number 572188" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646960" id="646960" title="bug number 646960" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3847" id="CVE-2010-3847" title="CVE-2010-3847" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3856" id="CVE-2010-3856" title="CVE-2010-3856" type="cve"/>
  </references>
  <description>This update of glibc fixes two bugs and security issues:

CVE-2010-3847: Decoding of the $ORIGIN special value in
various LD_ environment variables allowed local attackers
to execute code in context of e.g. setuid root programs,
elevating privileges.  This issue does not affect SUSE as
an assertion triggers before the respective code is
executed.  The bug was fixed nevertheless.

CVE-2010-3856: The LD_AUDIT environment was not pruned
during setuid root execution and could load shared
libraries from standard system library paths. This could be
used by local attackers to inject code into setuid root
programs and so elevated privileges.
</description>
  <pkglist>
    <collection>
        <package name="glibc" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc" arch="i686" version="2.11.2" release="3.3.1">
          <filename>glibc-2.11.2-3.3.1.i686.rpm</filename>
        </package>
        <package name="glibc" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-32bit" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-32bit-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-devel-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i686" version="2.11.2" release="3.3.1">
          <filename>glibc-devel-2.11.2-3.3.1.i686.rpm</filename>
        </package>
        <package name="glibc-devel" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-devel-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-32bit" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-devel-32bit-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-html" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-html-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-html" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-html-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-i18ndata-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-i18ndata-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-info" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-info-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-info" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-info-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-locale-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-locale" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-locale-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-32bit" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-locale-32bit-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-obsolete-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-obsolete-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile" arch="i586" version="2.11.2" release="3.3.1">
          <filename>glibc-profile-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="glibc-profile" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-profile-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile-32bit" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>glibc-profile-32bit-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="nscd" arch="i586" version="2.11.2" release="3.3.1">
          <filename>nscd-2.11.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="nscd" arch="x86_64" version="2.11.2" release="3.3.1">
          <filename>nscd-2.11.2-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="42243e0a2dbacd45b6d85425a9ea6b0b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3403">
  <id>bind</id>
  <title>bind: DNSSEC denial of service via a recursive validating server (CVE-2010-0213)</title>
  <release>openSUSE 11.3</release>
  <issued date="1288187428"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=644907" id="644907" title="bug number 644907" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0213" id="CVE-2010-0213" title="CVE-2010-0213" type="cve"/>
  </references>
  <description>A DoS vulnerability in bind's DNSSEC code has been fixed
which occured while recursively validating a server.
CVE-2010-0213 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="bind" arch="i586" version="9.7.1P2" release="0.2.1">
          <filename>bind-9.7.1P2-0.2.1.i586.rpm</filename>
        </package>
        <package name="bind" arch="x86_64" version="9.7.1P2" release="0.2.1">
          <filename>bind-9.7.1P2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="i586" version="9.7.1P2" release="0.2.1">
          <filename>bind-chrootenv-9.7.1P2-0.2.1.i586.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="x86_64" version="9.7.1P2" release="0.2.1">
          <filename>bind-chrootenv-9.7.1P2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="bind-devel" arch="i586" version="9.7.1P2" release="0.2.1">
          <filename>bind-devel-9.7.1P2-0.2.1.i586.rpm</filename>
        </package>
        <package name="bind-devel" arch="x86_64" version="9.7.1P2" release="0.2.1">
          <filename>bind-devel-9.7.1P2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" arch="noarch" version="9.7.1P2" release="0.2.1">
          <filename>bind-doc-9.7.1P2-0.2.1.noarch.rpm</filename>
        </package>
        <package name="bind-libs" arch="i586" version="9.7.1P2" release="0.2.1">
          <filename>bind-libs-9.7.1P2-0.2.1.i586.rpm</filename>
        </package>
        <package name="bind-libs" arch="x86_64" version="9.7.1P2" release="0.2.1">
          <filename>bind-libs-9.7.1P2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="bind-libs-32bit" arch="x86_64" version="9.7.1P2" release="0.2.1">
          <filename>bind-libs-32bit-9.7.1P2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="bind-utils" arch="i586" version="9.7.1P2" release="0.2.1">
          <filename>bind-utils-9.7.1P2-0.2.1.i586.rpm</filename>
        </package>
        <package name="bind-utils" arch="x86_64" version="9.7.1P2" release="0.2.1">
          <filename>bind-utils-9.7.1P2-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2e340a40e5472b0238cb66803cc14528"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3216">
  <id>aaa_base</id>
  <title>aaa_base: A broken disabling of swap partitions on LVM is fixed by this update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285769440"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631916" id="631916" title="bug number 631916" type="bugzilla"/>
  </references>
  <description>&quot;boot.swap off&quot; does not disable swap partitions on LVM but
only the swap files. Fixed by this update
</description>
  <pkglist>
    <collection>
        <package name="aaa_base" arch="i586" version="11.3" release="8.3.1">
          <filename>aaa_base-11.3-8.3.1.i586.rpm</filename>
        </package>
        <package name="aaa_base" arch="x86_64" version="11.3" release="8.3.1">
          <filename>aaa_base-11.3-8.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="77b995e1c29f7cb026d09f0aa06ad2b6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3230">
  <id>clamav</id>
  <title>clamav update to version 0.96.3</title>
  <release>openSUSE 11.3</release>
  <issued date="1285808145"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640812" id="640812" title="bug number 640812" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3434" id="CVE-2010-3434" title="CVE-2010-3434" type="cve"/>
  </references>
  <description>clamav version 0.96.3 fixes problems when scanning pdf
files (CVE-2010-3434) and also contains numerous other bug
fixes.
</description>
  <pkglist>
    <collection>
        <package name="clamav" arch="i586" version="0.96.3" release="0.1.1">
          <filename>clamav-0.96.3-0.1.1.i586.rpm</filename>
        </package>
        <package name="clamav" arch="x86_64" version="0.96.3" release="0.1.1">
          <filename>clamav-0.96.3-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="clamav-db" arch="noarch" version="0.96.3" release="0.1.1">
          <filename>clamav-db-0.96.3-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="01f09f7b7dc23fe6ed391417ff93c814"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3416">
  <id>dovecot12</id>
  <title>dovecot security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1288299495"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643715" id="643715" title="bug number 643715" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3706" id="CVE-2010-3706" title="CVE-2010-3706" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3707" id="CVE-2010-3707" title="CVE-2010-3707" type="cve"/>
  </references>
  <description>dovecot granted admin rights to all owner mailboxes
(CVE-2010-3706).

When using multiple ACL entries for mailboxes the most
specific one was not always applied (CVE-2010-3707).
</description>
  <pkglist>
    <collection>
        <package name="dovecot12" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-backend-mysql-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-backend-mysql-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-backend-pgsql-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-backend-pgsql-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-backend-sqlite-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-backend-sqlite-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-devel-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-devel-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-fts-lucene-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-fts-lucene-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="i586" version="1.2.11" release="3.3.1">
          <filename>dovecot12-fts-solr-1.2.11-3.3.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="x86_64" version="1.2.11" release="3.3.1">
          <filename>dovecot12-fts-solr-1.2.11-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="aee536ea9ad121d2314cd1c9a3cb8cec"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3422">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Update to version 3.6.12</title>
  <release>openSUSE 11.3</release>
  <issued date="1288311415"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645315" id="645315" title="bug number 645315" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649492" id="649492" title="bug number 649492" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" id="CVE-2010-3170" title="CVE-2010-3170" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" id="CVE-2010-3174" title="CVE-2010-3174" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" id="CVE-2010-3175" title="CVE-2010-3175" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" id="CVE-2010-3176" title="CVE-2010-3176" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" id="CVE-2010-3177" title="CVE-2010-3177" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" id="CVE-2010-3178" title="CVE-2010-3178" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" id="CVE-2010-3179" title="CVE-2010-3179" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" id="CVE-2010-3180" title="CVE-2010-3180" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" id="CVE-2010-3182" title="CVE-2010-3182" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" id="CVE-2010-3183" title="CVE-2010-3183" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765" id="CVE-2010-3765" title="CVE-2010-3765" type="cve"/>
  </references>
  <description>This update brings Mozilla Firefox to version 3.6.12,
fixing various bugs and security issues.

The following security  issues were fixed: MFSA 2010-64:
Mozilla developers identified and fixed several memory
safety bugs in the browser engine used in Firefox and other
Mozilla-based products. Some of these bugs showed evidence
of memory corruption under certain circumstances, and we
presume that with enough effort at least some of these
could be exploited to run arbitrary code. References

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov
and Josh Soref reported memory safety problems that
affected Firefox 3.6 and Firefox 3.5.
    * Memory safety bugs - Firefox 3.6, Firefox 3.5
    * CVE-2010-3176

Gary Kwong, Martijn Wargers and Siddharth Agarwal reported
memory safety problems that affected Firefox 3.6 only.
    * Memory safety bugs - Firefox 3.6
    * CVE-2010-3175

MFSA 2010-65 / CVE-2010-3179: Security researcher Alexander
Miller reported that passing an excessively long string to
document.write could cause text rendering routines to end
up in an inconsistent state with sections of stack memory
being overwritten with the string data. An attacker could
use this flaw to crash a victim's browser and potentially
run arbitrary code on their computer.


MFSA 2010-66 / CVE-2010-3180: Security researcher Sergey
Glazunov reported that it was possible to access the
locationbar property of a window object after it had been
closed. Since the closed window's memory could have been
subsequently reused by the system it was possible that an
attempt to access the locationbar property could result in
the execution of attacker-controlled memory.


MFSA 2010-67 / CVE-2010-3183: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that when window.__lookupGetter__ is called with no
arguments the code assumes the top JavaScript stack value
is a property name. Since there were no arguments passed
into the function, the top value could represent
uninitialized memory or a pointer to a previously freed
JavaScript object. Under such circumstances the value is
passed to another subroutine which calls through the
dangling pointer, potentially executing attacker-controlled
memory.

MFSA 2010-68 / CVE-2010-3177: Google security researcher
Robert Swiecki reported that functions used by the Gopher
parser to convert text to HTML tags could be exploited to
turn text into executable JavaScript. If an attacker could
create a file or directory on a Gopher server with the
encoded script as part of its name the script would then
run in a victim's browser within the context of the site.

MFSA 2010-69 / CVE-2010-3178: Security researcher Eduardo
Vela Nava reported that if a web page opened a new window
and used a javascript: URL to make a modal call, such as
alert(), then subsequently navigated the page to a
different domain, once the modal call returned the opener
of the window could get access to objects in the navigated
window. This is a violation of the same-origin policy and
could be used by an attacker to steal information from
another web site.


MFSA 2010-70 / CVE-2010-3170: Security researcher Richard
Moore reported that when an SSL certificate was created
with a common name containing a wildcard followed by a
partial IP address a valid SSL connection could be
established with a server whose IP address matched the
wildcard range by browsing directly to the IP address. It
is extremely unlikely that such a certificate would be
issued by a Certificate Authority.

MFSA 2010-71 / CVE-2010-3182: Dmitri Gribenko reported that
the script used to launch Mozilla applications on Linux was
effectively including the current working directory in the
LD_LIBRARY_PATH environment variable. If an attacker was
able to place into the current working directory a
malicious shared library with the same name as a library
that the bootstrapping script depends on the attacker could
have their library loaded instead of the legitimate library.

MFSA 2010-73 / CVE-2010-3765: Morten Kråkvik of Telenor SOC
reported an exploit targeting particular versions of
Firefox 3.6 on Windows XP that Telenor found while
investigating an intrusion attempt on a customer network.
The underlying vulnerability, however, was present on both
the Firefox 3.5 and Firefox 3.6 development branches and
affected all supported platforms.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-3.6.12-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-3.6.12-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-branding-upstream-3.6.12-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-branding-upstream-3.6.12-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-translations-common-3.6.12-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-translations-common-3.6.12-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-translations-other-3.6.12-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.12" release="0.7.1">
          <filename>MozillaFirefox-translations-other-3.6.12-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-js192-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-js192-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-js192-32bit-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.12-0.8.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.12" release="0.8.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.12-0.8.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b79d68aabb060f483bf1161706a44705"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3421">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Update to version 1.9.1.15</title>
  <release>openSUSE 11.3</release>
  <issued date="1288304399"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645315" id="645315" title="bug number 645315" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649492" id="649492" title="bug number 649492" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" id="CVE-2010-3170" title="CVE-2010-3170" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" id="CVE-2010-3174" title="CVE-2010-3174" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" id="CVE-2010-3175" title="CVE-2010-3175" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" id="CVE-2010-3176" title="CVE-2010-3176" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" id="CVE-2010-3177" title="CVE-2010-3177" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" id="CVE-2010-3178" title="CVE-2010-3178" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" id="CVE-2010-3179" title="CVE-2010-3179" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" id="CVE-2010-3180" title="CVE-2010-3180" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" id="CVE-2010-3182" title="CVE-2010-3182" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" id="CVE-2010-3183" title="CVE-2010-3183" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765" id="CVE-2010-3765" title="CVE-2010-3765" type="cve"/>
  </references>
  <description>This update brings Mozilla XULRunner to version 1.9.1.15,
fixing various bugs and security issues.

The following security  issues were fixed: MFSA 2010-49 /
CVE-2010-3169: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2010-50 / CVE-2010-2765: Security researcher Chris
Rohlf of Matasano Security reported that the implementation
of the HTML frameset element contained an integer overflow
vulnerability. The code responsible for parsing the
frameset columns used an 8-byte counter for the column
numbers, so when a very large number of columns was passed
in the counter would overflow. When this counter was
subsequently used to allocate memory for the frameset, the
memory buffer would be too small, potentially resulting in
a heap buffer overflow and execution of attacker-controlled
memory.

MFSA 2010-51 / CVE-2010-2767: Security researcher Sergey
Glazunov reported a dangling pointer vulnerability in the
implementation of navigator.plugins in which the navigator
object could retain a pointer to the plugins array even
after it had been destroyed. An attacker could potentially
use this issue to crash the browser and run arbitrary code
on a victim's computer.

MFSA 2010-52 / CVE-2010-3131: Security researcher Haifei Li
of FortiGuard Labs reported that Firefox could be used to
load a malicious code library that had been planted on a
victim's computer. Firefox attempts to load dwmapi.dll upon
startup as part of its platform detection, so on systems
that don't have this library, such as Windows XP, Firefox
will subsequently attempt to load the library from the
current working directory. An attacker could use this
vulnerability to trick a user into downloading a HTML file
and a malicious copy of dwmapi.dll into the same directory
on their computer and opening the HTML file with Firefox,
thus causing the malicious code to be executed. If the
attacker was on the same network as the victim, the
malicious DLL could also be loaded via a UNC path. The
attack also requires that Firefox not currently be running
when it is asked to open the HTML file and accompanying
DLL. As this is a Windows only problem, it does not affect
the Linux version. It is listed for completeness only.

MFSA 2010-53 / CVE-2010-3166: Security researcher wushi of
team509 reported a heap buffer overflow in code routines
responsible for transforming text runs. A page could be
constructed with a bidirectional text run which upon reflow
could result in an incorrect length being calculated for
the run of text. When this value is subsequently used to
allocate memory for the text too small a buffer may be
created potentially resulting in a buffer overflow and the
execution of attacker controlled memory.

MFSA 2010-54 / CVE-2010-2760: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that there was a remaining dangling pointer issue leftover
from the fix to CVE-2010-2753. Under certain circumstances
one of the pointers held by a XUL tree selection could be
freed and then later reused, potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-55 / CVE-2010-3168: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that XUL objects could be manipulated such that the setting
of certain properties on the object would trigger the
removal of the tree from the DOM and cause certain sections
of deleted memory to be accessed. In products based on
Gecko version 1.9.2 (Firefox 3.6, Thunderbird 3.1) and
newer this memory has been overwritten by a value that will
cause an unexploitable crash. In products based on Gecko
version 1.9.1 (Firefox 3.5, Thunderbird 3.0, and SeaMonkey
2.0) and older an attacker could potentially use this
vulnerability to crash a victim's browser and run arbitrary
code on their computer.

MFSA 2010-56 / CVE-2010-3167: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that the implementation of XUL's content view contains a
dangling pointer vulnerability. One of the content view's
methods for accessing the internal structure of the tree
could be manipulated into removing a node prior to
accessing it, resulting in the accessing of deleted memory.
If an attacker can control the contents of the deleted
memory prior to its access they could use this
vulnerability to run arbitrary code on a victim's machine.

MFSA 2010-57 / CVE-2010-2766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that code used to normalize a document contained a logical
flaw that could be leveraged to run arbitrary code. When
the normalization code ran, a static count of the
document's child nodes was used in the traversal, so a page
could be constructed that would remove DOM nodes during
this normalization which could lead to the accessing of a
deleted object and potentially the execution of
attacker-controlled memory.

MFSA 2010-58 / CVE-2010-2770: Security researcher Marc
Schoenefeld reported that a specially crafted font could be
applied to a document and cause a crash on Mac systems. The
crash showed signs of memory corruption and presumably
could be used by an attacker to execute arbitrary code on a
victim's computer. This issue probably does not affect the
Linux builds and so is listed for completeness.

MFSA 2010-59 / CVE-2010-2762: Mozilla developer Blake
Kaplan reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW), a security wrapper that
allows content-defined objects to be safely accessed by
privileged code, creates scope chains ending in outer
objects. Users of SJOWs which expect the scope chain to end
on an inner object may be handed a chrome privileged object
which could be leveraged to run arbitrary JavaScript with
chrome privileges. Michal Zalewski's recent contributions
helped to identify this architectural weakness.

MFSA 2010-60 / CVE-2010-2763: Mozilla security researcher
mozbugr_a4 reported that the wrapper class
XPCSafeJSObjectWrapper (SJOW) on the Mozilla 1.9.1
development branch has a logical error in its scripted
function implementation that allows the caller to run the
function within the context of another site. This is a
violation of the same-origin policy and could be used to
mount an XSS attack.

MFSA 2010-61 / CVE-2010-2768: Security researchers David
Huang and Collin Jackson of Carnegie Mellon University
CyLab (Silicon Valley campus) reported that the type
attribute of an tag can override the charset of a framed
HTML document, even when the document is included across
origins. A page could be constructed containing such an tag
which sets the charset of the framed document to UTF-7.
This could potentially allow an attacker to inject UTF-7
encoded JavaScript into a site, bypassing the site's XSS
filters, and then executing the code using the above
technique.

MFSA 2010-62 / CVE-2010-2769: Security researcher Paul
Stone reported that when an HTML selection containing
JavaScript is copy-and-pasted or dropped onto a document
with designMode enabled the JavaScript will be executed
within the context of the site where the code was dropped.
A malicious site could leverage this issue in an XSS attack
by persuading a user into taking such an action and in the
process running malicious JavaScript within the context of
another site.

MFSA 2010-63 / CVE-2010-2764: Matt Haggard reported that
the statusText property of an XMLHttpRequest object is
readable by the requestor even when the request is made
across origins. This status information reveals the
presence of a web server and could be used to gather
information about servers on internal private networks.
This issue was also independently reported to Mozilla by
Nicholas Berthaume.

MFSA 2010-64: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. References

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov
and Josh Soref reported memory safety problems that
affected Firefox 3.6 and Firefox 3.5.
    * Memory safety bugs - Firefox 3.6, Firefox 3.5
    * CVE-2010-3176

Jesse Ruderman reported a crash which affected Firefox 3.5
only.
    * https://bugzilla.mozilla.org/show_bug.cgi?id=476547
    * CVE-2010-3174



MFSA 2010-65 / CVE-2010-3179: Security researcher Alexander
Miller reported that passing an excessively long string to
document.write could cause text rendering routines to end
up in an inconsistent state with sections of stack memory
being overwritten with the string data. An attacker could
use this flaw to crash a victim's browser and potentially
run arbitrary code on their computer.


MFSA 2010-66 / CVE-2010-3180: Security researcher Sergey
Glazunov reported that it was possible to access the
locationbar property of a window object after it had been
closed. Since the closed window's memory could have been
subsequently reused by the system it was possible that an
attempt to access the locationbar property could result in
the execution of attacker-controlled memory.


MFSA 2010-67 / CVE-2010-3183: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that when window.__lookupGetter__ is called with no
arguments the code assumes the top JavaScript stack value
is a property name. Since there were no arguments passed
into the function, the top value could represent
uninitialized memory or a pointer to a previously freed
JavaScript object. Under such circumstances the value is
passed to another subroutine which calls through the
dangling pointer, potentially executing attacker-controlled
memory.

MFSA 2010-68 / CVE-2010-3177: Google security researcher
Robert Swiecki reported that functions used by the Gopher
parser to convert text to HTML tags could be exploited to
turn text into executable JavaScript. If an attacker could
create a file or directory on a Gopher server with the
encoded script as part of its name the script would then
run in a victim's browser within the context of the site.

MFSA 2010-69 / CVE-2010-3178: Security researcher Eduardo
Vela Nava reported that if a web page opened a new window
and used a javascript: URL to make a modal call, such as
alert(), then subsequently navigated the page to a
different domain, once the modal call returned the opener
of the window could get access to objects in the navigated
window. This is a violation of the same-origin policy and
could be used by an attacker to steal information from
another web site.


MFSA 2010-70 / CVE-2010-3170: Security researcher Richard
Moore reported that when an SSL certificate was created
with a common name containing a wildcard followed by a
partial IP address a valid SSL connection could be
established with a server whose IP address matched the
wildcard range by browsing directly to the IP address. It
is extremely unlikely that such a certificate would be
issued by a Certificate Authority.

MFSA 2010-71 / CVE-2010-3182: Dmitri Gribenko reported that
the script used to launch Mozilla applications on Linux was
effectively including the current working directory in the
LD_LIBRARY_PATH environment variable. If an attacker was
able to place into the current working directory a
malicious shared library with the same name as a library
that the bootstrapping script depends on the attacker could
have their library loaded instead of the legitimate library.

MFSA 2010-73 / CVE-2010-3765: Morten Kråkvik of Telenor SOC
reported an exploit targeting particular versions of
Firefox 3.6 on Windows XP that Telenor found while
investigating an intrusion attempt on a customer network.
The underlying vulnerability, however, was present on both
the Firefox 3.5 and Firefox 3.6 development branches and
affected all supported platforms.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.15" release="0.2.1">
          <filename>python-xpcom191-1.9.1.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.15" release="0.2.1">
          <filename>python-xpcom191-1.9.1.15-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="400c9eb6f9b1dc3382521accd699c8e1"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3429">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Security update to 3.0.10</title>
  <release>openSUSE 11.3</release>
  <issued date="1288304903"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649492" id="649492" title="bug number 649492" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird was updated to 3.0.10 to fix one
critical security issue.

MFSA 2010-73 / CVE-2010-3765: Morten Kråkvik of Telenor SOC
reported an exploit targeting particular versions of
Firefox 3.6 on Windows XP that Telenor found while
investigating an intrusion attempt on a customer network.
The underlying vulnerability, however, was present on both
the Firefox 3.5 and Firefox 3.6 development branches and
affected all supported platforms.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-3.0.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-3.0.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-devel-3.0.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-devel-3.0.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-translations-common-3.0.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-translations-common-3.0.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-translations-other-3.0.10-0.3.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.10" release="0.3.1">
          <filename>MozillaThunderbird-translations-other-3.0.10-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="4.3.1">
          <filename>enigmail-1.0.1-4.3.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="4.3.1">
          <filename>enigmail-1.0.1-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="03673ac1b3c574b9c9caadfdf8cdba6e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3428">
  <id>seamonkey</id>
  <title>seamonkey: Security update to 2.0.10</title>
  <release>openSUSE 11.3</release>
  <issued date="1288304305"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649492" id="649492" title="bug number 649492" type="bugzilla"/>
  </references>
  <description>Mozilla Seamonkey was updated to 2.0.10 to fix one critical
security issue.

MFSA 2010-73 / CVE-2010-3765: Morten Kråkvik of Telenor SOC
reported an exploit targeting particular versions of
Firefox 3.6 on Windows XP that Telenor found while
investigating an intrusion attempt on a customer network.
The underlying vulnerability, however, was present on both
the Firefox 3.5 and Firefox 3.6 development branches and
affected all supported platforms.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.10" release="0.7.1">
          <filename>seamonkey-2.0.10-0.7.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.10" release="0.7.1">
          <filename>seamonkey-2.0.10-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.10" release="0.7.1">
          <filename>seamonkey-dom-inspector-2.0.10-0.7.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.10" release="0.7.1">
          <filename>seamonkey-dom-inspector-2.0.10-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.10" release="0.7.1">
          <filename>seamonkey-irc-2.0.10-0.7.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.10" release="0.7.1">
          <filename>seamonkey-irc-2.0.10-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.10" release="0.7.1">
          <filename>seamonkey-translations-common-2.0.10-0.7.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.10" release="0.7.1">
          <filename>seamonkey-translations-common-2.0.10-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.10" release="0.7.1">
          <filename>seamonkey-translations-other-2.0.10-0.7.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.10" release="0.7.1">
          <filename>seamonkey-translations-other-2.0.10-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.10" release="0.7.1">
          <filename>seamonkey-venkman-2.0.10-0.7.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.10" release="0.7.1">
          <filename>seamonkey-venkman-2.0.10-0.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="55cd1bfe3939a74861f61f6056d3d66b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3325">
  <id>libjpeg6</id>
  <title>libjpeg6: Update to support third party software without problems</title>
  <release>openSUSE 11.3</release>
  <issued date="1287070836"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624583" id="624583" title="bug number 624583" type="bugzilla"/>
  </references>
  <description>Update to support third party software without problems.
Replaces older libjpeg6 versions, also for users which did
an upgrade from 11.2
</description>
  <pkglist>
    <collection>
        <package name="libjpeg6" arch="i586" version="6.2.0" release="4.1.1">
          <filename>libjpeg6-6.2.0-4.1.1.i586.rpm</filename>
        </package>
        <package name="libjpeg6" arch="x86_64" version="6.2.0" release="4.1.1">
          <filename>libjpeg6-6.2.0-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libjpeg6-32bit" arch="x86_64" version="6.2.0" release="4.1.1">
          <filename>libjpeg6-32bit-6.2.0-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="118393cb5d6c5eb8b87532b448eb409e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3474">
  <id>flash-player</id>
  <title>flash-player: Updated to v10.1.102.64 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1288912754"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650145" id="650145" title="bug number 650145" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3636" id="CVE-2010-3636" title="CVE-2010-3636" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3637" id="CVE-2010-3637" title="CVE-2010-3637" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3638" id="CVE-2010-3638" title="CVE-2010-3638" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3639" id="CVE-2010-3639" title="CVE-2010-3639" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3640" id="CVE-2010-3640" title="CVE-2010-3640" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3641" id="CVE-2010-3641" title="CVE-2010-3641" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3642" id="CVE-2010-3642" title="CVE-2010-3642" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3643" id="CVE-2010-3643" title="CVE-2010-3643" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3644" id="CVE-2010-3644" title="CVE-2010-3644" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3645" id="CVE-2010-3645" title="CVE-2010-3645" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3646" id="CVE-2010-3646" title="CVE-2010-3646" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3647" id="CVE-2010-3647" title="CVE-2010-3647" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3648" id="CVE-2010-3648" title="CVE-2010-3648" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3649" id="CVE-2010-3649" title="CVE-2010-3649" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3650" id="CVE-2010-3650" title="CVE-2010-3650" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3651" id="CVE-2010-3651" title="CVE-2010-3651" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3652" id="CVE-2010-3652" title="CVE-2010-3652" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3654" id="CVE-2010-3654" title="CVE-2010-3654" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3976" id="CVE-2010-3976" title="CVE-2010-3976" type="cve"/>
  </references>
  <description>Adobe Flash Player was updated to version 10.1.102.64 to
fix  a critical security issue.

CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639
CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643
CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647
CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 CVE-2010-3651
CVE-2010-3652 CVE-2010-3654 CVE-2010-3976
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.102.64" release="0.2.1">
          <filename>flash-player-10.1.102.64-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2da24e3bbb5469270a3f190f06fd54e6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3484">
  <id>dhcp</id>
  <title>Fixing a crash in ISC DHCP via dhcpv6 packets (CVE-2010-3611) and a crash in dhcrelay.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289174800"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650902" id="650902" title="bug number 650902" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611" id="CVE-2010-3611" title="CVE-2010-3611" type="cve"/>
  </references>
  <description>ISC DHCP can be crashed with a single dhcpv6 packet.
CVE-2010-3611 has been assigned to this issue. Additionally
a dhcrelay crash when receiving packets on interfaces
without assigned IPv4 address has been fixed as well as an
infinite loop in dhcpd.
</description>
  <pkglist>
    <collection>
        <package name="dhcp" arch="i586" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-4.1.1.P1-4.3.1.i586.rpm</filename>
        </package>
        <package name="dhcp" arch="x86_64" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-4.1.1.P1-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-client" arch="i586" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-client-4.1.1.P1-4.3.1.i586.rpm</filename>
        </package>
        <package name="dhcp-client" arch="x86_64" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-client-4.1.1.P1-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="i586" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-devel-4.1.1.P1-4.3.1.i586.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="x86_64" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-devel-4.1.1.P1-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="i586" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-doc-4.1.1.P1-4.3.1.i586.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="x86_64" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-doc-4.1.1.P1-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="i586" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-relay-4.1.1.P1-4.3.1.i586.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="x86_64" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-relay-4.1.1.P1-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-server" arch="i586" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-server-4.1.1.P1-4.3.1.i586.rpm</filename>
        </package>
        <package name="dhcp-server" arch="x86_64" version="4.1.1.P1" release="4.3.1">
          <filename>dhcp-server-4.1.1.P1-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a9922b2d0ea98c3a28d3d1d341150a61"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3452">
  <id>netbeans</id>
  <title>netbeans: Subversion throws an exception. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1288750491"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643779" id="643779" title="bug number 643779" type="bugzilla"/>
  </references>
  <description>Netbeans 6.8 is not compatible with ini4j 0.5.1 distributed
with openSUSE 11.3 and it broke the svn support. Fixed by
this update.
</description>
  <pkglist>
    <collection>
        <package name="netbeans" arch="noarch" version="6.8" release="2.3.2">
          <filename>netbeans-6.8-2.3.2.noarch.rpm</filename>
        </package>
        <package name="netbeans-apisupport" arch="noarch" version="6.8" release="2.3.2">
          <filename>netbeans-apisupport-6.8-2.3.2.noarch.rpm</filename>
        </package>
        <package name="netbeans-ide" arch="noarch" version="6.8" release="2.3.2">
          <filename>netbeans-ide-6.8-2.3.2.noarch.rpm</filename>
        </package>
        <package name="netbeans-java" arch="noarch" version="6.8" release="2.3.2">
          <filename>netbeans-java-6.8-2.3.2.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="92e04276346a283740b05cc65273708f"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3449">
  <id>fuse</id>
  <title>fuse: If the username contains a comma, mounting with sshfs fails. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1288707091"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641480" id="641480" title="bug number 641480" type="bugzilla"/>
  </references>
  <description>Fix a regression in fuse version 2.8 that caused sshfs to
fail when the user name contains a comma, such as in the
case of sourceforge.net logins.
</description>
  <pkglist>
    <collection>
        <package name="fuse" arch="i586" version="2.8.5" release="2.3.1">
          <filename>fuse-2.8.5-2.3.1.i586.rpm</filename>
        </package>
        <package name="fuse" arch="x86_64" version="2.8.5" release="2.3.1">
          <filename>fuse-2.8.5-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="fuse-devel" arch="i586" version="2.8.5" release="2.3.1">
          <filename>fuse-devel-2.8.5-2.3.1.i586.rpm</filename>
        </package>
        <package name="fuse-devel" arch="x86_64" version="2.8.5" release="2.3.1">
          <filename>fuse-devel-2.8.5-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="fuse-devel-static" arch="i586" version="2.8.5" release="2.3.1">
          <filename>fuse-devel-static-2.8.5-2.3.1.i586.rpm</filename>
        </package>
        <package name="fuse-devel-static" arch="x86_64" version="2.8.5" release="2.3.1">
          <filename>fuse-devel-static-2.8.5-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfuse2" arch="i586" version="2.8.5" release="2.3.1">
          <filename>libfuse2-2.8.5-2.3.1.i586.rpm</filename>
        </package>
        <package name="libfuse2" arch="x86_64" version="2.8.5" release="2.3.1">
          <filename>libfuse2-2.8.5-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfuse2-32bit" arch="x86_64" version="2.8.5" release="2.3.1">
          <filename>libfuse2-32bit-2.8.5-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f92d4341b743f5243b2ecad3cfc63d36"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3505">
  <id>monotone</id>
  <title>monotone security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1289498174"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649515" id="649515" title="bug number 649515" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4098" id="CVE-2010-4098" title="CVE-2010-4098" type="cve"/>
  </references>
  <description>remote attackers could crash a monotone server via an empty
argument to the 'mtn' command (CVE-2010-4098).
</description>
  <pkglist>
    <collection>
        <package name="monotone" arch="i586" version="0.48.1" release="1.3.1">
          <filename>monotone-0.48.1-1.3.1.i586.rpm</filename>
        </package>
        <package name="monotone" arch="x86_64" version="0.48.1" release="1.3.1">
          <filename>monotone-0.48.1-1.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="44f7739f7461642c799cc5237aa51e65"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3195">
  <id>syslog-ng</id>
  <title>syslog-ng: Fix hang on rcsyslog-ng reload</title>
  <release>openSUSE 11.3</release>
  <issued date="1285256706"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617111" id="617111" title="bug number 617111" type="bugzilla"/>
  </references>
  <description>- #617111: Applied a patch to fix a 100% CPU usage when
  mark_freq() is changed to 0 during a SIGHUP (reload),
  that may also cause to fill up /var partition very
  quickly.
</description>
  <pkglist>
    <collection>
        <package name="syslog-ng" arch="i586" version="3.1.1" release="4.1.1">
          <filename>syslog-ng-3.1.1-4.1.1.i586.rpm</filename>
        </package>
        <package name="syslog-ng" arch="x86_64" version="3.1.1" release="4.1.1">
          <filename>syslog-ng-3.1.1-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6ed49d98fb503496c8f2b0d3da0fd3c8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3214">
  <id>libopenssl-devel</id>
  <title>openssl security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1285583510"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629905" id="629905" title="bug number 629905" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939" id="CVE-2010-2939" title="CVE-2010-2939" type="cve"/>
  </references>
  <description>Specially crafted responses from SSL servers could cause a
double-free bug in openssl's client implementation.
Malicious servers could exploit that to crash programs use
openssl for the SSL connection (CVE-2010-2939).
</description>
  <pkglist>
    <collection>
        <package name="libopenssl-devel" arch="i586" version="1.0.0" release="6.1.1">
          <filename>libopenssl-devel-1.0.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="libopenssl-devel" arch="x86_64" version="1.0.0" release="6.1.1">
          <filename>libopenssl-devel-1.0.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="i586" version="0.9.8m" release="3.1.1">
          <filename>libopenssl0_9_8-0.9.8m-3.1.1.i586.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="x86_64" version="0.9.8m" release="3.1.1">
          <filename>libopenssl0_9_8-0.9.8m-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8-32bit" arch="x86_64" version="0.9.8m" release="3.1.1">
          <filename>libopenssl0_9_8-32bit-0.9.8m-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="i586" version="1.0.0" release="6.1.1">
          <filename>libopenssl1_0_0-1.0.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="x86_64" version="1.0.0" release="6.1.1">
          <filename>libopenssl1_0_0-1.0.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0-32bit" arch="x86_64" version="1.0.0" release="6.1.1">
          <filename>libopenssl1_0_0-32bit-1.0.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="openssl" arch="i586" version="1.0.0" release="6.1.1">
          <filename>openssl-1.0.0-6.1.1.i586.rpm</filename>
        </package>
        <package name="openssl" arch="x86_64" version="1.0.0" release="6.1.1">
          <filename>openssl-1.0.0-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-doc" arch="noarch" version="1.0.0" release="6.1.1">
          <filename>openssl-doc-1.0.0-6.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="33a2d6d93322844a27d85b1557b3d9bf"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3486">
  <id>papyon</id>
  <title>Empathy: Fixed connection issues to MSN</title>
  <release>openSUSE 11.3</release>
  <issued date="1289212564"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=648876" id="648876" title="bug number 648876" type="bugzilla"/>
  </references>
  <description>A bug in papyon was fixed:
- #648876: Empathy no longer connects to MSN
</description>
  <pkglist>
    <collection>
        <package name="papyon" arch="noarch" version="0.4.6" release="2.3.1">
          <filename>papyon-0.4.6-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="96a43d34572e821179406a4030e9a9bb"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3498">
  <id>emacs-auctex</id>
  <title>emacs-auctex: A not working preview of Latex equations in emacs using the auctex package is fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289318820"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623719" id="623719" title="bug number 623719" type="bugzilla"/>
  </references>
  <description>Previewing Latex equations in emacs using the auctex
package does not work. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="emacs-auctex" arch="noarch" version="11.85" release="94.3.1">
          <filename>emacs-auctex-11.85-94.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b1cf03b4da4ae69acc8653f46c5e2a6e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3495">
  <id>libfm</id>
  <title>pcmanfm: Upgrade to version 0.9.8</title>
  <release>openSUSE 11.3</release>
  <issued date="1289319542"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647213" id="647213" title="bug number 647213" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651089" id="651089" title="bug number 651089" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=648882" id="648882" title="bug number 648882" type="bugzilla"/>
  </references>
  <description>pcmanfm has been updated to version 0.9.8 together with its
main library libfm (updated to version 0.1.14). Also a
pcmanfm critical bug on x86_64 systems has been fixed.
lxde-common-branding packages has been fixed to work with
new pcmafm conf files.
</description>
  <pkglist>
    <collection>
        <package name="libfm" arch="i586" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm-0.1.14_rc2-2.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm" arch="x86_64" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm-0.1.14_rc2-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm-devel" arch="i586" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm-devel-0.1.14_rc2-2.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm-devel" arch="x86_64" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm-devel-0.1.14_rc2-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm-gtk0" arch="i586" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm-gtk0-0.1.14_rc2-2.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm-gtk0" arch="x86_64" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm-gtk0-0.1.14_rc2-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm0" arch="i586" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm0-0.1.14_rc2-2.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libfm0" arch="x86_64" version="0.1.14_rc2" release="2.3.1">
          <filename>libfm0-0.1.14_rc2-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="lxde-common" arch="noarch" version="0.5.0" release="10.3.1">
          <filename>lxde-common-0.5.0-10.3.1.noarch.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="lxde-common-branding-openSUSE" arch="noarch" version="11.3" release="10.3.1">
          <filename>lxde-common-branding-openSUSE-11.3-10.3.1.noarch.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="lxde-common-branding-upstream" arch="noarch" version="0.5.0" release="10.3.1">
          <filename>lxde-common-branding-upstream-0.5.0-10.3.1.noarch.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="pcmanfm" arch="i586" version="0.9.8_rc2" release="1.3.1">
          <filename>pcmanfm-0.9.8_rc2-1.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="pcmanfm" arch="x86_64" version="0.9.8_rc2" release="1.3.1">
          <filename>pcmanfm-0.9.8_rc2-1.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="pcmanfm-lang" arch="noarch" version="0.9.8_rc2" release="1.3.1">
          <filename>pcmanfm-lang-0.9.8_rc2-1.3.1.noarch.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="da880d4ac540df15872fa29d53ea390b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3496">
  <id>coreutils</id>
  <title>coreutils: The &quot;-V&quot; option of sort doesn't work. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289318848"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616745" id="616745" title="bug number 616745" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626517" id="626517" title="bug number 626517" type="bugzilla"/>
  </references>
  <description>The &quot;-V&quot;  (treat as version numbers) option doesn't show
any effect. This was caused by the i18n patch for coreutils
not being updated for this new option. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="coreutils" arch="i586" version="7.1" release="11.1.1">
          <filename>coreutils-7.1-11.1.1.i586.rpm</filename>
        </package>
        <package name="coreutils" arch="x86_64" version="7.1" release="11.1.1">
          <filename>coreutils-7.1-11.1.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils-lang" arch="noarch" version="7.1" release="11.1.1">
          <filename>coreutils-lang-7.1-11.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8079ef430d2546022497505f43d26614"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3499">
  <id>pinentry-qt4</id>
  <title>pinentry-qt4: It appears under other windows and is grabbing alt+tab. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289319377"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=648253" id="648253" title="bug number 648253" type="bugzilla"/>
  </references>
  <description>Pinentry-qt4 password dialog is displayed under other
windows and is grabbing alt+tab. It forces the user to use
the mouse to switch windows.
</description>
  <pkglist>
    <collection>
        <package name="pinentry-qt4" arch="i586" version="0.8.0" release="8.3.1">
          <filename>pinentry-qt4-0.8.0-8.3.1.i586.rpm</filename>
        </package>
        <package name="pinentry-qt4" arch="x86_64" version="0.8.0" release="8.3.1">
          <filename>pinentry-qt4-0.8.0-8.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0fe727890fe34afac53580c5a6ff8598"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3500">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk security update fixing various vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1288793551"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642531" id="642531" title="bug number 642531" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" id="CVE-2009-3555" title="CVE-2009-3555" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3541" id="CVE-2010-3541" title="CVE-2010-3541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3548" id="CVE-2010-3548" title="CVE-2010-3548" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3549" id="CVE-2010-3549" title="CVE-2010-3549" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3551" id="CVE-2010-3551" title="CVE-2010-3551" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3553" id="CVE-2010-3553" title="CVE-2010-3553" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3554" id="CVE-2010-3554" title="CVE-2010-3554" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3557" id="CVE-2010-3557" title="CVE-2010-3557" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3561" id="CVE-2010-3561" title="CVE-2010-3561" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3562" id="CVE-2010-3562" title="CVE-2010-3562" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3564" id="CVE-2010-3564" title="CVE-2010-3564" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3565" id="CVE-2010-3565" title="CVE-2010-3565" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3566" id="CVE-2010-3566" title="CVE-2010-3566" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3567" id="CVE-2010-3567" title="CVE-2010-3567" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3568" id="CVE-2010-3568" title="CVE-2010-3568" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3569" id="CVE-2010-3569" title="CVE-2010-3569" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3573" id="CVE-2010-3573" title="CVE-2010-3573" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574" id="CVE-2010-3574" title="CVE-2010-3574" type="cve"/>
  </references>
  <description>Icedtea included in java-1_6_0-openjdk  was updated to
version 1.7.5/1.8.2/1.9.1 to fix several security issues:

    * S6914943, CVE-2009-3555: TLS: MITM attacks via
session renegotiation
    * S6559775, CVE-2010-3568: OpenJDK Deserialization Race
condition
    * S6891766, CVE-2010-3554: OpenJDK corba reflection
vulnerabilities
    * S6925710, CVE-2010-3562: OpenJDK IndexColorModel
double-free
    * S6938813, CVE-2010-3557: OpenJDK Swing mutable static
    * S6957564, CVE-2010-3548: OpenJDK DNS server IP
address information leak
    * S6958060, CVE-2010-3564: OpenJDK kerberos
vulnerability
    * S6963023, CVE-2010-3565: OpenJDK JPEG writeImage
remote code execution
    * S6963489, CVE-2010-3566: OpenJDK ICC Profile remote
code execution
    * S6966692, CVE-2010-3569: OpenJDK Serialization
inconsistencies
    * S6622002, CVE-2010-3553: UIDefault.ProxyLazyValue has
unsafe reflection usage
    * S6925672, CVE-2010-3561: Privileged
ServerSocket.accept allows receiving connections from any
host
    * S6952017, CVE-2010-3549: HttpURLConnection chunked
encoding issue (Http request splitting)
    * S6952603, CVE-2010-3551: NetworkInterface reveals
local network address to untrusted code
    * S6961084, CVE-2010-3541: limit setting of some
request headers in HttpURLConnection
    * S6963285, CVE-2010-3567: Crash in ICU Opentype layout
engine due to mismatch in character counts
    * S6980004, CVE-2010-3573: limit HTTP request cookie
headers in HttpURLConnection
    * S6981426, CVE-2010-3574: limit use of TRACE method in
HttpURLConnection
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.1-0.2.2.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.1-0.2.2.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.1-0.2.2.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.1-0.2.2.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.1-0.2.2.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.1-0.2.2.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.1-0.2.2.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.1-0.2.2.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b20.1.9.1" release="0.2.2">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.1-0.2.2.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3edc78adcb278bebde758eca85fb40df"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3529">
  <id>taglib-sharp</id>
  <title>taglib-sharp: update Url to Home Page</title>
  <release>openSUSE 11.3</release>
  <issued date="1289569375"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=648990" id="648990" title="bug number 648990" type="bugzilla"/>
  </references>
  <description>This update fixes an outdated link to the original project
home page.
</description>
  <pkglist>
    <collection>
        <package name="taglib-sharp" arch="noarch" version="2.0.3.7" release="2.1.1">
          <filename>taglib-sharp-2.0.3.7-2.1.1.noarch.rpm</filename>
        </package>
        <package name="taglib-sharp-devel" arch="noarch" version="2.0.3.7" release="2.1.1">
          <filename>taglib-sharp-devel-2.0.3.7-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b3f6f65d998f625d2823435c6ccc76bc"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3501">
  <id>aaa_base</id>
  <title>aaa_base: Fix hanging boot with custom kernel</title>
  <release>openSUSE 11.3</release>
  <issued date="1289496754"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=648408" id="648408" title="bug number 648408" type="bugzilla"/>
  </references>
  <description>This update adds an error message that booting was aborted
if the kernel is missing devtmpfs support instead of just
silently getting stuck.
</description>
  <pkglist>
    <collection>
        <package name="aaa_base" arch="i586" version="11.3" release="8.5.1">
          <filename>aaa_base-11.3-8.5.1.i586.rpm</filename>
        </package>
        <package name="aaa_base" arch="x86_64" version="11.3" release="8.5.1">
          <filename>aaa_base-11.3-8.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bf669c1e6014949f40ff10c755d1ce44"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3530">
  <id>tomcat6</id>
  <title>tomcat6: Fix upgrading of tomcat6</title>
  <release>openSUSE 11.3</release>
  <issued date="1289568970"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625415" id="625415" title="bug number 625415" type="bugzilla"/>
  </references>
  <description>The previous fix for bnc#650130 changed directory
/etc/tomcat6/Catalina into a symlink, which is not
supported by rpm

This update adds a workaround which enables proper upgrade.
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-admin-webapps-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-docs-webapp-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-el-1_0-api" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-el-1_0-api-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-javadoc-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-jsp-2_1-api-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-lib-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-servlet-2_5-api-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.24" release="5.4.1">
          <filename>tomcat6-webapps-6.0.24-5.4.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9158011dd1faa1a82705320cfb105e5b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3562">
  <id>libopenssl-devel</id>
  <title>openssl security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1290195024"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651003" id="651003" title="bug number 651003" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864" id="CVE-2010-3864" title="CVE-2010-3864" type="cve"/>
  </references>
  <description>Multithreaded OpenSSL servers using the TLS server
extension are vulnerable to a buffer overrun attack
(CVE-2010-3864).
</description>
  <pkglist>
    <collection>
        <package name="libopenssl-devel" arch="i586" version="1.0.0" release="6.3.1">
          <filename>libopenssl-devel-1.0.0-6.3.1.i586.rpm</filename>
        </package>
        <package name="libopenssl-devel" arch="x86_64" version="1.0.0" release="6.3.1">
          <filename>libopenssl-devel-1.0.0-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="i586" version="0.9.8m" release="3.1.2">
          <filename>libopenssl0_9_8-0.9.8m-3.1.2.i586.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="x86_64" version="0.9.8m" release="3.1.2">
          <filename>libopenssl0_9_8-0.9.8m-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8-32bit" arch="x86_64" version="0.9.8m" release="3.1.2">
          <filename>libopenssl0_9_8-32bit-0.9.8m-3.1.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="i586" version="1.0.0" release="6.3.1">
          <filename>libopenssl1_0_0-1.0.0-6.3.1.i586.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="x86_64" version="1.0.0" release="6.3.1">
          <filename>libopenssl1_0_0-1.0.0-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0-32bit" arch="x86_64" version="1.0.0" release="6.3.1">
          <filename>libopenssl1_0_0-32bit-1.0.0-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="openssl" arch="i586" version="1.0.0" release="6.3.1">
          <filename>openssl-1.0.0-6.3.1.i586.rpm</filename>
        </package>
        <package name="openssl" arch="x86_64" version="1.0.0" release="6.3.1">
          <filename>openssl-1.0.0-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-doc" arch="noarch" version="1.0.0" release="6.3.1">
          <filename>openssl-doc-1.0.0-6.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4a5883293b78b42ebc7b7e7b8e0c1eee"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3118">
  <id>gdm</id>
  <title>gdm security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1284588170"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628607" id="628607" title="bug number 628607" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633655" id="633655" title="bug number 633655" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637069" id="637069" title="bug number 637069" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" id="CVE-2010-1172" title="CVE-2010-1172" type="cve"/>
  </references>
  <description>dbus-glib allowed local users to write properties that were
exported read-only via dbus (CVE-2010-1172).

Additionally a bug that prevented XDMCP connections was
fixed.
</description>
  <pkglist>
    <collection>
        <package name="gdm" arch="i586" version="2.30.2" release="6.1.1">
          <filename>gdm-2.30.2-6.1.1.i586.rpm</filename>
        </package>
        <package name="gdm" arch="x86_64" version="2.30.2" release="6.1.1">
          <filename>gdm-2.30.2-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="gdm-branding-upstream" arch="i586" version="2.30.2" release="6.1.1">
          <filename>gdm-branding-upstream-2.30.2-6.1.1.i586.rpm</filename>
        </package>
        <package name="gdm-branding-upstream" arch="x86_64" version="2.30.2" release="6.1.1">
          <filename>gdm-branding-upstream-2.30.2-6.1.1.x86_64.rpm</filename>
        </package>
        <package name="gdm-lang" arch="noarch" version="2.30.2" release="6.1.1">
          <filename>gdm-lang-2.30.2-6.1.1.noarch.rpm</filename>
        </package>
        <package name="gnome-applets-gdm" arch="i586" version="2.30.2" release="6.1.1">
          <filename>gnome-applets-gdm-2.30.2-6.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-applets-gdm" arch="x86_64" version="2.30.2" release="6.1.1">
          <filename>gnome-applets-gdm-2.30.2-6.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="83fe7e1c1c995b92d94fee7255a9ebb0"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3542">
  <id>tar</id>
  <title>tar: It segfaults with using --listed-incremental. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289953051"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650640" id="650640" title="bug number 650640" type="bugzilla"/>
  </references>
  <description>tar: listed incremental (--listed-incremental) backup of
root directory triggers a segfault. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="tar" arch="i586" version="1.23" release="2.3.1">
          <filename>tar-1.23-2.3.1.i586.rpm</filename>
        </package>
        <package name="tar" arch="x86_64" version="1.23" release="2.3.1">
          <filename>tar-1.23-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="tar-backup-scripts" arch="i586" version="1.23" release="2.3.1">
          <filename>tar-backup-scripts-1.23-2.3.1.i586.rpm</filename>
        </package>
        <package name="tar-backup-scripts" arch="x86_64" version="1.23" release="2.3.1">
          <filename>tar-backup-scripts-1.23-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="tar-lang" arch="noarch" version="1.23" release="2.3.1">
          <filename>tar-lang-1.23-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7b1fc81115eb8496649cb64ab7637480"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3537">
  <id>libquicktime</id>
  <title>mjpegtools: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289842893"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647859" id="647859" title="bug number 647859" type="bugzilla"/>
  </references>
  <description>This update fixes segmentation faults in libquicktime and
mjpegtools with libjpeg8.
</description>
  <pkglist>
    <collection>
        <package name="libquicktime" arch="i586" version="1.1.5" release="4.3.1">
          <filename>libquicktime-1.1.5-4.3.1.i586.rpm</filename>
        </package>
        <package name="libquicktime" arch="x86_64" version="1.1.5" release="4.3.1">
          <filename>libquicktime-1.1.5-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libquicktime-devel" arch="i586" version="1.1.5" release="4.3.1">
          <filename>libquicktime-devel-1.1.5-4.3.1.i586.rpm</filename>
        </package>
        <package name="libquicktime-devel" arch="x86_64" version="1.1.5" release="4.3.1">
          <filename>libquicktime-devel-1.1.5-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="mjpegtools" arch="i586" version="1.9.0" release="9.3.1">
          <filename>mjpegtools-1.9.0-9.3.1.i586.rpm</filename>
        </package>
        <package name="mjpegtools" arch="x86_64" version="1.9.0" release="9.3.1">
          <filename>mjpegtools-1.9.0-9.3.1.x86_64.rpm</filename>
        </package>
        <package name="mjpegtools-devel" arch="i586" version="1.9.0" release="9.3.1">
          <filename>mjpegtools-devel-1.9.0-9.3.1.i586.rpm</filename>
        </package>
        <package name="mjpegtools-devel" arch="x86_64" version="1.9.0" release="9.3.1">
          <filename>mjpegtools-devel-1.9.0-9.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="493a198dbf19a2b40479e5345b5869cb"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3335">
  <id>libpoppler-devel</id>
  <title>poppler: Fixed multiple vulnerabilities</title>
  <release>openSUSE 11.3</release>
  <issued date="1287225142"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642785" id="642785" title="bug number 642785" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3702" id="CVE-2010-3702" title="CVE-2010-3702" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3703" id="CVE-2010-3703" title="CVE-2010-3703" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3704" id="CVE-2010-3704" title="CVE-2010-3704" type="cve"/>
  </references>
  <description>Specially crafted PDF files could crash poppler or
potentially even cause execution of arbitrary code
(CVE-2010-3702, CVE-2010-3703, CVE-2010-3704)
</description>
  <pkglist>
    <collection>
        <package name="libpoppler-devel" arch="i586" version="0.12.3" release="5.1.1">
          <filename>libpoppler-devel-0.12.3-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpoppler-devel" arch="x86_64" version="0.12.3" release="5.1.1">
          <filename>libpoppler-devel-0.12.3-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpoppler-doc" arch="noarch" version="0.12.3" release="5.1.1">
          <filename>libpoppler-doc-0.12.3-5.1.1.noarch.rpm</filename>
        </package>
        <package name="libpoppler-glib-devel" arch="i586" version="0.12.3" release="5.1.1">
          <filename>libpoppler-glib-devel-0.12.3-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpoppler-glib-devel" arch="x86_64" version="0.12.3" release="5.1.1">
          <filename>libpoppler-glib-devel-0.12.3-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpoppler-glib4" arch="i586" version="0.12.3" release="5.1.1">
          <filename>libpoppler-glib4-0.12.3-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpoppler-glib4" arch="x86_64" version="0.12.3" release="5.1.1">
          <filename>libpoppler-glib4-0.12.3-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpoppler5" arch="i586" version="0.12.3" release="5.1.1">
          <filename>libpoppler5-0.12.3-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpoppler5" arch="x86_64" version="0.12.3" release="5.1.1">
          <filename>libpoppler5-0.12.3-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="poppler-tools" arch="i586" version="0.12.3" release="5.1.1">
          <filename>poppler-tools-0.12.3-5.1.1.i586.rpm</filename>
        </package>
        <package name="poppler-tools" arch="x86_64" version="0.12.3" release="5.1.1">
          <filename>poppler-tools-0.12.3-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6463c69c301e0624506afed76827648f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3508">
  <id>quagga</id>
  <title>quagga: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1289496914"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634300" id="634300" title="bug number 634300" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2949" id="CVE-2010-2949" title="CVE-2010-2949" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2948" id="CVE-2010-2948" title="CVE-2010-2948" type="cve"/>
  </references>
  <description>This update of quagga fixes two security issues:
- CVE-2010-2948: CVSS v2 Base Score: 6.5 (MEDIUM)
  (AV:N/AC:L/Au:S/C:P/I:P/A:P) Stack-based buffer overflow
  while processing malformed Route-Refresh messages.
- CVE-2010-2949: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P) Denial of service while
  processing malformed BGP update AS path messages
</description>
  <pkglist>
    <collection>
        <package name="quagga" arch="i586" version="0.99.17" release="1.3.1">
          <filename>quagga-0.99.17-1.3.1.i586.rpm</filename>
        </package>
        <package name="quagga" arch="x86_64" version="0.99.17" release="1.3.1">
          <filename>quagga-0.99.17-1.3.1.x86_64.rpm</filename>
        </package>
        <package name="quagga-devel" arch="i586" version="0.99.17" release="1.3.1">
          <filename>quagga-devel-0.99.17-1.3.1.i586.rpm</filename>
        </package>
        <package name="quagga-devel" arch="x86_64" version="0.99.17" release="1.3.1">
          <filename>quagga-devel-0.99.17-1.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6fb7a83d5fcc87c581df7d7143257642"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3310">
  <id>openslp</id>
  <title>openslp security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1286921488"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642571" id="642571" title="bug number 642571" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3609" id="CVE-2010-3609" title="CVE-2010-3609" type="cve"/>
  </references>
  <description>the openslp daemon could run into an endless loop when
receiving specially crafted packets (CVE-2010-3609).
</description>
  <pkglist>
    <collection>
        <package name="openslp" arch="i586" version="1.2.0" release="180.1.1">
          <filename>openslp-1.2.0-180.1.1.i586.rpm</filename>
        </package>
        <package name="openslp" arch="x86_64" version="1.2.0" release="180.1.1">
          <filename>openslp-1.2.0-180.1.1.x86_64.rpm</filename>
        </package>
        <package name="openslp-32bit" arch="x86_64" version="1.2.0" release="180.1.1">
          <filename>openslp-32bit-1.2.0-180.1.1.x86_64.rpm</filename>
        </package>
        <package name="openslp-devel" arch="i586" version="1.2.0" release="180.1.1">
          <filename>openslp-devel-1.2.0-180.1.1.i586.rpm</filename>
        </package>
        <package name="openslp-devel" arch="x86_64" version="1.2.0" release="180.1.1">
          <filename>openslp-devel-1.2.0-180.1.1.x86_64.rpm</filename>
        </package>
        <package name="openslp-server" arch="i586" version="1.2.0" release="180.1.1">
          <filename>openslp-server-1.2.0-180.1.1.i586.rpm</filename>
        </package>
        <package name="openslp-server" arch="x86_64" version="1.2.0" release="180.1.1">
          <filename>openslp-server-1.2.0-180.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="611e9759a34290014097d53d35d03bc3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3447">
  <id>clamav</id>
  <title>clamav: Update to version 0.96.4</title>
  <release>openSUSE 11.3</release>
  <issued date="1288707796"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649631" id="649631" title="bug number 649631" type="bugzilla"/>
  </references>
  <description>clamav version update to 0.96.4 includes several bug fixes
and engine improvements.
</description>
  <pkglist>
    <collection>
        <package name="clamav" arch="i586" version="0.96.4" release="0.2.1">
          <filename>clamav-0.96.4-0.2.1.i586.rpm</filename>
        </package>
        <package name="clamav" arch="x86_64" version="0.96.4" release="0.2.1">
          <filename>clamav-0.96.4-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="clamav-db" arch="noarch" version="0.96.4" release="0.2.1">
          <filename>clamav-db-0.96.4-0.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d11e2264ff6e52cf21732059c7b17854"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3609">
  <id>tomboy</id>
  <title>tomboy: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291138971"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649298" id="649298" title="bug number 649298" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642830" id="642830" title="bug number 642830" type="bugzilla"/>
  </references>
  <description>Tomboy security fix CVE-2010-4005 and note data loss with
Tomboy sync, for notes created in Gnote. CVE-2010-4005:
CVSS v2 Base Score: 3.7 (low) (AV:L/AC:H/Au:N/C:P/I:P/A:P):
Code Injection (CWE-94)
</description>
  <pkglist>
    <collection>
        <package name="tomboy" arch="i586" version="1.2.1" release="3.3.1">
          <filename>tomboy-1.2.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="tomboy" arch="x86_64" version="1.2.1" release="3.3.1">
          <filename>tomboy-1.2.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tomboy-lang" arch="noarch" version="1.2.1" release="3.3.1">
          <filename>tomboy-lang-1.2.1-3.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ac91028476d2b41921d628b3b81e5ec0"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3459">
  <id>libxml2</id>
  <title>libxml2: Fixing invalid memory access in the xpath handling (CVE-2010-4008).</title>
  <release>openSUSE 11.3</release>
  <issued date="1288785224"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=648277" id="648277" title="bug number 648277" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008" id="CVE-2010-4008" title="CVE-2010-4008" type="cve"/>
  </references>
  <description>libxml2: Invalid memory access in the xpath handling has
been fixed. CVE-2010-4008 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="libxml2" arch="i586" version="2.7.7" release="4.3.1">
          <filename>libxml2-2.7.7-4.3.1.i586.rpm</filename>
        </package>
        <package name="libxml2" arch="x86_64" version="2.7.7" release="4.3.1">
          <filename>libxml2-2.7.7-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-32bit" arch="x86_64" version="2.7.7" release="4.3.1">
          <filename>libxml2-32bit-2.7.7-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-devel" arch="i586" version="2.7.7" release="4.3.1">
          <filename>libxml2-devel-2.7.7-4.3.1.i586.rpm</filename>
        </package>
        <package name="libxml2-devel" arch="x86_64" version="2.7.7" release="4.3.1">
          <filename>libxml2-devel-2.7.7-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-devel-32bit" arch="x86_64" version="2.7.7" release="4.3.1">
          <filename>libxml2-devel-32bit-2.7.7-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-doc" arch="noarch" version="2.7.7" release="4.3.1">
          <filename>libxml2-doc-2.7.7-4.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c6b81dc336a63da12fad05effce8974c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3568">
  <id>cyrus-imapd</id>
  <title>cyrus-imapd: Wrong path in cron job is fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1290549573"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650919" id="650919" title="bug number 650919" type="bugzilla"/>
  </references>
  <description>The daily cronjob (suse.de-cyrus-imapd) to create automated
backups of the mailboxes database did not work correctly
because the ctl_mboxlist utility was moved to a different
location with openSUSE 11.3. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="cyrus-imapd" arch="i586" version="2.3.16" release="8.3.1">
          <filename>cyrus-imapd-2.3.16-8.3.1.i586.rpm</filename>
        </package>
        <package name="cyrus-imapd" arch="x86_64" version="2.3.16" release="8.3.1">
          <filename>cyrus-imapd-2.3.16-8.3.1.x86_64.rpm</filename>
        </package>
        <package name="cyrus-imapd-devel" arch="i586" version="2.3.16" release="8.3.1">
          <filename>cyrus-imapd-devel-2.3.16-8.3.1.i586.rpm</filename>
        </package>
        <package name="cyrus-imapd-devel" arch="x86_64" version="2.3.16" release="8.3.1">
          <filename>cyrus-imapd-devel-2.3.16-8.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Cyrus-IMAP" arch="i586" version="2.3.16" release="8.3.1">
          <filename>perl-Cyrus-IMAP-2.3.16-8.3.1.i586.rpm</filename>
        </package>
        <package name="perl-Cyrus-IMAP" arch="x86_64" version="2.3.16" release="8.3.1">
          <filename>perl-Cyrus-IMAP-2.3.16-8.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Cyrus-SIEVE-managesieve" arch="i586" version="2.3.16" release="8.3.1">
          <filename>perl-Cyrus-SIEVE-managesieve-2.3.16-8.3.1.i586.rpm</filename>
        </package>
        <package name="perl-Cyrus-SIEVE-managesieve" arch="x86_64" version="2.3.16" release="8.3.1">
          <filename>perl-Cyrus-SIEVE-managesieve-2.3.16-8.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="819c0b2682fc131e58ebddae645e6b3f"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3577">
  <id>doxygen</id>
  <title>doxygen: A segfault when building blender documentation is fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1290619769"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650330" id="650330" title="bug number 650330" type="bugzilla"/>
  </references>
  <description>Doxygen-1.6.3-3.2 segfaults when building blender
documentation. This bug is fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="doxygen" arch="i586" version="1.6.3" release="4.3.1">
          <filename>doxygen-1.6.3-4.3.1.i586.rpm</filename>
        </package>
        <package name="doxygen" arch="x86_64" version="1.6.3" release="4.3.1">
          <filename>doxygen-1.6.3-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="04c4ad02563d91e79debcf19de4dd5d8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3586">
  <id>yast2-country</id>
  <title>yast2-country: After changing the timezone and rebooting the old timezone is still used. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1290717247"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638185" id="638185" title="bug number 638185" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638128" id="638128" title="bug number 638128" type="bugzilla"/>
  </references>
  <description>After changing the timezone (when localtime is used) and
rebooting the old timezone is still used. Fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="yast2-country" arch="i586" version="2.19.20" release="0.2.1">
          <filename>yast2-country-2.19.20-0.2.1.i586.rpm</filename>
        </package>
        <package name="yast2-country" arch="x86_64" version="2.19.20" release="0.2.1">
          <filename>yast2-country-2.19.20-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-country-data" arch="i586" version="2.19.20" release="0.2.1">
          <filename>yast2-country-data-2.19.20-0.2.1.i586.rpm</filename>
        </package>
        <package name="yast2-country-data" arch="x86_64" version="2.19.20" release="0.2.1">
          <filename>yast2-country-data-2.19.20-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0ff32fc88aa8896e55ae91908b6ab499"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3551">
  <id>softwaremgmt_201011</id>
  <title>This update fixes several bugs in the software management tools.</title>
  <release>openSUSE 11.3</release>
  <issued date="1289954137"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635596" id="635596" title="bug number 635596" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641328" id="641328" title="bug number 641328" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=545106" id="545106" title="bug number 545106" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631306" id="631306" title="bug number 631306" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621649" id="621649" title="bug number 621649" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623226" id="623226" title="bug number 623226" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=614362" id="614362" title="bug number 614362" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613304" id="613304" title="bug number 613304" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624320" id="624320" title="bug number 624320" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623860" id="623860" title="bug number 623860" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619196" id="619196" title="bug number 619196" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599154" id="599154" title="bug number 599154" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613198" id="613198" title="bug number 613198" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647214" id="647214" title="bug number 647214" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620377" id="620377" title="bug number 620377" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646410" id="646410" title="bug number 646410" type="bugzilla"/>
  </references>
  <description>This update fixes several bugs in the software management
tools.
</description>
  <pkglist>
    <collection>
        <package name="libsatsolver-demo" arch="i586" version="0.15.2" release="0.1.1">
          <filename>libsatsolver-demo-0.15.2-0.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libsatsolver-demo" arch="x86_64" version="0.15.2" release="0.1.1">
          <filename>libsatsolver-demo-0.15.2-0.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libsatsolver-devel" arch="i586" version="0.15.2" release="0.1.1">
          <filename>libsatsolver-devel-0.15.2-0.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libsatsolver-devel" arch="x86_64" version="0.15.2" release="0.1.1">
          <filename>libsatsolver-devel-0.15.2-0.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libzypp" arch="i586" version="7.9.6" release="0.3.1">
          <filename>libzypp-7.9.6-0.3.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libzypp" arch="x86_64" version="7.9.6" release="0.3.1">
          <filename>libzypp-7.9.6-0.3.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libzypp-devel" arch="i586" version="7.9.6" release="0.3.1">
          <filename>libzypp-devel-7.9.6-0.3.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="libzypp-devel" arch="x86_64" version="7.9.6" release="0.3.1">
          <filename>libzypp-devel-7.9.6-0.3.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="perl-satsolver" arch="i586" version="0.15.2" release="0.1.1">
          <filename>perl-satsolver-0.15.2-0.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="perl-satsolver" arch="x86_64" version="0.15.2" release="0.1.1">
          <filename>perl-satsolver-0.15.2-0.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="perl-zypp" arch="i586" version="0.5.5" release="1.1.1">
          <filename>perl-zypp-0.5.5-1.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="perl-zypp" arch="x86_64" version="0.5.5" release="1.1.1">
          <filename>perl-zypp-0.5.5-1.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="python-satsolver" arch="i586" version="0.15.2" release="0.1.1">
          <filename>python-satsolver-0.15.2-0.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="python-satsolver" arch="x86_64" version="0.15.2" release="0.1.1">
          <filename>python-satsolver-0.15.2-0.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="python-zypp" arch="i586" version="0.5.5" release="1.1.1">
          <filename>python-zypp-0.5.5-1.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="python-zypp" arch="x86_64" version="0.5.5" release="1.1.1">
          <filename>python-zypp-0.5.5-1.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="ruby-satsolver" arch="i586" version="0.15.2" release="0.1.1">
          <filename>ruby-satsolver-0.15.2-0.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="ruby-satsolver" arch="x86_64" version="0.15.2" release="0.1.1">
          <filename>ruby-satsolver-0.15.2-0.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="ruby-zypp" arch="i586" version="0.5.5" release="1.1.1">
          <filename>ruby-zypp-0.5.5-1.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="ruby-zypp" arch="x86_64" version="0.5.5" release="1.1.1">
          <filename>ruby-zypp-0.5.5-1.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="satsolver-tools" arch="i586" version="0.15.2" release="0.1.1">
          <filename>satsolver-tools-0.15.2-0.1.1.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="satsolver-tools" arch="x86_64" version="0.15.2" release="0.1.1">
          <filename>satsolver-tools-0.15.2-0.1.1.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="yast2-qt-pkg" arch="i586" version="2.19.3" release="0.1.3">
          <filename>yast2-qt-pkg-2.19.3-0.1.3.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="yast2-qt-pkg" arch="x86_64" version="2.19.3" release="0.1.3">
          <filename>yast2-qt-pkg-2.19.3-0.1.3.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="zypper" arch="i586" version="1.4.8" release="0.2.4">
          <filename>zypper-1.4.8-0.2.4.i586.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
        <package name="zypper" arch="x86_64" version="1.4.8" release="0.2.4">
          <filename>zypper-1.4.8-0.2.4.x86_64.rpm</filename>
          <restart_suggested>1</restart_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8107cbeafc0794f40711a2548bab0d60"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3485">
  <id>apache2-mod_php5</id>
  <title>php5 security update for CVE-2010-3870 and CVE-2010-3710</title>
  <release>openSUSE 11.3</release>
  <issued date="1289394461"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650700" id="650700" title="bug number 650700" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3870" id="CVE-2010-3870" title="CVE-2010-3870" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3710" id="CVE-2010-3710" title="CVE-2010-3710" type="cve"/>
  </references>
  <description>Insufficient handling of certain character sequences in the
utf8_decode() function could be leveraged to conduct
cross-site-scripting (XSS) attacks  (CVE-2010-3870). php5
could also consume large amounts of memory and crash if a
long mail address was passed to filter_var() with parmeter
FILTER_VALIDATE_EMAIL (CVE-2010-3710).
</description>
  <pkglist>
    <collection>
        <package name="apache2-mod_php5" arch="i586" version="5.3.3" release="0.7.1">
          <filename>apache2-mod_php5-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="apache2-mod_php5" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>apache2-mod_php5-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-bcmath-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-bcmath-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-bz2" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-bz2-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-bz2" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-bz2-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-calendar" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-calendar-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-calendar" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-calendar-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ctype" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-ctype-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-ctype" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-ctype-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-curl" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-curl-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-curl" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-curl-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-dba" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-dba-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-dba" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-dba-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-devel" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-devel-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-devel" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-devel-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-dom" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-dom-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-dom" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-dom-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-enchant" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-enchant-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-enchant" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-enchant-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-exif" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-exif-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-exif" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-exif-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-fastcgi-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-fastcgi-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-fileinfo-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-fileinfo-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ftp" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-ftp-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-ftp" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-ftp-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gd" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-gd-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-gd" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-gd-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gettext" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-gettext-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-gettext" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-gettext-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gmp" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-gmp-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-gmp" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-gmp-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-hash" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-hash-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-hash" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-hash-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-iconv" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-iconv-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-iconv" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-iconv-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-imap" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-imap-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-imap" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-imap-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-intl" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-intl-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-intl" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-intl-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-json" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-json-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-json" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-json-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ldap" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-ldap-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-ldap" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-ldap-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-mbstring-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-mbstring-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-mcrypt-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-mcrypt-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mysql" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-mysql-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-mysql" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-mysql-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-odbc" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-odbc-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-odbc" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-odbc-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-openssl" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-openssl-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-openssl" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-openssl-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-pcntl-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-pcntl-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pdo" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-pdo-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-pdo" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-pdo-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pear" arch="noarch" version="5.3.3" release="0.7.1">
          <filename>php5-pear-5.3.3-0.7.1.noarch.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-pgsql-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-pgsql-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-phar" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-phar-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-phar" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-phar-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-posix" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-posix-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-posix" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-posix-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pspell" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-pspell-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-pspell" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-pspell-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-readline" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-readline-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-readline" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-readline-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-shmop" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-shmop-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-shmop" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-shmop-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-snmp" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-snmp-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-snmp" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-snmp-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-soap" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-soap-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-soap" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-soap-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sockets" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-sockets-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-sockets" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-sockets-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-sqlite-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-sqlite-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-suhosin-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-suhosin-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-sysvmsg-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-sysvmsg-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-sysvsem-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-sysvsem-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-sysvshm-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-sysvshm-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-tidy" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-tidy-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-tidy" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-tidy-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-tokenizer-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-tokenizer-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-wddx" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-wddx-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-wddx" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-wddx-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-xmlreader-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-xmlreader-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-xmlrpc-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-xmlrpc-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-xmlwriter-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-xmlwriter-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xsl" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-xsl-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-xsl" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-xsl-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-zip" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-zip-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-zip" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-zip-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="php5-zlib" arch="i586" version="5.3.3" release="0.7.1">
          <filename>php5-zlib-5.3.3-0.7.1.i586.rpm</filename>
        </package>
        <package name="php5-zlib" arch="x86_64" version="5.3.3" release="0.7.1">
          <filename>php5-zlib-5.3.3-0.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ee6b5b7a363e1901fa4a8a9786cb015e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3618">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291314270"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=656742" id="656742" title="bug number 656742" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3860" id="CVE-2010-3860" title="CVE-2010-3860" type="cve"/>
  </references>
  <description>This update of IcedTea fixes an information leak in System
property via public static. (CVE-2010-3860)
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.2-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.2-0.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.2-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.2-0.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.2-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.2-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b20.1.9.2" release="0.2.1">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.2-0.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b9517c6deeb9b6fb02cdb512c1c8745c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3574">
  <id>cups</id>
  <title>cups: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1290619799"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649256" id="649256" title="bug number 649256" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2941" id="CVE-2010-2941" title="CVE-2010-2941" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542" id="CVE-2010-0542" title="CVE-2010-0542" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748" id="CVE-2010-1748" title="CVE-2010-1748" type="cve"/>
  </references>
  <description>This updates fix several bugs, but only the security fixes
are listed here:
- CVE-2010-2941: CVSS v2 Base Score: 3.3
  (AV:A/AC:L/Au:N/C:N/I:N/A:P): CWE-399 Special IPP
  requests allow to crashcupsd remotely.
- CVE-2010-0542: CVSS v2 Base Score: 6.8
  (AV:N/AC:M/Au:N/C:P/I:P/A:P): CWE-264 A NULL pointer
  dereference exists in the _WriteProlog() function of the
  texttops image filter.
- CVE-2010-1748: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:P/I:N/A:N): CWE-119 An attacker with
  access to the web-interface may be able to read some
  bytes of uninitialized memory.
</description>
  <pkglist>
    <collection>
        <package name="cups" arch="i586" version="1.4.4" release="3.3.1">
          <filename>cups-1.4.4-3.3.1.i586.rpm</filename>
        </package>
        <package name="cups" arch="x86_64" version="1.4.4" release="3.3.1">
          <filename>cups-1.4.4-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cups-client" arch="i586" version="1.4.4" release="3.3.1">
          <filename>cups-client-1.4.4-3.3.1.i586.rpm</filename>
        </package>
        <package name="cups-client" arch="x86_64" version="1.4.4" release="3.3.1">
          <filename>cups-client-1.4.4-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cups-ddk" arch="i586" version="1.4.4" release="3.3.1">
          <filename>cups-ddk-1.4.4-3.3.1.i586.rpm</filename>
        </package>
        <package name="cups-ddk" arch="x86_64" version="1.4.4" release="3.3.1">
          <filename>cups-ddk-1.4.4-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cups-devel" arch="i586" version="1.4.4" release="3.3.1">
          <filename>cups-devel-1.4.4-3.3.1.i586.rpm</filename>
        </package>
        <package name="cups-devel" arch="x86_64" version="1.4.4" release="3.3.1">
          <filename>cups-devel-1.4.4-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cups-libs" arch="i586" version="1.4.4" release="3.3.1">
          <filename>cups-libs-1.4.4-3.3.1.i586.rpm</filename>
        </package>
        <package name="cups-libs" arch="x86_64" version="1.4.4" release="3.3.1">
          <filename>cups-libs-1.4.4-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cups-libs-32bit" arch="x86_64" version="1.4.4" release="3.3.1">
          <filename>cups-libs-32bit-1.4.4-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="fecaa8225f07afccbc9c787ee688c961"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3616">
  <id>boost</id>
  <title>boost: Improve support for gcc 4.5</title>
  <release>openSUSE 11.3</release>
  <issued date="1291312333"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621140" id="621140" title="bug number 621140" type="bugzilla"/>
  </references>
  <description>This update provides improvements to headers to make it
useable with gcc 4.5 (bnc#621140).
</description>
  <pkglist>
    <collection>
        <package name="boost-devel" arch="i586" version="1.42.0" release="7.1.1">
          <filename>boost-devel-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="boost-devel" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>boost-devel-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="boost-devel-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>boost-devel-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="boost-doc-html" arch="noarch" version="1.42.0" release="7.1.1">
          <filename>boost-doc-html-1.42.0-7.1.1.noarch.rpm</filename>
        </package>
        <package name="boost-doc-man" arch="noarch" version="1.42.0" release="7.1.1">
          <filename>boost-doc-man-1.42.0-7.1.1.noarch.rpm</filename>
        </package>
        <package name="boost-doc-pdf" arch="noarch" version="1.42.0" release="7.1.1">
          <filename>boost-doc-pdf-1.42.0-7.1.1.noarch.rpm</filename>
        </package>
        <package name="boost-license1_42_0" arch="noarch" version="1.42.0" release="7.1.1">
          <filename>boost-license1_42_0-1.42.0-7.1.1.noarch.rpm</filename>
        </package>
        <package name="libboost_date_time1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_date_time1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_date_time1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_date_time1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_date_time1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_date_time1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_filesystem1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_filesystem1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_filesystem1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_filesystem1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_filesystem1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_filesystem1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_graph1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_graph1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_graph1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_graph1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_graph1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_graph1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_iostreams1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_iostreams1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_iostreams1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_iostreams1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_iostreams1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_iostreams1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_math1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_math1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_math1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_math1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_math1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_math1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_mpi1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_mpi1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_mpi1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_mpi1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_mpi1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_mpi1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_program_options1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_program_options1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_program_options1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_program_options1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_program_options1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_program_options1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_python1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_python1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_python1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_python1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_python1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_python1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_regex1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_regex1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_regex1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_regex1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_regex1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_regex1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_serialization1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_serialization1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_serialization1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_serialization1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_serialization1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_serialization1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_signals1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_signals1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_signals1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_signals1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_signals1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_signals1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_system1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_system1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_system1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_system1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_system1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_system1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_test1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_test1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_test1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_test1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_test1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_test1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_thread1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_thread1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_thread1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_thread1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_thread1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_thread1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_wave1_42_0" arch="i586" version="1.42.0" release="7.1.1">
          <filename>libboost_wave1_42_0-1.42.0-7.1.1.i586.rpm</filename>
        </package>
        <package name="libboost_wave1_42_0" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_wave1_42_0-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="libboost_wave1_42_0-32bit" arch="x86_64" version="1.42.0" release="7.1.1">
          <filename>libboost_wave1_42_0-32bit-1.42.0-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0b8877ba286860f070dd9d37d15f1ef4"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3588">
  <id>nfs-client</id>
  <title>nfs-utils: Fix remount of NFS v3 filesystems</title>
  <release>openSUSE 11.3</release>
  <issued date="1290729703"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647292" id="647292" title="bug number 647292" type="bugzilla"/>
  </references>
  <description>This update fixes remounting of NFS v3 filesystems
(bnc#647292).
</description>
  <pkglist>
    <collection>
        <package name="nfs-client" arch="i586" version="1.2.1" release="8.3.1">
          <filename>nfs-client-1.2.1-8.3.1.i586.rpm</filename>
        </package>
        <package name="nfs-client" arch="x86_64" version="1.2.1" release="8.3.1">
          <filename>nfs-client-1.2.1-8.3.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-doc" arch="i586" version="1.2.1" release="8.3.1">
          <filename>nfs-doc-1.2.1-8.3.1.i586.rpm</filename>
        </package>
        <package name="nfs-doc" arch="x86_64" version="1.2.1" release="8.3.1">
          <filename>nfs-doc-1.2.1-8.3.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" arch="i586" version="1.2.1" release="8.3.1">
          <filename>nfs-kernel-server-1.2.1-8.3.1.i586.rpm</filename>
        </package>
        <package name="nfs-kernel-server" arch="x86_64" version="1.2.1" release="8.3.1">
          <filename>nfs-kernel-server-1.2.1-8.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="39f3d45e5a586b124a797a67e3c2e333"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3621">
  <id>evolution-tracker</id>
  <title>tracker: Remove old data from store when stopping indexing</title>
  <release>openSUSE 11.3</release>
  <issued date="1291311649"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640786" id="640786" title="bug number 640786" type="bugzilla"/>
  </references>
  <description>This update fixes tracker to remove old data from the store
when stopping the indexing (bnc#640786).
</description>
  <pkglist>
    <collection>
        <package name="evolution-tracker" arch="i586" version="0.8.5" release="3.3.1">
          <filename>evolution-tracker-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="evolution-tracker" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>evolution-tracker-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtracker-client-0_8-0" arch="i586" version="0.8.5" release="3.3.1">
          <filename>libtracker-client-0_8-0-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="libtracker-client-0_8-0" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>libtracker-client-0_8-0-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtracker-extract-0_8-0" arch="i586" version="0.8.5" release="3.3.1">
          <filename>libtracker-extract-0_8-0-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="libtracker-extract-0_8-0" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>libtracker-extract-0_8-0-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtracker-miner-0_8-0" arch="i586" version="0.8.5" release="3.3.1">
          <filename>libtracker-miner-0_8-0-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="libtracker-miner-0_8-0" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>libtracker-miner-0_8-0-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="nautilus-tracker" arch="i586" version="0.8.5" release="3.3.1">
          <filename>nautilus-tracker-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="nautilus-tracker" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>nautilus-tracker-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tracker" arch="i586" version="0.8.5" release="3.3.1">
          <filename>tracker-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="tracker" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>tracker-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-applet" arch="i586" version="0.8.5" release="3.3.1">
          <filename>tracker-applet-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="tracker-applet" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>tracker-applet-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-devel" arch="i586" version="0.8.5" release="3.3.1">
          <filename>tracker-devel-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="tracker-devel" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>tracker-devel-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-gui" arch="i586" version="0.8.5" release="3.3.1">
          <filename>tracker-gui-0.8.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="tracker-gui" arch="x86_64" version="0.8.5" release="3.3.1">
          <filename>tracker-gui-0.8.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-lang" arch="noarch" version="0.8.5" release="3.3.1">
          <filename>tracker-lang-0.8.5-3.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ab66989977bbfd1e35c06b8bf5e119b9"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3617">
  <id>compiz</id>
  <title>compiz: Fix Desktop Zoop and Enhanced Desktop Zoom plugins</title>
  <release>openSUSE 11.3</release>
  <issued date="1291311754"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641596" id="641596" title="bug number 641596" type="bugzilla"/>
  </references>
  <description>This update removes a conflicting patch that makes Desktop
Zoom and Enhanced Desktop Zoom plugins to no longer work
(bnc#641596).
</description>
  <pkglist>
    <collection>
        <package name="compiz" arch="i586" version="0.8.6" release="4.3.1">
          <filename>compiz-0.8.6-4.3.1.i586.rpm</filename>
        </package>
        <package name="compiz" arch="x86_64" version="0.8.6" release="4.3.1">
          <filename>compiz-0.8.6-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="compiz-branding-openSUSE" arch="i586" version="0.8.6" release="4.3.1">
          <filename>compiz-branding-openSUSE-0.8.6-4.3.1.i586.rpm</filename>
        </package>
        <package name="compiz-branding-openSUSE" arch="x86_64" version="0.8.6" release="4.3.1">
          <filename>compiz-branding-openSUSE-0.8.6-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="compiz-branding-upstream" arch="i586" version="0.8.6" release="4.3.1">
          <filename>compiz-branding-upstream-0.8.6-4.3.1.i586.rpm</filename>
        </package>
        <package name="compiz-branding-upstream" arch="x86_64" version="0.8.6" release="4.3.1">
          <filename>compiz-branding-upstream-0.8.6-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="compiz-devel" arch="i586" version="0.8.6" release="4.3.1">
          <filename>compiz-devel-0.8.6-4.3.1.i586.rpm</filename>
        </package>
        <package name="compiz-devel" arch="x86_64" version="0.8.6" release="4.3.1">
          <filename>compiz-devel-0.8.6-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="compiz-gnome" arch="i586" version="0.8.6" release="4.3.1">
          <filename>compiz-gnome-0.8.6-4.3.1.i586.rpm</filename>
        </package>
        <package name="compiz-gnome" arch="x86_64" version="0.8.6" release="4.3.1">
          <filename>compiz-gnome-0.8.6-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="compiz-kde4" arch="i586" version="0.8.6" release="4.3.1">
          <filename>compiz-kde4-0.8.6-4.3.1.i586.rpm</filename>
        </package>
        <package name="compiz-kde4" arch="x86_64" version="0.8.6" release="4.3.1">
          <filename>compiz-kde4-0.8.6-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="82c4031c81a758c77487c1355139d333"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3388">
  <id>gnutls</id>
  <title>gnutls: fixing SSL-renegotiation &quot;authentication gap&quot;</title>
  <release>openSUSE 11.3</release>
  <issued date="1288019496"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=554084" id="554084" title="bug number 554084" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" id="CVE-2009-3555" title="CVE-2009-3555" type="cve"/>
  </references>
  <description>The SSL-renegotiation &quot;authentication gap&quot; has been fixed
in gnutls. CVE-2009-3555 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="gnutls" arch="i586" version="2.8.6" release="2.3.1">
          <filename>gnutls-2.8.6-2.3.1.i586.rpm</filename>
        </package>
        <package name="gnutls" arch="x86_64" version="2.8.6" release="2.3.1">
          <filename>gnutls-2.8.6-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls-devel" arch="i586" version="2.8.6" release="2.3.1">
          <filename>libgnutls-devel-2.8.6-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgnutls-devel" arch="x86_64" version="2.8.6" release="2.3.1">
          <filename>libgnutls-devel-2.8.6-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls-extra-devel" arch="i586" version="2.8.6" release="2.3.1">
          <filename>libgnutls-extra-devel-2.8.6-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgnutls-extra-devel" arch="x86_64" version="2.8.6" release="2.3.1">
          <filename>libgnutls-extra-devel-2.8.6-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls-extra26" arch="i586" version="2.8.6" release="2.3.1">
          <filename>libgnutls-extra26-2.8.6-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgnutls-extra26" arch="x86_64" version="2.8.6" release="2.3.1">
          <filename>libgnutls-extra26-2.8.6-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls26" arch="i586" version="2.8.6" release="2.3.1">
          <filename>libgnutls26-2.8.6-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgnutls26" arch="x86_64" version="2.8.6" release="2.3.1">
          <filename>libgnutls26-2.8.6-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls26-32bit" arch="x86_64" version="2.8.6" release="2.3.1">
          <filename>libgnutls26-32bit-2.8.6-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7f3f14b55ba6b890b38c801f8c66c6b3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3641">
  <id>encfs</id>
  <title>encfs: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291645344"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637286" id="637286" title="bug number 637286" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3073" id="CVE-2010-3073" title="CVE-2010-3073" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3074" id="CVE-2010-3074" title="CVE-2010-3074" type="cve"/>
  </references>
  <description>This update of encfs fixes:
- CVE-2010-3073: CVSS v2 Base Score: 1.9
  (AV:L/AC:M/Au:N/C:P/I:N/A:N): Cryptographic Issues
  (CWE-310): encfs Only 32 bit of file IV used
- CVE-2010-3074: CVSS v2 Base Score: 1.9
  (AV:L/AC:M/Au:N/C:P/I:N/A:N): Cryptographic Issues
  (CWE-310): encfs Watermarking attack

The patch for CVE-2010-3075 (Last block with single byte is
insecure) was not applied because upstream disabled it by
default, expect for expert mode.
</description>
  <pkglist>
    <collection>
        <package name="encfs" arch="i586" version="1.6.0" release="2.3.1">
          <filename>encfs-1.6.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="encfs" arch="x86_64" version="1.6.0" release="2.3.1">
          <filename>encfs-1.6.0-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3bce0a98c85046d106af2afefef4f4d"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3642">
  <id>mercurial</id>
  <title>mercurial: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291395237"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645293" id="645293" title="bug number 645293" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4237:" id="CVE-2010-4237:" title="CVE-2010-4237:" type="cve"/>
  </references>
  <description>This update of mercurial improves the SSL certificate
validation process. CVE-2010-4237: CVSS v2 Base Score: 4.3
(moderate) (AV:N/AC:M/Au:N/C:N/I:P/A:N)
</description>
  <pkglist>
    <collection>
        <package name="mercurial" arch="i586" version="1.5" release="4.3.1">
          <filename>mercurial-1.5-4.3.1.i586.rpm</filename>
        </package>
        <package name="mercurial" arch="x86_64" version="1.5" release="4.3.1">
          <filename>mercurial-1.5-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="82eec958a08d3fc6d0b6d3f26f80f91b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3653">
  <id>acroread</id>
  <title>acroread security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291645066"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651232" id="651232" title="bug number 651232" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3654" id="CVE-2010-3654" title="CVE-2010-3654" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4091" id="CVE-2010-4091" title="CVE-2010-4091" type="cve"/>
  </references>
  <description>This update of acroread fixes two critical vulnerabilities.
The first one in referenced by CVE-2010-3654 and exists in
the integrated authplay component that may allow remote
attackers to take control over a victims system.
(CVE-2010-3654: CVSS v2 Base Score: 6.8 (critical)
(AV:N/AC:M/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)) The
other issue was disclosed on full-disclosure to demonstrate
a denial of service attack, an extend of this attack to
execute arbitrary code could be possible. (CVE-2010-4091:
CVSS v2 Base Score: 6.8 (critical)
(AV:N/AC:M/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119))
</description>
  <pkglist>
    <collection>
        <package name="acroread" arch="i586" version="9.4.1" release="0.2.1">
          <filename>acroread-9.4.1-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dd2fde55a671248b9ce4a9045a9d6840"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3662">
  <id>bind</id>
  <title>bind security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291744463"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657129" id="657129" title="bug number 657129" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657102" id="657102" title="bug number 657102" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613" id="CVE-2010-3613" title="CVE-2010-3613" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614" id="CVE-2010-3614" title="CVE-2010-3614" type="cve"/>
  </references>
  <description>Adding certain types of signed negative responses to cache
doesn't clear any matching RRSIG records already in cache.
A subsequent lookup of the cached data can cause named to
crash (CVE-2010-3613).

bind did not properly determine the security status of an
NS RRset during a DNSKEY algorithm rollover, which might
allow remote attackers to cause a denial of service (DNSSEC
validation error) by triggering a rollover (CVE-2010-3614).
</description>
  <pkglist>
    <collection>
        <package name="bind" arch="i586" version="9.7.1P2" release="0.4.1">
          <filename>bind-9.7.1P2-0.4.1.i586.rpm</filename>
        </package>
        <package name="bind" arch="x86_64" version="9.7.1P2" release="0.4.1">
          <filename>bind-9.7.1P2-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="i586" version="9.7.1P2" release="0.4.1">
          <filename>bind-chrootenv-9.7.1P2-0.4.1.i586.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="x86_64" version="9.7.1P2" release="0.4.1">
          <filename>bind-chrootenv-9.7.1P2-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-devel" arch="i586" version="9.7.1P2" release="0.4.1">
          <filename>bind-devel-9.7.1P2-0.4.1.i586.rpm</filename>
        </package>
        <package name="bind-devel" arch="x86_64" version="9.7.1P2" release="0.4.1">
          <filename>bind-devel-9.7.1P2-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" arch="noarch" version="9.7.1P2" release="0.4.1">
          <filename>bind-doc-9.7.1P2-0.4.1.noarch.rpm</filename>
        </package>
        <package name="bind-libs" arch="i586" version="9.7.1P2" release="0.4.1">
          <filename>bind-libs-9.7.1P2-0.4.1.i586.rpm</filename>
        </package>
        <package name="bind-libs" arch="x86_64" version="9.7.1P2" release="0.4.1">
          <filename>bind-libs-9.7.1P2-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-libs-32bit" arch="x86_64" version="9.7.1P2" release="0.4.1">
          <filename>bind-libs-32bit-9.7.1P2-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-utils" arch="i586" version="9.7.1P2" release="0.4.1">
          <filename>bind-utils-9.7.1P2-0.4.1.i586.rpm</filename>
        </package>
        <package name="bind-utils" arch="x86_64" version="9.7.1P2" release="0.4.1">
          <filename>bind-utils-9.7.1P2-0.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61ffb104fdec658f03f1cb904544cb4c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3217">
  <id>libtirpc</id>
  <title>libtirpc: This updates brings nfs-client to work with portmap</title>
  <release>openSUSE 11.3</release>
  <issued date="1285807407"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633007" id="633007" title="bug number 633007" type="bugzilla"/>
  </references>
  <description>Without this update, RPC applications linked against
libtirpc will fail to register themselves on systems that
use portmap instead of rpcbind.
</description>
  <pkglist>
    <collection>
        <package name="libtirpc-devel" arch="i586" version="0.2.1" release="4.1.1">
          <filename>libtirpc-devel-0.2.1-4.1.1.i586.rpm</filename>
        </package>
        <package name="libtirpc-devel" arch="x86_64" version="0.2.1" release="4.1.1">
          <filename>libtirpc-devel-0.2.1-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc1" arch="i586" version="0.2.1" release="4.1.1">
          <filename>libtirpc1-0.2.1-4.1.1.i586.rpm</filename>
        </package>
        <package name="libtirpc1" arch="x86_64" version="0.2.1" release="4.1.1">
          <filename>libtirpc1-0.2.1-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5155b6a7884eeade7748f5ec2d628fca"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3670">
  <id>finch</id>
  <title>pidgin: Version update to 2.7.7</title>
  <release>openSUSE 11.3</release>
  <issued date="1291646488"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655477" id="655477" title="bug number 655477" type="bugzilla"/>
  </references>
  <description>Pidgin was updated to version 2.7.7 to fix various bugs and
bring new features.

Especially MSN and ICQ support were fixed.
</description>
  <pkglist>
    <collection>
        <package name="finch" arch="i586" version="2.7.7" release="1.1.1">
          <filename>finch-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="finch" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>finch-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="finch-devel" arch="i586" version="2.7.7" release="1.1.1">
          <filename>finch-devel-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="finch-devel" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>finch-devel-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple" arch="i586" version="2.7.7" release="1.1.1">
          <filename>libpurple-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="libpurple" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>libpurple-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-devel" arch="i586" version="2.7.7" release="1.1.1">
          <filename>libpurple-devel-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="libpurple-devel" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>libpurple-devel-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-lang" arch="noarch" version="2.7.7" release="1.1.1">
          <filename>libpurple-lang-2.7.7-1.1.1.noarch.rpm</filename>
        </package>
        <package name="libpurple-meanwhile" arch="i586" version="2.7.7" release="1.1.1">
          <filename>libpurple-meanwhile-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="libpurple-meanwhile" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>libpurple-meanwhile-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-mono" arch="i586" version="2.7.7" release="1.1.1">
          <filename>libpurple-mono-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="libpurple-mono" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>libpurple-mono-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-tcl" arch="i586" version="2.7.7" release="1.1.1">
          <filename>libpurple-tcl-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="libpurple-tcl" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>libpurple-tcl-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="pidgin" arch="i586" version="2.7.7" release="1.1.1">
          <filename>pidgin-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="pidgin" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>pidgin-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="pidgin-devel" arch="i586" version="2.7.7" release="1.1.1">
          <filename>pidgin-devel-2.7.7-1.1.1.i586.rpm</filename>
        </package>
        <package name="pidgin-devel" arch="x86_64" version="2.7.7" release="1.1.1">
          <filename>pidgin-devel-2.7.7-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="pidgin-otr" arch="i586" version="3.2.0" release="146.1.1">
          <filename>pidgin-otr-3.2.0-146.1.1.i586.rpm</filename>
        </package>
        <package name="pidgin-otr" arch="x86_64" version="3.2.0" release="146.1.1">
          <filename>pidgin-otr-3.2.0-146.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="29aebe3c7ff3602bb896c4ba979c8d92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3423">
  <id>libsvn_auth_gnome_keyring-1-0</id>
  <title>subversion security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1288310517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649861" id="649861" title="bug number 649861" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3315" id="CVE-2010-3315" title="CVE-2010-3315" type="cve"/>
  </references>
  <description>when using &quot;SVNPathAuthz short_circuit&quot;  mod_dav_svn didn't
properly enforce access restrictions (CVE-2010-3315).
</description>
  <pkglist>
    <collection>
        <package name="libsvn_auth_gnome_keyring-1-0" arch="i586" version="1.6.9" release="4.3.1">
          <filename>libsvn_auth_gnome_keyring-1-0-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="libsvn_auth_gnome_keyring-1-0" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>libsvn_auth_gnome_keyring-1-0-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsvn_auth_kwallet-1-0" arch="i586" version="1.6.9" release="4.3.1">
          <filename>libsvn_auth_kwallet-1-0-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="libsvn_auth_kwallet-1-0" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>libsvn_auth_kwallet-1-0-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-devel" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-devel-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion-devel" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-devel-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-perl" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-perl-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion-perl" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-perl-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-python" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-python-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion-python" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-python-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-ruby" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-ruby-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion-ruby" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-ruby-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-server" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-server-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion-server" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-server-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-tools" arch="i586" version="1.6.9" release="4.3.1">
          <filename>subversion-tools-1.6.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="subversion-tools" arch="x86_64" version="1.6.9" release="4.3.1">
          <filename>subversion-tools-1.6.9-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="94c4a8f903f769dd6dba17f4714711ba"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3644">
  <id>clamav</id>
  <title>clamav: security vulnerabilities fixed by upgrade to version 0.96.5</title>
  <release>openSUSE 11.3</release>
  <issued date="1291645666"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=656548" id="656548" title="bug number 656548" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=none" id="none" title="none" type="cve"/>
  </references>
  <description>Upgrade to version clamav 0.96.5 to fix:
- CVE-2010-4260: CVSS v2 Base Score: 5.0
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Denial of service bugs
  while parsing PDFs.
- CVE-2010-4261: CVSS v2 Base Score: 5.0
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Memory corruption due to an
  off-by-one error within the icon_cb() function.
</description>
  <pkglist>
    <collection>
        <package name="clamav" arch="i586" version="0.96.5" release="0.2.1">
          <filename>clamav-0.96.5-0.2.1.i586.rpm</filename>
        </package>
        <package name="clamav" arch="x86_64" version="0.96.5" release="0.2.1">
          <filename>clamav-0.96.5-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="clamav-db" arch="noarch" version="0.96.5" release="0.2.1">
          <filename>clamav-db-0.96.5-0.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ad68fb010e9d81ceb3f372a78dbc7bff"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3488">
  <id>libpython2_6-1_0</id>
  <title>python security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1288300144"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638233" id="638233" title="bug number 638233" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3493" id="CVE-2010-3493" title="CVE-2010-3493" type="cve"/>
  </references>
  <description>a race condition in the accept() implementation of smtpd.py
could lead to a denial of service (CVE-2010-3493)
</description>
  <pkglist>
    <collection>
        <package name="libpython2_6-1_0" arch="i586" version="2.6.5" release="3.3.1">
          <filename>libpython2_6-1_0-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="libpython2_6-1_0" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>libpython2_6-1_0-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpython2_6-1_0-32bit" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>libpython2_6-1_0-32bit-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-32bit" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-32bit-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-base" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-base-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-base" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-base-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-base-32bit" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-base-32bit-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-curses" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-curses-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-curses" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-curses-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-demo" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-demo-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-demo" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-demo-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-devel" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-devel-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-devel" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-devel-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-gdbm" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-gdbm-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-gdbm" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-gdbm-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-idle" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-idle-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-idle" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-idle-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-tk" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-tk-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-tk" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-tk-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-xml" arch="i586" version="2.6.5" release="3.3.1">
          <filename>python-xml-2.6.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="python-xml" arch="x86_64" version="2.6.5" release="3.3.1">
          <filename>python-xml-2.6.5-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8c1215bc2f7e5cfe622c100c40347cc2"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3680">
  <id>exim</id>
  <title>exim security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1292059483"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658731" id="658731" title="bug number 658731" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4344" id="CVE-2010-4344" title="CVE-2010-4344" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4345" id="CVE-2010-4345" title="CVE-2010-4345" type="cve"/>
  </references>
  <description>remote attackers could trick exim into running arbitrary
code (CVE-2010-4344). A privilege escalation flaw allowed
attackers to gain root access (CVE-2010-4345).
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.3.1">
          <filename>exim-4.71-4.3.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.3.1">
          <filename>exim-4.71-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.3.1">
          <filename>eximon-4.71-4.3.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.3.1">
          <filename>eximon-4.71-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.3.1">
          <filename>eximstats-html-4.71-4.3.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.3.1">
          <filename>eximstats-html-4.71-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c8c28ea32e843131e4622c708eb77d1e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3612">
  <id>krb5</id>
  <title>krb5: Fixes for multiple remote vulnerabilities in MIT krb5</title>
  <release>openSUSE 11.3</release>
  <issued date="1291197057"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650650" id="650650" title="bug number 650650" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323" id="CVE-2010-1323" title="CVE-2010-1323" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324" id="CVE-2010-1324" title="CVE-2010-1324" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020" id="CVE-2010-4020" title="CVE-2010-4020" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4021" id="CVE-2010-4021" title="CVE-2010-4021" type="cve"/>
  </references>
  <description>Multiple remote vulnerabilities in the MIT krb5 package
have been fixed. They affect client as well as server
software. CVE-2010-1323, CVE-2010-1324,CVE-2010-4020 and
CVE-2010-4021 have been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="krb5" arch="i586" version="1.8.1" release="5.3.1">
          <filename>krb5-1.8.1-5.3.1.i586.rpm</filename>
        </package>
        <package name="krb5" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-32bit" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-32bit-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-client" arch="i586" version="1.8.1" release="5.3.1">
          <filename>krb5-client-1.8.1-5.3.1.i586.rpm</filename>
        </package>
        <package name="krb5-client" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-client-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel" arch="i586" version="1.8.1" release="5.3.1">
          <filename>krb5-devel-1.8.1-5.3.1.i586.rpm</filename>
        </package>
        <package name="krb5-devel" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-devel-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel-32bit" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-devel-32bit-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="i586" version="1.8.1" release="5.3.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.3.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="i586" version="1.8.1" release="5.3.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.3.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" arch="i586" version="1.8.1" release="5.3.1">
          <filename>krb5-server-1.8.1-5.3.1.i586.rpm</filename>
        </package>
        <package name="krb5-server" arch="x86_64" version="1.8.1" release="5.3.1">
          <filename>krb5-server-1.8.1-5.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="fb18b665e26e4644e88e94c322179fd5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3690">
  <id>seamonkey</id>
  <title>seamonkey: 2.0.11 update fixes security issues</title>
  <release>openSUSE 11.3</release>
  <issued date="1292200709"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657016" id="657016" title="bug number 657016" type="bugzilla"/>
  </references>
  <description>Mozilla Seamonkey 2.0 was updated to update 2.0.11 fixing
several security issues.

MFSA 2010-74: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

Jesee Ruderman, Andreas Gal, Nils, and Brian Hackett
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5. (CVE-2010-3776) Igor Bukanov reported a
memory safety problem that was fixed in Firefox 3.6 only.
(CVE-2010-3777) Jesse Ruderman reported a crash which
affected Firefox 3.5 only. (CVE-2010-3778)


MFSA 2010-75 / CVE-2010-3769: Dirk Heinrich reported that
on Windows platforms when document.write() was called with
a very long string a buffer overflow was caused in line
breaking routines attempting to process the string for
display. Such cases triggered an invalid read past the end
of an array causing a crash which an attacker could
potentially use to run arbitrary code on a victim's
computer.

MFSA 2010-76 / CVE-2010-3771: Security researcher echo
reported that a web page could open a window with an
about:blank location and then inject an &lt;isindex&gt; element
into that page which upon submission would redirect to a
chrome: document. The effect of this defect was that the
original page would wind up with a reference to a
chrome-privileged object, the opened window, which could be
leveraged for privilege escalation attacks.

Mozilla security researcher moz_bug_r_a4 provided
proof-of-concept code demonstrating how the above
vulnerability could be used to run arbitrary code with
chrome privileges.

MFSA 2010-77 / CVE-2010-3772: Security researcher wushi of
team509 reported that when a XUL tree had an HTML &lt;div&gt;
element nested inside a &lt;treechildren&gt; element then code
attempting to display content in the XUL tree would
incorrectly treat the &lt;div&gt; element as a parent node to
tree content underneath it resulting in incorrect indexes
being calculated for the child content. These incorrect
indexes were used in subsequent array operations which
resulted in writing data past the end of an allocated
buffer. An attacker could use this issue to crash a
victim's browser and run arbitrary code on their machine.

MFSA 2010-78 / CVE-2010-3768: Mozilla added the OTS font
sanitizing library to prevent downloadable fonts from
exposing vulnerabilities in the underlying OS font code.
This library mitigates against several issues independently
reported by Red Hat Security Response Team member Marc
Schoenefeld and Mozilla security researcher Christoph Diehl.

MFSA 2010-79 / CVE-2010-3775: Security researcher Gregory
Fleischer reported that when a Java LiveConnect script was
loaded via a data: URL which redirects via a meta refresh,
then the resulting plugin object was created with the wrong
security principal and thus received elevated privileges
such as the abilities to read local files, launch
processes, and create network connections.

MFSA 2010-80 / CVE-2010-3766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a nsDOMAttribute node can be modified without
informing the iterator object responsible for various DOM
traversals. This flaw could lead to a inconsistent state
where the iterator points to an object it believes is part
of the DOM but actually points to some other object. If
such an object had been deleted and its memory reclaimed by
the system, then the iterator could be used to call into
attacker-controlled memory.

MFSA 2010-81 / CVE-2010-3767: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that JavaScript arrays were vulnerable to an integer
overflow vulnerability. The report demonstrated that an
array could be constructed containing a very large number
of items such that when memory was allocated to store the
array items, the integer value used to calculate the buffer
size would overflow resulting in too small a buffer being
allocated. Subsequent use of the array object could then
result in data being written past the end of the buffer and
causing memory corruption.

MFSA 2010-82 / CVE-2010-3773: Mozilla security researcher
moz_bug_r_a4 reported that the fix for CVE-2010-0179 could
be circumvented permitting the execution of arbitrary
JavaScript with chrome privileges.

MFSA 2010-83 / CVE-2010-3774: Google security researcher
Michal Zalewski reported that when a window was opened to a
site resulting in a network or certificate error page, the
opening site could access the document inside the opened
window and inject arbitrary content. An attacker could use
this bug to spoof the location bar and trick a user into
thinking they were on a different site than they actually
were.

MFSA 2010-84 / CVE-2010-3770: Security researchers Yosuke
Hasegawa and Masatoshi Kimura reported that the
x-mac-arabic, x-mac-farsi and x-mac-hebrew character
encodings are vulnerable to XSS attacks due to some
characters being converted to angle brackets when displayed
by the rendering engine. Sites using these character
encodings would thus be potentially vulnerable to script
injection attacks if their script filtering code fails to
strip out these specific characters.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.11" release="0.2.1">
          <filename>seamonkey-2.0.11-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.11" release="0.2.1">
          <filename>seamonkey-2.0.11-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.11" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.11-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.11" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.11-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.11" release="0.2.1">
          <filename>seamonkey-irc-2.0.11-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.11" release="0.2.1">
          <filename>seamonkey-irc-2.0.11-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.11" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.11-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.11" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.11-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.11" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.11-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.11" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.11-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.11" release="0.2.1">
          <filename>seamonkey-venkman-2.0.11-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.11" release="0.2.1">
          <filename>seamonkey-venkman-2.0.11-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b3d59e8ef2d2775a4a5ef278f8328561"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3687">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: 3.0.11 update fixes security issues</title>
  <release>openSUSE 11.3</release>
  <issued date="1292201177"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657016" id="657016" title="bug number 657016" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird 3.0 was updated to update 3.0.11 fixing
several security issues.

MFSA 2010-74: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

Jesee Ruderman, Andreas Gal, Nils, and Brian Hackett
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5. (CVE-2010-3776) Igor Bukanov reported a
memory safety problem that was fixed in Firefox 3.6 only.
(CVE-2010-3777) Jesse Ruderman reported a crash which
affected Firefox 3.5 only. (CVE-2010-3778)


MFSA 2010-75 / CVE-2010-3769: Dirk Heinrich reported that
on Windows platforms when document.write() was called with
a very long string a buffer overflow was caused in line
breaking routines attempting to process the string for
display. Such cases triggered an invalid read past the end
of an array causing a crash which an attacker could
potentially use to run arbitrary code on a victim's
computer.

MFSA 2010-76 / CVE-2010-3771: Security researcher echo
reported that a web page could open a window with an
about:blank location and then inject an &lt;isindex&gt; element
into that page which upon submission would redirect to a
chrome: document. The effect of this defect was that the
original page would wind up with a reference to a
chrome-privileged object, the opened window, which could be
leveraged for privilege escalation attacks.

Mozilla security researcher moz_bug_r_a4 provided
proof-of-concept code demonstrating how the above
vulnerability could be used to run arbitrary code with
chrome privileges.

MFSA 2010-77 / CVE-2010-3772: Security researcher wushi of
team509 reported that when a XUL tree had an HTML &lt;div&gt;
element nested inside a &lt;treechildren&gt; element then code
attempting to display content in the XUL tree would
incorrectly treat the &lt;div&gt; element as a parent node to
tree content underneath it resulting in incorrect indexes
being calculated for the child content. These incorrect
indexes were used in subsequent array operations which
resulted in writing data past the end of an allocated
buffer. An attacker could use this issue to crash a
victim's browser and run arbitrary code on their machine.

MFSA 2010-78 / CVE-2010-3768: Mozilla added the OTS font
sanitizing library to prevent downloadable fonts from
exposing vulnerabilities in the underlying OS font code.
This library mitigates against several issues independently
reported by Red Hat Security Response Team member Marc
Schoenefeld and Mozilla security researcher Christoph Diehl.

MFSA 2010-79 / CVE-2010-3775: Security researcher Gregory
Fleischer reported that when a Java LiveConnect script was
loaded via a data: URL which redirects via a meta refresh,
then the resulting plugin object was created with the wrong
security principal and thus received elevated privileges
such as the abilities to read local files, launch
processes, and create network connections.

MFSA 2010-80 / CVE-2010-3766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a nsDOMAttribute node can be modified without
informing the iterator object responsible for various DOM
traversals. This flaw could lead to a inconsistent state
where the iterator points to an object it believes is part
of the DOM but actually points to some other object. If
such an object had been deleted and its memory reclaimed by
the system, then the iterator could be used to call into
attacker-controlled memory.

MFSA 2010-81 / CVE-2010-3767: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that JavaScript arrays were vulnerable to an integer
overflow vulnerability. The report demonstrated that an
array could be constructed containing a very large number
of items such that when memory was allocated to store the
array items, the integer value used to calculate the buffer
size would overflow resulting in too small a buffer being
allocated. Subsequent use of the array object could then
result in data being written past the end of the buffer and
causing memory corruption.

MFSA 2010-82 / CVE-2010-3773: Mozilla security researcher
moz_bug_r_a4 reported that the fix for CVE-2010-0179 could
be circumvented permitting the execution of arbitrary
JavaScript with chrome privileges.

MFSA 2010-83 / CVE-2010-3774: Google security researcher
Michal Zalewski reported that when a window was opened to a
site resulting in a network or certificate error page, the
opening site could access the document inside the opened
window and inject arbitrary content. An attacker could use
this bug to spoof the location bar and trick a user into
thinking they were on a different site than they actually
were.

MFSA 2010-84 / CVE-2010-3770: Security researchers Yosuke
Hasegawa and Masatoshi Kimura reported that the
x-mac-arabic, x-mac-farsi and x-mac-hebrew character
encodings are vulnerable to XSS attacks due to some
characters being converted to angle brackets when displayed
by the rendering engine. Sites using these character
encodings would thus be potentially vulnerable to script
injection attacks if their script filtering code fails to
strip out these specific characters.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-3.0.11-0.5.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-3.0.11-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-devel-3.0.11-0.5.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-devel-3.0.11-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-translations-common-3.0.11-0.5.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-translations-common-3.0.11-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-translations-other-3.0.11-0.5.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.11" release="0.5.1">
          <filename>MozillaThunderbird-translations-other-3.0.11-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="4.5.1">
          <filename>enigmail-1.0.1-4.5.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="4.5.1">
          <filename>enigmail-1.0.1-4.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5fde7e372995d55a57f999fbaac6b79a"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3669">
  <id>hamster-applet</id>
  <title>hamster-applet: This updates adds a missing dependency for python-xdg</title>
  <release>openSUSE 11.3</release>
  <issued date="1291773383"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653578" id="653578" title="bug number 653578" type="bugzilla"/>
  </references>
  <description>hamster-applet package was missing a dependency on
python-xdg package, which could prevent the application to
start properly. This package fixes this issue.
</description>
  <pkglist>
    <collection>
        <package name="hamster-applet" arch="i586" version="2.30.1" release="2.3.1">
          <filename>hamster-applet-2.30.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="hamster-applet" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>hamster-applet-2.30.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="hamster-applet-lang" arch="noarch" version="2.30.1" release="2.3.1">
          <filename>hamster-applet-lang-2.30.1-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0276d0d943b5c0c2f029079d6e2f0c37"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3668">
  <id>gnome-do</id>
  <title>gnome-do: It is auto-started under KDE4 by default. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1291768517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629385" id="629385" title="bug number 629385" type="bugzilla"/>
  </references>
  <description>gnome-do was incorrectly auto-started under KDE4 by
default, causing tracker to be started in addition to KDE
Nepomuk. This package fixes this issue
</description>
  <pkglist>
    <collection>
        <package name="gnome-do" arch="i586" version="0.8.3" release="4.3.1">
          <filename>gnome-do-0.8.3-4.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-do" arch="x86_64" version="0.8.3" release="4.3.1">
          <filename>gnome-do-0.8.3-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-do-lang" arch="noarch" version="0.8.3" release="4.3.1">
          <filename>gnome-do-lang-0.8.3-4.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="12759494a59a303ebb9b6b2bbd250c60"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3652">
  <id>gnome-keyring</id>
  <title>gnome-keyring: Better handling of non-ASCII keyring name</title>
  <release>openSUSE 11.3</release>
  <issued date="1291645253"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635743" id="635743" title="bug number 635743" type="bugzilla"/>
  </references>
  <description>This update fixes a bug in gnome-keyring / libgnome-keyring
that could prevent keyring creation with a non-ASCII name.
</description>
  <pkglist>
    <collection>
        <package name="gnome-keyring" arch="i586" version="2.30.1" release="3.3.1">
          <filename>gnome-keyring-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="gnome-keyring" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>gnome-keyring-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="gnome-keyring-lang" arch="noarch" version="2.30.1" release="3.3.1">
          <filename>gnome-keyring-lang-2.30.1-3.3.1.noarch.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="gnome-keyring-pam" arch="i586" version="2.30.1" release="3.3.1">
          <filename>gnome-keyring-pam-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="gnome-keyring-pam" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>gnome-keyring-pam-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="gnome-keyring-pam-32bit" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>gnome-keyring-pam-32bit-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgcr-devel" arch="i586" version="2.30.1" release="3.3.1">
          <filename>libgcr-devel-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgcr-devel" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgcr-devel-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgcr0" arch="i586" version="2.30.1" release="3.3.1">
          <filename>libgcr0-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgcr0" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgcr0-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgcr0-32bit" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgcr0-32bit-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgnome-keyring-devel" arch="i586" version="2.30.1" release="2.3.1">
          <filename>libgnome-keyring-devel-2.30.1-2.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgnome-keyring-devel" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>libgnome-keyring-devel-2.30.1-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgnome-keyring-lang" arch="noarch" version="2.30.1" release="2.3.1">
          <filename>libgnome-keyring-lang-2.30.1-2.3.1.noarch.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgnome-keyring0" arch="i586" version="2.30.1" release="2.3.1">
          <filename>libgnome-keyring0-2.30.1-2.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgnome-keyring0" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>libgnome-keyring0-2.30.1-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgnome-keyring0-32bit" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>libgnome-keyring0-32bit-2.30.1-2.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-0" arch="i586" version="2.30.1" release="3.3.1">
          <filename>libgp11-0-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-0" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgp11-0-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-0-32bit" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgp11-0-32bit-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-devel" arch="i586" version="2.30.1" release="3.3.1">
          <filename>libgp11-devel-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-devel" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgp11-devel-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-modules" arch="i586" version="2.30.1" release="3.3.1">
          <filename>libgp11-modules-2.30.1-3.3.1.i586.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
        <package name="libgp11-modules" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>libgp11-modules-2.30.1-3.3.1.x86_64.rpm</filename>
          <relogin_suggested>1</relogin_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6ae4525d37f89e114dc1e7a02ed8875f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3695">
  <id>otrs</id>
  <title>otrs security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1292318245"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640830" id="640830" title="bug number 640830" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640729" id="640729" title="bug number 640729" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2080" id="CVE-2010-2080" title="CVE-2010-2080" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3476" id="CVE-2010-3476" title="CVE-2010-3476" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4071" id="CVE-2010-4071" title="CVE-2010-4071" type="cve"/>
  </references>
  <description>OTRS version 2.4.9 fixes among other things two
cross-site-scripting and a denial of service vulnerability
(CVE-2010-2080, CVE-2010-3476, CVE-2010-4071).
</description>
  <pkglist>
    <collection>
        <package name="otrs" arch="noarch" version="2.4.9" release="0.3.1">
          <filename>otrs-2.4.9-0.3.1.noarch.rpm</filename>
        </package>
        <package name="otrs-doc" arch="noarch" version="2.4.9" release="0.3.1">
          <filename>otrs-doc-2.4.9-0.3.1.noarch.rpm</filename>
        </package>
        <package name="otrs-itsm" arch="noarch" version="2.1.1" release="0.3.1">
          <filename>otrs-itsm-2.1.1-0.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f0aaf07b8c8bd62c377f82f3cf8d086b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3672">
  <id>libmoon-devel</id>
  <title>moonlight security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291827621"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655847" id="655847" title="bug number 655847" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4254" id="CVE-2010-4254" title="CVE-2010-4254" type="cve"/>
  </references>
  <description>Untrusted Moonlight apps could bypass constraints on
methods which potentially allowed attackers to execute
arbitrary code (CVE-2010-4254).
</description>
  <pkglist>
    <collection>
        <package name="libmoon-devel" arch="i586" version="2.2" release="4.3.1">
          <filename>libmoon-devel-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="libmoon-devel" arch="x86_64" version="2.2" release="4.3.1">
          <filename>libmoon-devel-2.2-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmoon0" arch="i586" version="2.2" release="4.3.1">
          <filename>libmoon0-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="libmoon0" arch="x86_64" version="2.2" release="4.3.1">
          <filename>libmoon0-2.2-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-desktop" arch="i586" version="2.2" release="4.3.1">
          <filename>moonlight-desktop-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="moonlight-desktop" arch="x86_64" version="2.2" release="4.3.1">
          <filename>moonlight-desktop-2.2-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-desktop-devel" arch="i586" version="2.2" release="4.3.1">
          <filename>moonlight-desktop-devel-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="moonlight-desktop-devel" arch="x86_64" version="2.2" release="4.3.1">
          <filename>moonlight-desktop-devel-2.2-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-plugin" arch="i586" version="2.2" release="4.3.1">
          <filename>moonlight-plugin-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="moonlight-plugin" arch="x86_64" version="2.2" release="4.3.1">
          <filename>moonlight-plugin-2.2-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-tools" arch="i586" version="2.2" release="4.3.1">
          <filename>moonlight-tools-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="moonlight-tools" arch="x86_64" version="2.2" release="4.3.1">
          <filename>moonlight-tools-2.2-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-web-devel" arch="i586" version="2.2" release="4.3.1">
          <filename>moonlight-web-devel-2.2-4.3.1.i586.rpm</filename>
        </package>
        <package name="moonlight-web-devel" arch="x86_64" version="2.2" release="4.3.1">
          <filename>moonlight-web-devel-2.2-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="db3c896cf9214db3a93906fccad75b5a"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3677">
  <id>gnome-main-menu</id>
  <title>nautilus-sendto:  Is broken in gnome-main-menu. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1291853299"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647263" id="647263" title="bug number 647263" type="bugzilla"/>
  </references>
  <description>Using send-to action by right-click on documents in
gnome-main-menu was not working properly. Fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="gnome-main-menu" arch="i586" version="0.9.14" release="4.3.1">
          <filename>gnome-main-menu-0.9.14-4.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-main-menu" arch="x86_64" version="0.9.14" release="4.3.1">
          <filename>gnome-main-menu-0.9.14-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-main-menu-lang" arch="noarch" version="0.9.14" release="4.3.1">
          <filename>gnome-main-menu-lang-0.9.14-4.3.1.noarch.rpm</filename>
        </package>
        <package name="nautilus-gnome-main-menu" arch="i586" version="0.9.14" release="4.3.1">
          <filename>nautilus-gnome-main-menu-0.9.14-4.3.1.i586.rpm</filename>
        </package>
        <package name="nautilus-gnome-main-menu" arch="x86_64" version="0.9.14" release="4.3.1">
          <filename>nautilus-gnome-main-menu-0.9.14-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0a03350e03c7a96a7d020470a85a0791"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3671">
  <id>SDL</id>
  <title>SDL: This update fixes an segmentation fault when pressing some keys on a D-pad.</title>
  <release>openSUSE 11.3</release>
  <issued date="1291827005"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632271" id="632271" title="bug number 632271" type="bugzilla"/>
  </references>
  <description>All programs using SDL (usually games) will crash when user
presses a button on D-Pad controller. This is caused by
structure size change in new kernel releases. Fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="libSDL-1_2-0" arch="i586" version="1.2.14" release="6.3.1">
          <filename>libSDL-1_2-0-1.2.14-6.3.1.i586.rpm</filename>
        </package>
        <package name="libSDL-1_2-0" arch="x86_64" version="1.2.14" release="6.3.1">
          <filename>libSDL-1_2-0-1.2.14-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libSDL-1_2-0-32bit" arch="x86_64" version="1.2.14" release="6.3.1">
          <filename>libSDL-1_2-0-32bit-1.2.14-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libSDL-devel" arch="i586" version="1.2.14" release="6.3.1">
          <filename>libSDL-devel-1.2.14-6.3.1.i586.rpm</filename>
        </package>
        <package name="libSDL-devel" arch="x86_64" version="1.2.14" release="6.3.1">
          <filename>libSDL-devel-1.2.14-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libSDL-devel-32bit" arch="x86_64" version="1.2.14" release="6.3.1">
          <filename>libSDL-devel-32bit-1.2.14-6.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e3f04054cb78c34ceda74ad438ee0028"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3663">
  <id>gnome-icon-theme</id>
  <title>gnome-icon-theme: Missing GNOME-icons are added by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1291741103"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632602" id="632602" title="bug number 632602" type="bugzilla"/>
  </references>
  <description>Some SVG files used as icons by GNOME are missing, causing
blurry icons to be sometime displayed. This packages fixes
this issue.q
</description>
  <pkglist>
    <collection>
        <package name="gnome-icon-theme" arch="noarch" version="2.30.2.1" release="2.3.1">
          <filename>gnome-icon-theme-2.30.2.1-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="357c1007d40041294a58bb9f84348aab"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3560">
  <id>kdenetwork4</id>
  <title>kdenetwork: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1290181579"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653852" id="653852" title="bug number 653852" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604709" id="604709" title="bug number 604709" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4776" id="CVE-2008-4776" title="CVE-2008-4776" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1000" id="CVE-2010-1000" title="CVE-2010-1000" type="cve"/>
  </references>
  <description>This update of kdenetwork fixes several bugs, the security
related issues are:
- CVE-2010-1000: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:P/A:N): CWE-22 The &quot;name&quot; attribute
  of the &quot;file&quot; element of metalink files is not properly
  sanitised this can be exploited to download files to
  arbitrary directories.

Non-security issues:
- bnc#653852: kopete: ICQ login broken; login server changed
</description>
  <pkglist>
    <collection>
        <package name="kdenetwork4" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kdenetwork4-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kdenetwork4" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kdenetwork4-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdenetwork4-filesharing" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kdenetwork4-filesharing-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kdenetwork4-filesharing" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kdenetwork4-filesharing-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdnssd" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kdnssd-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kdnssd" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kdnssd-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kget" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kget-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kget" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kget-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kopete" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kopete-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kopete" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kopete-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kopete-devel" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kopete-devel-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kopete-devel" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kopete-devel-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kppp" arch="i586" version="4.4.4" release="2.3.1">
          <filename>kppp-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="kppp" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>kppp-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="krdc" arch="i586" version="4.4.4" release="2.3.1">
          <filename>krdc-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="krdc" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>krdc-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="krfb" arch="i586" version="4.4.4" release="2.3.1">
          <filename>krfb-4.4.4-2.3.1.i586.rpm</filename>
        </package>
        <package name="krfb" arch="x86_64" version="4.4.4" release="2.3.1">
          <filename>krfb-4.4.4-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c98375ad9d4dcd528f0e708858d60d22"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3688">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: 3.6.13 update fixes security issues</title>
  <release>openSUSE 11.3</release>
  <issued date="1292202298"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657016" id="657016" title="bug number 657016" type="bugzilla"/>
  </references>
  <description>Mozilla Firefox was updated to update 3.6.13 fixing several
security issues.

MFSA 2010-74: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

Jesee Ruderman, Andreas Gal, Nils, and Brian Hackett
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5. (CVE-2010-3776) Igor Bukanov reported a
memory safety problem that was fixed in Firefox 3.6 only.
(CVE-2010-3777) Jesse Ruderman reported a crash which
affected Firefox 3.5 only. (CVE-2010-3778)


MFSA 2010-75 / CVE-2010-3769: Dirk Heinrich reported that
on Windows platforms when document.write() was called with
a very long string a buffer overflow was caused in line
breaking routines attempting to process the string for
display. Such cases triggered an invalid read past the end
of an array causing a crash which an attacker could
potentially use to run arbitrary code on a victim's
computer.

MFSA 2010-76 / CVE-2010-3771: Security researcher echo
reported that a web page could open a window with an
about:blank location and then inject an &lt;isindex&gt; element
into that page which upon submission would redirect to a
chrome: document. The effect of this defect was that the
original page would wind up with a reference to a
chrome-privileged object, the opened window, which could be
leveraged for privilege escalation attacks.

Mozilla security researcher moz_bug_r_a4 provided
proof-of-concept code demonstrating how the above
vulnerability could be used to run arbitrary code with
chrome privileges.

MFSA 2010-77 / CVE-2010-3772: Security researcher wushi of
team509 reported that when a XUL tree had an HTML &lt;div&gt;
element nested inside a &lt;treechildren&gt; element then code
attempting to display content in the XUL tree would
incorrectly treat the &lt;div&gt; element as a parent node to
tree content underneath it resulting in incorrect indexes
being calculated for the child content. These incorrect
indexes were used in subsequent array operations which
resulted in writing data past the end of an allocated
buffer. An attacker could use this issue to crash a
victim's browser and run arbitrary code on their machine.

MFSA 2010-78 / CVE-2010-3768: Mozilla added the OTS font
sanitizing library to prevent downloadable fonts from
exposing vulnerabilities in the underlying OS font code.
This library mitigates against several issues independently
reported by Red Hat Security Response Team member Marc
Schoenefeld and Mozilla security researcher Christoph Diehl.

MFSA 2010-79 / CVE-2010-3775: Security researcher Gregory
Fleischer reported that when a Java LiveConnect script was
loaded via a data: URL which redirects via a meta refresh,
then the resulting plugin object was created with the wrong
security principal and thus received elevated privileges
such as the abilities to read local files, launch
processes, and create network connections.

MFSA 2010-80 / CVE-2010-3766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a nsDOMAttribute node can be modified without
informing the iterator object responsible for various DOM
traversals. This flaw could lead to a inconsistent state
where the iterator points to an object it believes is part
of the DOM but actually points to some other object. If
such an object had been deleted and its memory reclaimed by
the system, then the iterator could be used to call into
attacker-controlled memory.

MFSA 2010-81 / CVE-2010-3767: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that JavaScript arrays were vulnerable to an integer
overflow vulnerability. The report demonstrated that an
array could be constructed containing a very large number
of items such that when memory was allocated to store the
array items, the integer value used to calculate the buffer
size would overflow resulting in too small a buffer being
allocated. Subsequent use of the array object could then
result in data being written past the end of the buffer and
causing memory corruption.

MFSA 2010-82 / CVE-2010-3773: Mozilla security researcher
moz_bug_r_a4 reported that the fix for CVE-2010-0179 could
be circumvented permitting the execution of arbitrary
JavaScript with chrome privileges.

MFSA 2010-83 / CVE-2010-3774: Google security researcher
Michal Zalewski reported that when a window was opened to a
site resulting in a network or certificate error page, the
opening site could access the document inside the opened
window and inject arbitrary content. An attacker could use
this bug to spoof the location bar and trick a user into
thinking they were on a different site than they actually
were.

MFSA 2010-84 / CVE-2010-3770: Security researchers Yosuke
Hasegawa and Masatoshi Kimura reported that the
x-mac-arabic, x-mac-farsi and x-mac-hebrew character
encodings are vulnerable to XSS attacks due to some
characters being converted to angle brackets when displayed
by the rendering engine. Sites using these character
encodings would thus be potentially vulnerable to script
injection attacks if their script filtering code fails to
strip out these specific characters.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-3.6.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-3.6.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.13" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-js192-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-js192-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-js192-32bit-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.13" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.13-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c6993d092ea2f869e39d828df8700dae"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3689">
  <id>mozilla-xulrunner191</id>
  <title>mpzilla-xulrunner191: 1.9.1.16 update fixes security issues</title>
  <release>openSUSE 11.3</release>
  <issued date="1292199638"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657016" id="657016" title="bug number 657016" type="bugzilla"/>
  </references>
  <description>Mozilla XULRunner 1.9.1 was updated to update 1.9.1.16
fixing several security issues.

MFSA 2010-74: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

Jesee Ruderman, Andreas Gal, Nils, and Brian Hackett
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5. (CVE-2010-3776) Igor Bukanov reported a
memory safety problem that was fixed in Firefox 3.6 only.
(CVE-2010-3777) Jesse Ruderman reported a crash which
affected Firefox 3.5 only. (CVE-2010-3778)


MFSA 2010-75 / CVE-2010-3769: Dirk Heinrich reported that
on Windows platforms when document.write() was called with
a very long string a buffer overflow was caused in line
breaking routines attempting to process the string for
display. Such cases triggered an invalid read past the end
of an array causing a crash which an attacker could
potentially use to run arbitrary code on a victim's
computer.

MFSA 2010-76 / CVE-2010-3771: Security researcher echo
reported that a web page could open a window with an
about:blank location and then inject an &lt;isindex&gt; element
into that page which upon submission would redirect to a
chrome: document. The effect of this defect was that the
original page would wind up with a reference to a
chrome-privileged object, the opened window, which could be
leveraged for privilege escalation attacks.

Mozilla security researcher moz_bug_r_a4 provided
proof-of-concept code demonstrating how the above
vulnerability could be used to run arbitrary code with
chrome privileges.

MFSA 2010-77 / CVE-2010-3772: Security researcher wushi of
team509 reported that when a XUL tree had an HTML &lt;div&gt;
element nested inside a &lt;treechildren&gt; element then code
attempting to display content in the XUL tree would
incorrectly treat the &lt;div&gt; element as a parent node to
tree content underneath it resulting in incorrect indexes
being calculated for the child content. These incorrect
indexes were used in subsequent array operations which
resulted in writing data past the end of an allocated
buffer. An attacker could use this issue to crash a
victim's browser and run arbitrary code on their machine.

MFSA 2010-78 / CVE-2010-3768: Mozilla added the OTS font
sanitizing library to prevent downloadable fonts from
exposing vulnerabilities in the underlying OS font code.
This library mitigates against several issues independently
reported by Red Hat Security Response Team member Marc
Schoenefeld and Mozilla security researcher Christoph Diehl.

MFSA 2010-79 / CVE-2010-3775: Security researcher Gregory
Fleischer reported that when a Java LiveConnect script was
loaded via a data: URL which redirects via a meta refresh,
then the resulting plugin object was created with the wrong
security principal and thus received elevated privileges
such as the abilities to read local files, launch
processes, and create network connections.

MFSA 2010-80 / CVE-2010-3766: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a nsDOMAttribute node can be modified without
informing the iterator object responsible for various DOM
traversals. This flaw could lead to a inconsistent state
where the iterator points to an object it believes is part
of the DOM but actually points to some other object. If
such an object had been deleted and its memory reclaimed by
the system, then the iterator could be used to call into
attacker-controlled memory.

MFSA 2010-81 / CVE-2010-3767: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that JavaScript arrays were vulnerable to an integer
overflow vulnerability. The report demonstrated that an
array could be constructed containing a very large number
of items such that when memory was allocated to store the
array items, the integer value used to calculate the buffer
size would overflow resulting in too small a buffer being
allocated. Subsequent use of the array object could then
result in data being written past the end of the buffer and
causing memory corruption.

MFSA 2010-82 / CVE-2010-3773: Mozilla security researcher
moz_bug_r_a4 reported that the fix for CVE-2010-0179 could
be circumvented permitting the execution of arbitrary
JavaScript with chrome privileges.

MFSA 2010-83 / CVE-2010-3774: Google security researcher
Michal Zalewski reported that when a window was opened to a
site resulting in a network or certificate error page, the
opening site could access the document inside the opened
window and inject arbitrary content. An attacker could use
this bug to spoof the location bar and trick a user into
thinking they were on a different site than they actually
were.

MFSA 2010-84 / CVE-2010-3770: Security researchers Yosuke
Hasegawa and Masatoshi Kimura reported that the
x-mac-arabic, x-mac-farsi and x-mac-hebrew character
encodings are vulnerable to XSS attacks due to some
characters being converted to angle brackets when displayed
by the rendering engine. Sites using these character
encodings would thus be potentially vulnerable to script
injection attacks if their script filtering code fails to
strip out these specific characters.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.16" release="0.2.1">
          <filename>python-xpcom191-1.9.1.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.16" release="0.2.1">
          <filename>python-xpcom191-1.9.1.16-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f67cc35b56bb8d5848feb2713c25b720"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3715">
  <id>apparmor-dbus</id>
  <title>apparmor-dbus: Fix permissions to work with auditd</title>
  <release>openSUSE 11.3</release>
  <issued date="1292546272"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641695" id="641695" title="bug number 641695" type="bugzilla"/>
  </references>
  <description>This update fixes the permissions of installed binaries so
that they work properly with auditd(bnc#641695).
</description>
  <pkglist>
    <collection>
        <package name="apparmor-dbus" arch="i586" version="2.3" release="58.3.1">
          <filename>apparmor-dbus-2.3-58.3.1.i586.rpm</filename>
        </package>
        <package name="apparmor-dbus" arch="x86_64" version="2.3" release="58.3.1">
          <filename>apparmor-dbus-2.3-58.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="49acc91b486ef78455a3cc077b3f1d68"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3710">
  <id>apparmor-profiles-parser</id>
  <title>apparmor: Collective fixes</title>
  <release>openSUSE 11.3</release>
  <issued date="1292546431"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=436262" id="436262" title="bug number 436262" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=539401" id="539401" title="bug number 539401" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634801" id="634801" title="bug number 634801" type="bugzilla"/>
  </references>
  <description>This update provides various fixes for apparmor, including
fixes for apparmor profiles:

- 436262: Firefox profiles do not work with current Firefox
- 539401: AppArmor lets cupsd fail to start
- 634801: /etc/apparmor.d/usr.sbin.ntpd broken for chroot
</description>
  <pkglist>
    <collection>
        <package name="apparmor-parser" arch="i586" version="2.3.1" release="22.3.1">
          <filename>apparmor-parser-2.3.1-22.3.1.i586.rpm</filename>
        </package>
        <package name="apparmor-parser" arch="x86_64" version="2.3.1" release="22.3.1">
          <filename>apparmor-parser-2.3.1-22.3.1.x86_64.rpm</filename>
        </package>
        <package name="apparmor-profiles" arch="noarch" version="2.3" release="57.3.1">
          <filename>apparmor-profiles-2.3-57.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ee93b41dfd42ae8beca8d221b037f87c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3647">
  <id>gnutls</id>
  <title>gnutls: fixing SSL-renegotiation &quot;authentication gap&quot; testing code</title>
  <release>openSUSE 11.3</release>
  <issued date="1291645591"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=554084" id="554084" title="bug number 554084" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" id="CVE-2009-3555" title="CVE-2009-3555" type="cve"/>
  </references>
  <description>This update fixes the safe renegotiation testing code which
was missing in the previous update for CVE-2009-3555.
</description>
  <pkglist>
    <collection>
        <package name="gnutls" arch="i586" version="2.8.6" release="2.5.1">
          <filename>gnutls-2.8.6-2.5.1.i586.rpm</filename>
        </package>
        <package name="gnutls" arch="x86_64" version="2.8.6" release="2.5.1">
          <filename>gnutls-2.8.6-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls-devel" arch="i586" version="2.8.6" release="2.5.1">
          <filename>libgnutls-devel-2.8.6-2.5.1.i586.rpm</filename>
        </package>
        <package name="libgnutls-devel" arch="x86_64" version="2.8.6" release="2.5.1">
          <filename>libgnutls-devel-2.8.6-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls-extra-devel" arch="i586" version="2.8.6" release="2.5.1">
          <filename>libgnutls-extra-devel-2.8.6-2.5.1.i586.rpm</filename>
        </package>
        <package name="libgnutls-extra-devel" arch="x86_64" version="2.8.6" release="2.5.1">
          <filename>libgnutls-extra-devel-2.8.6-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls-extra26" arch="i586" version="2.8.6" release="2.5.1">
          <filename>libgnutls-extra26-2.8.6-2.5.1.i586.rpm</filename>
        </package>
        <package name="libgnutls-extra26" arch="x86_64" version="2.8.6" release="2.5.1">
          <filename>libgnutls-extra26-2.8.6-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls26" arch="i586" version="2.8.6" release="2.5.1">
          <filename>libgnutls26-2.8.6-2.5.1.i586.rpm</filename>
        </package>
        <package name="libgnutls26" arch="x86_64" version="2.8.6" release="2.5.1">
          <filename>libgnutls26-2.8.6-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls26-32bit" arch="x86_64" version="2.8.6" release="2.5.1">
          <filename>libgnutls26-32bit-2.8.6-2.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="768d80bbfed27d231ec910720bbb5412"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3730">
  <id>opera</id>
  <title>opera security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1293007336"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659882" id="659882" title="bug number 659882" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4508" id="CVE-2010-4508" title="CVE-2010-4508" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4579" id="CVE-2010-4579" title="CVE-2010-4579" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4580" id="CVE-2010-4580" title="CVE-2010-4580" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4581" id="CVE-2010-4581" title="CVE-2010-4581" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4582" id="CVE-2010-4582" title="CVE-2010-4582" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4583" id="CVE-2010-4583" title="CVE-2010-4583" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4584" id="CVE-2010-4584" title="CVE-2010-4584" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4585" id="CVE-2010-4585" title="CVE-2010-4585" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4586" id="CVE-2010-4586" title="CVE-2010-4586" type="cve"/>
  </references>
  <description>opera 11.00 fixes among other things several security
vulnerabilities. Please refer opera's site for more
information: http://www.opera.com/docs/changelogs/unix/1100/

(CVE-2010-4508, CVE-2010-4579, CVE-2010-4580,
CVE-2010-4581, CVE-2010-4582, CVE-2010-4583, CVE-2010-4584,
CVE-2010-4585, CVE-2010-4586)
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="11.00" release="1.2.1">
          <filename>opera-11.00-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="11.00" release="1.2.1">
          <filename>opera-11.00-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="opera-gtk" arch="i586" version="11.00" release="1.2.1">
          <filename>opera-gtk-11.00-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera-gtk" arch="x86_64" version="11.00" release="1.2.1">
          <filename>opera-gtk-11.00-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="opera-kde4" arch="i586" version="11.00" release="1.2.1">
          <filename>opera-kde4-11.00-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera-kde4" arch="x86_64" version="11.00" release="1.2.1">
          <filename>opera-kde4-11.00-1.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="71b4da2548a91a5cd57cb7e49f2c3226"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3746">
  <id>sysconfig</id>
  <title>sysconfig: Fix log file spamming when ipv6 is disabled</title>
  <release>openSUSE 11.3</release>
  <issued date="1293539063"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=616765" id="616765" title="bug number 616765" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637183" id="637183" title="bug number 637183" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=644738" id="644738" title="bug number 644738" type="bugzilla"/>
  </references>
  <description>This update fixes the check whether ipv6 is enabled or not
in /sbin/ifup-dhcp.

Also included are fixes for:

- Fixed link_wait scriptname check and ping usage
  (bnc#644738)

- Fixed ifplugd-selectif script to use -1 as default
  carrier (bnc#637183)
</description>
  <pkglist>
    <collection>
        <package name="sysconfig" arch="i586" version="0.73.7" release="2.3.1">
          <filename>sysconfig-0.73.7-2.3.1.i586.rpm</filename>
        </package>
        <package name="sysconfig" arch="x86_64" version="0.73.7" release="2.3.1">
          <filename>sysconfig-0.73.7-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3b1de6f5910e8696ae99cbf287aaf5a6"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3750">
  <id>gnome-control-center</id>
  <title>gnome-control-center: Sometimes touchpad is not detect correctly. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1293554189"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626974" id="626974" title="bug number 626974" type="bugzilla"/>
  </references>
  <description>Synaptics touchpad detection in gnome-mouse-properties was
not working in some laptop configurations (bnc#626974).
Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="gnome-control-center" arch="i586" version="2.30.1" release="2.3.1">
          <filename>gnome-control-center-2.30.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-control-center" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>gnome-control-center-2.30.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-control-center-devel" arch="i586" version="2.30.1" release="2.3.1">
          <filename>gnome-control-center-devel-2.30.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-control-center-devel" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>gnome-control-center-devel-2.30.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-control-center-lang" arch="noarch" version="2.30.1" release="2.3.1">
          <filename>gnome-control-center-lang-2.30.1-2.3.1.noarch.rpm</filename>
        </package>
        <package name="libgnome-window-settings-devel" arch="i586" version="2.30.1" release="2.3.1">
          <filename>libgnome-window-settings-devel-2.30.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgnome-window-settings-devel" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>libgnome-window-settings-devel-2.30.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnome-window-settings1" arch="i586" version="2.30.1" release="2.3.1">
          <filename>libgnome-window-settings1-2.30.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgnome-window-settings1" arch="x86_64" version="2.30.1" release="2.3.1">
          <filename>libgnome-window-settings1-2.30.1-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7d56748020c6dcf27ceb9fd89fc28b3c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3709">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1292452946"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655839" id="655839" title="bug number 655839" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659076" id="659076" title="bug number 659076" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657350" id="657350" title="bug number 657350" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651626" id="651626" title="bug number 651626" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655215" id="655215" title="bug number 655215" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652939" id="652939" title="bug number 652939" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652940" id="652940" title="bug number 652940" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653258" id="653258" title="bug number 653258" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653260" id="653260" title="bug number 653260" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654581" id="654581" title="bug number 654581" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653930" id="653930" title="bug number 653930" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651218" id="651218" title="bug number 651218" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652563" id="652563" title="bug number 652563" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652945" id="652945" title="bug number 652945" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642043" id="642043" title="bug number 642043" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=584028" id="584028" title="bug number 584028" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=547887" id="547887" title="bug number 547887" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628591" id="628591" title="bug number 628591" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645659" id="645659" title="bug number 645659" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649187" id="649187" title="bug number 649187" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641811" id="641811" title="bug number 641811" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642484" id="642484" title="bug number 642484" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642486" id="642486" title="bug number 642486" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642311" id="642311" title="bug number 642311" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642312" id="642312" title="bug number 642312" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642313" id="642313" title="bug number 642313" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641983" id="641983" title="bug number 641983" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642302" id="642302" title="bug number 642302" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650128" id="650128" title="bug number 650128" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629901" id="629901" title="bug number 629901" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629908" id="629908" title="bug number 629908" type="bugzilla"/>
  </references>
  <description>The openSUSE 11.3 kernel was updated to fix various bugs
and security issues.

Following security issues have been fixed: CVE-2010-4347: A
local user could inject ACPI code into the kernel via the
world-writable &quot;custom_debug&quot; file, allowing local
privilege escalation.

CVE-2010-4258: A local attacker could use a Oops (kernel
crash) caused by other flaws to write a 0 byte to a
attacker controlled address in the kernel. This could lead
to privilege escalation together with other issues.

CVE-2010-4157: A 32bit vs 64bit integer mismatch in
gdth_ioctl_alloc could lead to memory corruption in the
GDTH driver.

CVE-2010-4165: The do_tcp_setsockopt function in
net/ipv4/tcp.c in the Linux kernel did not properly
restrict TCP_MAXSEG (aka MSS) values, which allows local
users to cause a denial of service (OOPS) via a setsockopt
call that specifies a small value, leading to a
divide-by-zero error or incorrect use of a signed integer.

CVE-2010-4164: A remote (or local) attacker communicating
over X.25 could cause a kernel panic by attempting to
negotiate malformed facilities.

CVE-2010-4175:  A local attacker could cause memory
overruns in the RDS protocol stack, potentially crashing
the kernel. So far it is considered not to be exploitable.

CVE-2010-4169: Use-after-free vulnerability in
mm/mprotect.c in the Linux kernel allwed local users to
cause a denial of service via vectors involving an mprotect
system call.

CVE-2010-3874: A minor heap overflow in the CAN network
module was fixed. Due to nature of the memory allocator it
is likely not exploitable.

CVE-2010-4158: A memory information leak in berkely packet
filter rules allowed local attackers to read uninitialized
memory of the kernel stack.

CVE-2010-4162: A local denial of service in the blockdevice
layer was fixed.

CVE-2010-4163: By submitting certain I/O requests with 0
length, a local user could have caused a kernel panic.

CVE-2010-0435: The Hypervisor in KVM 83, when the Intel
VT-x extension is enabled, allows guest OS users to cause a
denial of service (NULL pointer dereference and host OS
crash) via vectors related to instruction emulation.

CVE-2010-3861: The ethtool_get_rxnfc function in
net/core/ethtool.c in the Linux kernel did not initialize a
certain block of heap memory, which allowed local users to
obtain potentially sensitive information via an
ETHTOOL_GRXCLSRLALL ethtool command with a large
info.rule_cnt value.

CVE-2010-3442: Multiple integer overflows in the
snd_ctl_new function in sound/core/control.c in the Linux
kernel allowed local users to cause a denial of service
(heap memory corruption) or possibly have unspecified other
impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2)
SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.

CVE-2010-3437: A range checking overflow in pktcdvd ioctl
was fixed.

CVE-2010-4078: The sisfb_ioctl function in
drivers/video/sis/sis_main.c in the Linux kernel did not
properly initialize a certain structure member, which
allowed local users to obtain potentially sensitive
information from kernel stack memory via an FBIOGET_VBLANK
ioctl call.

CVE-2010-4080: The snd_hdsp_hwdep_ioctl function in
sound/pci/rme9652/hdsp.c in the Linux kernel did not
initialize a certain structure, which allowed local users
to obtain potentially sensitive information from kernel
stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl
call.

CVE-2010-4081: The snd_hdspm_hwdep_ioctl function in
sound/pci/rme9652/hdspm.c in the Linux kernel did not
initialize a certain structure, which allowed local users
to obtain potentially sensitive information from kernel
stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl
call.

CVE-2010-4082: The viafb_ioctl_get_viafb_info function in
drivers/video/via/ioctl.c in the Linux kernel did not
properly initialize a certain structure member, which
allowed local users to obtain potentially sensitive
information from kernel stack memory via a VIAFB_GET_INFO
ioctl call.

CVE-2010-4073: The ipc subsystem in the Linux kernel did
not initialize certain structures, which allowed local
users to obtain potentially sensitive information from
kernel stack memory via vectors related to the (1)
compat_sys_semctl, (2) compat_sys_msgctl, and (3)
compat_sys_shmctl functions in ipc/compat.c; and the (4)
compat_sys_mq_open and (5) compat_sys_mq_getsetattr
functions in ipc/compat_mq.c.

CVE-2010-4072: The copy_shmid_to_user function in ipc/shm.c
in the Linux kernel did not initialize a certain structure,
which allowed local users to obtain potentially sensitive
information from kernel stack memory via vectors related to
the shmctl system call and the &quot;old shm interface.&quot;

CVE-2010-4083: The copy_semid_to_user function in ipc/sem.c
in the Linux kernel did not initialize a certain structure,
which allowed local users to obtain potentially sensitive
information from kernel stack memory via a (1) IPC_INFO,
(2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT command in a
semctl system call.

CVE-2010-3432: The sctp_packet_config function in
net/sctp/output.c in the Linux kernel performed extraneous
initializations of packet data structures, which allowed
remote attackers to cause a denial of service (panic) via a
certain sequence of SCTP traffic.

CVE-2010-3067: Integer overflow in the do_io_submit
function in fs/aio.c in the Linux kernel allowed local
users to cause a denial of service or possibly have
unspecified other impact via crafted use of the io_submit
system call.

CVE-2010-3865: A iovec integer overflow in RDS sockets was
fixed which could lead to local attackers gaining kernel
privileges.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-debug-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-debug-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-debug-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-debug-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-debug-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-debug-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-default-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-default-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-default-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-default-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-default-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-default-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-desktop-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-desktop-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-desktop-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-desktop-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-desktop-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.7" release="0.7.1">
          <filename>kernel-devel-2.6.34.7-0.7.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-ec2-extra-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-pae-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-pae-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-pae-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.7" release="0.7.1">
          <filename>kernel-source-2.6.34.7-0.7.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.7" release="0.7.1">
          <filename>kernel-source-vanilla-2.6.34.7-0.7.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-syms-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-syms-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-trace-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-trace-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-trace-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-trace-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-trace-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-trace-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vanilla-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vanilla-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vanilla-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vanilla-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vmi-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vmi-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-vmi-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-xen-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-xen-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-xen-base-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-xen-base-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.7" release="0.7.1">
          <filename>kernel-xen-devel-2.6.34.7-0.7.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.7" release="0.7.1">
          <filename>kernel-xen-devel-2.6.34.7-0.7.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.7_0.7" release="19.1.11">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.7-19.1.11.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.7_0.7" release="19.1.11">
          <filename>preload-kmp-default-1.1_k2.6.34.7_0.7-19.1.11.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.7_0.7" release="19.1.11">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.7-19.1.11.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.7_0.7" release="19.1.11">
          <filename>preload-kmp-desktop-1.1_k2.6.34.7_0.7-19.1.11.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f9c637f692a90b1e2ed81b9775e690c1"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3520">
  <id>libsmi</id>
  <title>libsmi security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1289496762"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649867" id="649867" title="bug number 649867" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2891" id="CVE-2010-2891" title="CVE-2010-2891" type="cve"/>
  </references>
  <description>This update fixes a buffer overflow the smiGetNode()
function in libsmi. It allowed  context-dependent attackers
to execute arbitrary code via an Object Identifier.
CVE-2010-2891: CVSS v2 Base Score: 7.5 (HIGH)
(AV:N/AC:L/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)
</description>
  <pkglist>
    <collection>
        <package name="libsmi" arch="i586" version="0.4.5" release="131.3.1">
          <filename>libsmi-0.4.5-131.3.1.i586.rpm</filename>
        </package>
        <package name="libsmi" arch="x86_64" version="0.4.5" release="131.3.1">
          <filename>libsmi-0.4.5-131.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmi-devel" arch="i586" version="0.4.5" release="131.3.1">
          <filename>libsmi-devel-0.4.5-131.3.1.i586.rpm</filename>
        </package>
        <package name="libsmi-devel" arch="x86_64" version="0.4.5" release="131.3.1">
          <filename>libsmi-devel-0.4.5-131.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d5b31ed982ed1f2e0bb8cb00579ee6aa"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3660">
  <id>libopenssl-devel</id>
  <title>openssl security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1291741431"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657663" id="657663" title="bug number 657663" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180" id="CVE-2010-4180" title="CVE-2010-4180" type="cve"/>
  </references>
  <description>Malicious clients could downgrade a connection to a low
strength cipher suite on session resumption if the server
offers such ciphers (CVE-2010-4180).
</description>
  <pkglist>
    <collection>
        <package name="libopenssl-devel" arch="i586" version="1.0.0" release="6.5.1">
          <filename>libopenssl-devel-1.0.0-6.5.1.i586.rpm</filename>
        </package>
        <package name="libopenssl-devel" arch="x86_64" version="1.0.0" release="6.5.1">
          <filename>libopenssl-devel-1.0.0-6.5.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="i586" version="0.9.8m" release="3.3.1">
          <filename>libopenssl0_9_8-0.9.8m-3.3.1.i586.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="x86_64" version="0.9.8m" release="3.3.1">
          <filename>libopenssl0_9_8-0.9.8m-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8-32bit" arch="x86_64" version="0.9.8m" release="3.3.1">
          <filename>libopenssl0_9_8-32bit-0.9.8m-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="i586" version="1.0.0" release="6.5.1">
          <filename>libopenssl1_0_0-1.0.0-6.5.1.i586.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="x86_64" version="1.0.0" release="6.5.1">
          <filename>libopenssl1_0_0-1.0.0-6.5.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0-32bit" arch="x86_64" version="1.0.0" release="6.5.1">
          <filename>libopenssl1_0_0-32bit-1.0.0-6.5.1.x86_64.rpm</filename>
        </package>
        <package name="openssl" arch="i586" version="1.0.0" release="6.5.1">
          <filename>openssl-1.0.0-6.5.1.i586.rpm</filename>
        </package>
        <package name="openssl" arch="x86_64" version="1.0.0" release="6.5.1">
          <filename>openssl-1.0.0-6.5.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-doc" arch="noarch" version="1.0.0" release="6.5.1">
          <filename>openssl-doc-1.0.0-6.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e7c8138973c6ded363ef20e223c1e1be"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3785">
  <id>perl-CGI-Simple</id>
  <title>perl-CGI-Simple: Fixed a header injection problem (CVE-2010-2761).</title>
  <release>openSUSE 11.3</release>
  <issued date="1294387418"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657731" id="657731" title="bug number 657731" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3172" id="CVE-2010-3172" title="CVE-2010-3172" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2761" id="CVE-2010-2761" title="CVE-2010-2761" type="cve"/>
  </references>
  <description>A HTTP header injection attack was fixed in
perl-CGI-Simple. CVE-2010-2761 has been assigned to this
issue.
</description>
  <pkglist>
    <collection>
        <package name="perl-CGI-Simple" arch="i586" version="1.112" release="7.3.1">
          <filename>perl-CGI-Simple-1.112-7.3.1.i586.rpm</filename>
        </package>
        <package name="perl-CGI-Simple" arch="x86_64" version="1.112" release="7.3.1">
          <filename>perl-CGI-Simple-1.112-7.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="60bd4512c3c438131b339677534a0d92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3783">
  <id>finch</id>
  <title>Fixed NULL pointer dereference in pidgin (CVE-2010-4528).</title>
  <release>openSUSE 11.3</release>
  <issued date="1294239231"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661497" id="661497" title="bug number 661497" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4528" id="CVE-2010-4528" title="CVE-2010-4528" type="cve"/>
  </references>
  <description>A NULL pointer dereference DoS has been fixed in pidgin.
CVE-2010-4528 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="finch" arch="i586" version="2.7.9" release="1.2.1">
          <filename>finch-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="finch" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>finch-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="finch-devel" arch="i586" version="2.7.9" release="1.2.1">
          <filename>finch-devel-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="finch-devel" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>finch-devel-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple" arch="i586" version="2.7.9" release="1.2.1">
          <filename>libpurple-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="libpurple" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>libpurple-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-devel" arch="i586" version="2.7.9" release="1.2.1">
          <filename>libpurple-devel-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="libpurple-devel" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>libpurple-devel-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-lang" arch="noarch" version="2.7.9" release="1.2.1">
          <filename>libpurple-lang-2.7.9-1.2.1.noarch.rpm</filename>
        </package>
        <package name="libpurple-meanwhile" arch="i586" version="2.7.9" release="1.2.1">
          <filename>libpurple-meanwhile-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="libpurple-meanwhile" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>libpurple-meanwhile-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-mono" arch="i586" version="2.7.9" release="1.2.1">
          <filename>libpurple-mono-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="libpurple-mono" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>libpurple-mono-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="libpurple-tcl" arch="i586" version="2.7.9" release="1.2.1">
          <filename>libpurple-tcl-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="libpurple-tcl" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>libpurple-tcl-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="pidgin" arch="i586" version="2.7.9" release="1.2.1">
          <filename>pidgin-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="pidgin" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>pidgin-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="pidgin-devel" arch="i586" version="2.7.9" release="1.2.1">
          <filename>pidgin-devel-2.7.9-1.2.1.i586.rpm</filename>
        </package>
        <package name="pidgin-devel" arch="x86_64" version="2.7.9" release="1.2.1">
          <filename>pidgin-devel-2.7.9-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="pidgin-otr" arch="i586" version="3.2.0" release="146.1.2">
          <filename>pidgin-otr-3.2.0-146.1.2.i586.rpm</filename>
        </package>
        <package name="pidgin-otr" arch="x86_64" version="3.2.0" release="146.1.2">
          <filename>pidgin-otr-3.2.0-146.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f26d99c8448d0b4abc27edfd3d967437"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3756">
  <id>pam_apparmor</id>
  <title>pam_apparmor: support for enabling/disabling</title>
  <release>openSUSE 11.3</release>
  <issued date="1294049843"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623246" id="623246" title="bug number 623246" type="bugzilla"/>
  </references>
  <description>Added support for enabling/disabling the module
automatically during installation/removal (bnc#623246)
</description>
  <pkglist>
    <collection>
        <package name="pam_apparmor" arch="i586" version="2.3" release="58.3.1">
          <filename>pam_apparmor-2.3-58.3.1.i586.rpm</filename>
        </package>
        <package name="pam_apparmor" arch="x86_64" version="2.3" release="58.3.1">
          <filename>pam_apparmor-2.3-58.3.1.x86_64.rpm</filename>
        </package>
        <package name="pam_apparmor-32bit" arch="x86_64" version="2.3" release="58.3.1">
          <filename>pam_apparmor-32bit-2.3-58.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2f04dcdce8116a33a07c5cb5766d5b58"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3784">
  <id>java-1_6_0-sun</id>
  <title>java-1_6_0-sun: Update to Java SE 6 Update 23</title>
  <release>openSUSE 11.3</release>
  <issued date="1294399800"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662459" id="662459" title="bug number 662459" type="bugzilla"/>
  </references>
  <description>Java SE 6u23 contains enhancements for your Java
applications:

* Improved performance and stability
* Enhanced support for right-to-left languages

* Java SE 6u23 contains Olson time zone data version 2010l.
  For more information, refer to Timezone Data Versions in
  the JRE Software .

## Java Hotspot VM 19.0

Java SE 6u23 includes version 19.0 of the Java HotSpot
Virtual Machine with improvements to overall performance
and reliability.

## Java VisualVM 1.3.1 Java VisualVM based on VisualVM
1.3.1 is included in Java SE 6u23. This release introduces
the following features and enhancements:

## Menu Item Corrections for Right-to-Left Languages
Several bugs in the non-default alignment and text
orientation for the menu items in Swing have been fixed, as
this is particularly important for right-to-left languages
such as Arabic.

Another issue corrected is the position of the icon and the
text. For the non-default positions the text used to
overlap the icon in a menu item, this is no longer the case.

All platform Look and Feel configurations will now handle
menu items in right-to-left language situations. These
fixes have been tested through their inclusion in the JDK 7
development release, but this is the first time they have
been available via JDK 6.

## Additional Languages Support in Linux Systems Added
support for SuSE Linux Enterprise Server 10 and 11 on
Chinese (Simplified), Chinese (Traditional), Japanese, and
Korean locales.

## Bug Fixes Java SE 6u23 does not contain any additional
fixes for security vulnerabilities to its previous release,
Java SE 6u22. Users who have Java SE 6u22 have the latest
security fixes and do not need to upgrade to this release
to be current on security fixes.
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u23-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u23-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u23-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u23-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u23-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u23-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u23-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u23-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u23-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u23-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u23-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u23" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u23-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3a1582db9f0701654a550e151c7852f1"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3738">
  <id>wireshark</id>
  <title>wireshark security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1293039448"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630599" id="630599" title="bug number 630599" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613487" id="613487" title="bug number 613487" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603251" id="603251" title="bug number 603251" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643078" id="643078" title="bug number 643078" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655448" id="655448" title="bug number 655448" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2992" id="CVE-2010-2992" title="CVE-2010-2992" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2993" id="CVE-2010-2993" title="CVE-2010-2993" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2994" id="CVE-2010-2994" title="CVE-2010-2994" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2995" id="CVE-2010-2995" title="CVE-2010-2995" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2283" id="CVE-2010-2283" title="CVE-2010-2283" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2284" id="CVE-2010-2284" title="CVE-2010-2284" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2285" id="CVE-2010-2285" title="CVE-2010-2285" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2286" id="CVE-2010-2286" title="CVE-2010-2286" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2287" id="CVE-2010-2287" title="CVE-2010-2287" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1455" id="CVE-2010-1455" title="CVE-2010-1455" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3445" id="CVE-2010-3445" title="CVE-2010-3445" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4300" id="CVE-2010-4300" title="CVE-2010-4300" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4301" id="CVE-2010-4301" title="CVE-2010-4301" type="cve"/>
  </references>
  <description>Wireshark version 1.4.2 fixes several security issues that
allowed attackers to crash wireshark or potentially even
execute arbitrary code

(CVE-2010-1455, CVE-2010-2283, CVE-2010-2284,
CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992,
CVE-2010-2993, CVE-2010-2994, CVE-2010-2995, CVE-2010-3445,
CVE-2010-4300, CVE-2010-4301)
</description>
  <pkglist>
    <collection>
        <package name="wireshark" arch="i586" version="1.4.2" release="1.1.2">
          <filename>wireshark-1.4.2-1.1.2.i586.rpm</filename>
        </package>
        <package name="wireshark" arch="x86_64" version="1.4.2" release="1.1.2">
          <filename>wireshark-1.4.2-1.1.2.x86_64.rpm</filename>
        </package>
        <package name="wireshark-devel" arch="i586" version="1.4.2" release="1.1.2">
          <filename>wireshark-devel-1.4.2-1.1.2.i586.rpm</filename>
        </package>
        <package name="wireshark-devel" arch="x86_64" version="1.4.2" release="1.1.2">
          <filename>wireshark-devel-1.4.2-1.1.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a287d13132a0586ee44740b31d8903f7"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3787">
  <id>libwebkit</id>
  <title>Fixing various bugs in webkit.</title>
  <release>openSUSE 11.3</release>
  <issued date="1294153062"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=601349" id="601349" title="bug number 601349" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945" id="CVE-2009-0945" title="CVE-2009-0945" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1681" id="CVE-2009-1681" title="CVE-2009-1681" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1684" id="CVE-2009-1684" title="CVE-2009-1684" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1685" id="CVE-2009-1685" title="CVE-2009-1685" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1686" id="CVE-2009-1686" title="CVE-2009-1686" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1687" id="CVE-2009-1687" title="CVE-2009-1687" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1688" id="CVE-2009-1688" title="CVE-2009-1688" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1689" id="CVE-2009-1689" title="CVE-2009-1689" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1691" id="CVE-2009-1691" title="CVE-2009-1691" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1690" id="CVE-2009-1690" title="CVE-2009-1690" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1692" id="CVE-2009-1692" title="CVE-2009-1692" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1693" id="CVE-2009-1693" title="CVE-2009-1693" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1694" id="CVE-2009-1694" title="CVE-2009-1694" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1695" id="CVE-2009-1695" title="CVE-2009-1695" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1696" id="CVE-2009-1696" title="CVE-2009-1696" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1697" id="CVE-2009-1697" title="CVE-2009-1697" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1698" id="CVE-2009-1698" title="CVE-2009-1698" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1699" id="CVE-2009-1699" title="CVE-2009-1699" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1700" id="CVE-2009-1700" title="CVE-2009-1700" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1701" id="CVE-2009-1701" title="CVE-2009-1701" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1702" id="CVE-2009-1702" title="CVE-2009-1702" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1703" id="CVE-2009-1703" title="CVE-2009-1703" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1709" id="CVE-2009-1709" title="CVE-2009-1709" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1710" id="CVE-2009-1710" title="CVE-2009-1710" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1711" id="CVE-2009-1711" title="CVE-2009-1711" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1712" id="CVE-2009-1712" title="CVE-2009-1712" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1713" id="CVE-2009-1713" title="CVE-2009-1713" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1714" id="CVE-2009-1714" title="CVE-2009-1714" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1715" id="CVE-2009-1715" title="CVE-2009-1715" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1718" id="CVE-2009-1718" title="CVE-2009-1718" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1724" id="CVE-2009-1724" title="CVE-2009-1724" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1725" id="CVE-2009-1725" title="CVE-2009-1725" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2195" id="CVE-2009-2195" title="CVE-2009-2195" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2199" id="CVE-2009-2199" title="CVE-2009-2199" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2200" id="CVE-2009-2200" title="CVE-2009-2200" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2419" id="CVE-2009-2419" title="CVE-2009-2419" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2797" id="CVE-2009-2797" title="CVE-2009-2797" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2816" id="CVE-2009-2816" title="CVE-2009-2816" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2841" id="CVE-2009-2841" title="CVE-2009-2841" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3272" id="CVE-2009-3272" title="CVE-2009-3272" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3384" id="CVE-2009-3384" title="CVE-2009-3384" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3933" id="CVE-2009-3933" title="CVE-2009-3933" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3934" id="CVE-2009-3934" title="CVE-2009-3934" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0046" id="CVE-2010-0046" title="CVE-2010-0046" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0047" id="CVE-2010-0047" title="CVE-2010-0047" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0048" id="CVE-2010-0048" title="CVE-2010-0048" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0049" id="CVE-2010-0049" title="CVE-2010-0049" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0050" id="CVE-2010-0050" title="CVE-2010-0050" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0052" id="CVE-2010-0052" title="CVE-2010-0052" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0053" id="CVE-2010-0053" title="CVE-2010-0053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0054" id="CVE-2010-0054" title="CVE-2010-0054" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0315" id="CVE-2010-0315" title="CVE-2010-0315" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0647" id="CVE-2010-0647" title="CVE-2010-0647" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0051" id="CVE-2010-0051" title="CVE-2010-0051" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0650" id="CVE-2010-0650" title="CVE-2010-0650" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0651" id="CVE-2010-0651" title="CVE-2010-0651" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0656" id="CVE-2010-0656" title="CVE-2010-0656" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0659" id="CVE-2010-0659" title="CVE-2010-0659" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0661" id="CVE-2010-0661" title="CVE-2010-0661" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1029" id="CVE-2010-1029" title="CVE-2010-1029" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1126" id="CVE-2010-1126" title="CVE-2010-1126" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1233" id="CVE-2010-1233" title="CVE-2010-1233" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1236" id="CVE-2010-1236" title="CVE-2010-1236" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1386" id="CVE-2010-1386" title="CVE-2010-1386" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1387" id="CVE-2010-1387" title="CVE-2010-1387" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1388" id="CVE-2010-1388" title="CVE-2010-1388" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1389" id="CVE-2010-1389" title="CVE-2010-1389" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1390" id="CVE-2010-1390" title="CVE-2010-1390" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1391" id="CVE-2010-1391" title="CVE-2010-1391" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1392" id="CVE-2010-1392" title="CVE-2010-1392" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1393" id="CVE-2010-1393" title="CVE-2010-1393" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1394" id="CVE-2010-1394" title="CVE-2010-1394" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1395" id="CVE-2010-1395" title="CVE-2010-1395" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1396" id="CVE-2010-1396" title="CVE-2010-1396" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1397" id="CVE-2010-1397" title="CVE-2010-1397" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1398" id="CVE-2010-1398" title="CVE-2010-1398" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1399" id="CVE-2010-1399" title="CVE-2010-1399" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1400" id="CVE-2010-1400" title="CVE-2010-1400" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1401" id="CVE-2010-1401" title="CVE-2010-1401" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1402" id="CVE-2010-1402" title="CVE-2010-1402" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1403" id="CVE-2010-1403" title="CVE-2010-1403" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1404" id="CVE-2010-1404" title="CVE-2010-1404" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1405" id="CVE-2010-1405" title="CVE-2010-1405" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1406" id="CVE-2010-1406" title="CVE-2010-1406" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1407" id="CVE-2010-1407" title="CVE-2010-1407" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1408" id="CVE-2010-1408" title="CVE-2010-1408" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1409" id="CVE-2010-1409" title="CVE-2010-1409" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1410" id="CVE-2010-1410" title="CVE-2010-1410" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1412" id="CVE-2010-1412" title="CVE-2010-1412" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1413" id="CVE-2010-1413" title="CVE-2010-1413" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1414" id="CVE-2010-1414" title="CVE-2010-1414" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1415" id="CVE-2010-1415" title="CVE-2010-1415" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1416" id="CVE-2010-1416" title="CVE-2010-1416" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1417" id="CVE-2010-1417" title="CVE-2010-1417" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1418" id="CVE-2010-1418" title="CVE-2010-1418" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1419" id="CVE-2010-1419" title="CVE-2010-1419" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1421" id="CVE-2010-1421" title="CVE-2010-1421" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1422" id="CVE-2010-1422" title="CVE-2010-1422" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1729" id="CVE-2010-1729" title="CVE-2010-1729" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1749" id="CVE-2010-1749" title="CVE-2010-1749" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1757" id="CVE-2010-1757" title="CVE-2010-1757" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1758" id="CVE-2010-1758" title="CVE-2010-1758" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1759" id="CVE-2010-1759" title="CVE-2010-1759" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1760" id="CVE-2010-1760" title="CVE-2010-1760" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1761" id="CVE-2010-1761" title="CVE-2010-1761" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1762" id="CVE-2010-1762" title="CVE-2010-1762" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1763" id="CVE-2010-1763" title="CVE-2010-1763" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1764" id="CVE-2010-1764" title="CVE-2010-1764" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1766" id="CVE-2010-1766" title="CVE-2010-1766" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1767" id="CVE-2010-1767" title="CVE-2010-1767" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1769" id="CVE-2010-1769" title="CVE-2010-1769" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1770" id="CVE-2010-1770" title="CVE-2010-1770" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1771" id="CVE-2010-1771" title="CVE-2010-1771" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1772" id="CVE-2010-1772" title="CVE-2010-1772" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1773" id="CVE-2010-1773" title="CVE-2010-1773" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1774" id="CVE-2010-1774" title="CVE-2010-1774" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1780" id="CVE-2010-1780" title="CVE-2010-1780" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1781" id="CVE-2010-1781" title="CVE-2010-1781" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1782" id="CVE-2010-1782" title="CVE-2010-1782" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1783" id="CVE-2010-1783" title="CVE-2010-1783" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1784" id="CVE-2010-1784" title="CVE-2010-1784" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1785" id="CVE-2010-1785" title="CVE-2010-1785" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1786" id="CVE-2010-1786" title="CVE-2010-1786" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1787" id="CVE-2010-1787" title="CVE-2010-1787" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1788" id="CVE-2010-1788" title="CVE-2010-1788" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1789" id="CVE-2010-1789" title="CVE-2010-1789" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1790" id="CVE-2010-1790" title="CVE-2010-1790" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1791" id="CVE-2010-1791" title="CVE-2010-1791" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1792" id="CVE-2010-1792" title="CVE-2010-1792" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1793" id="CVE-2010-1793" title="CVE-2010-1793" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1807" id="CVE-2010-1807" title="CVE-2010-1807" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1812" id="CVE-2010-1812" title="CVE-2010-1812" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1813" id="CVE-2010-1813" title="CVE-2010-1813" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1814" id="CVE-2010-1814" title="CVE-2010-1814" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1815" id="CVE-2010-1815" title="CVE-2010-1815" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1822" id="CVE-2010-1822" title="CVE-2010-1822" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1823" id="CVE-2010-1823" title="CVE-2010-1823" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1824" id="CVE-2010-1824" title="CVE-2010-1824" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1825" id="CVE-2010-1825" title="CVE-2010-1825" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2264" id="CVE-2010-2264" title="CVE-2010-2264" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2295" id="CVE-2010-2295" title="CVE-2010-2295" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2297" id="CVE-2010-2297" title="CVE-2010-2297" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2300" id="CVE-2010-2300" title="CVE-2010-2300" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2301" id="CVE-2010-2301" title="CVE-2010-2301" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2302" id="CVE-2010-2302" title="CVE-2010-2302" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2441" id="CVE-2010-2441" title="CVE-2010-2441" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3116" id="CVE-2010-3116" title="CVE-2010-3116" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3257" id="CVE-2010-3257" title="CVE-2010-3257" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3259" id="CVE-2010-3259" title="CVE-2010-3259" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3312" id="CVE-2010-3312" title="CVE-2010-3312" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3803" id="CVE-2010-3803" title="CVE-2010-3803" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3804" id="CVE-2010-3804" title="CVE-2010-3804" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3805" id="CVE-2010-3805" title="CVE-2010-3805" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3808" id="CVE-2010-3808" title="CVE-2010-3808" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3809" id="CVE-2010-3809" title="CVE-2010-3809" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3810" id="CVE-2010-3810" title="CVE-2010-3810" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3811" id="CVE-2010-3811" title="CVE-2010-3811" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3812" id="CVE-2010-3812" title="CVE-2010-3812" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3813" id="CVE-2010-3813" title="CVE-2010-3813" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3816" id="CVE-2010-3816" title="CVE-2010-3816" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3817" id="CVE-2010-3817" title="CVE-2010-3817" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3818" id="CVE-2010-3818" title="CVE-2010-3818" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3819" id="CVE-2010-3819" title="CVE-2010-3819" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3820" id="CVE-2010-3820" title="CVE-2010-3820" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3821" id="CVE-2010-3821" title="CVE-2010-3821" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3822" id="CVE-2010-3822" title="CVE-2010-3822" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3823" id="CVE-2010-3823" title="CVE-2010-3823" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3824" id="CVE-2010-3824" title="CVE-2010-3824" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3826" id="CVE-2010-3826" title="CVE-2010-3826" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3829" id="CVE-2010-3829" title="CVE-2010-3829" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3900" id="CVE-2010-3900" title="CVE-2010-3900" type="cve"/>
  </references>
  <description>Various bugs in webkit have been fixed. The CVE id's are:

CVE-2009-0945, CVE-2009-1681, CVE-2009-1684, CVE-2009-1685,
CVE-2009-1686, CVE-2009-1687, CVE-2009-1688, CVE-2009-1689,
CVE-2009-1691, CVE-2009-1690, CVE-2009-1692, CVE-2009-1693,
CVE-2009-1694, CVE-2009-1695, CVE-2009-1696, CVE-2009-1697,
CVE-2009-1698, CVE-2009-1699, CVE-2009-1700, CVE-2009-1701,
CVE-2009-1702, CVE-2009-1703, CVE-2009-1709, CVE-2009-1710,
CVE-2009-1711, CVE-2009-1712, CVE-2009-1713, CVE-2009-1714,
CVE-2009-1715, CVE-2009-1718, CVE-2009-1724, CVE-2009-1725,
CVE-2009-2195, CVE-2009-2199, CVE-2009-2200, CVE-2009-2419,
CVE-2009-2797, CVE-2009-2816, CVE-2009-2841, CVE-2009-3272,
CVE-2009-3384, CVE-2009-3933, CVE-2009-3934, CVE-2010-0046,
CVE-2010-0047, CVE-2010-0048, CVE-2010-0049, CVE-2010-0050,
CVE-2010-0052, CVE-2010-0053, CVE-2010-0054, CVE-2010-0315,
CVE-2010-0647, CVE-2010-0051, CVE-2010-0650, CVE-2010-0651,
CVE-2010-0656, CVE-2010-0659, CVE-2010-0661, CVE-2010-1029,
CVE-2010-1126, CVE-2010-1233, CVE-2010-1236, CVE-2010-1386,
CVE-2010-1387, CVE-2010-1388, CVE-2010-1389, CVE-2010-1390,
CVE-2010-1391, CVE-2010-1392, CVE-2010-1393, CVE-2010-1394,
CVE-2010-1395, CVE-2010-1396, CVE-2010-1397, CVE-2010-1398,
CVE-2010-1399, CVE-2010-1400, CVE-2010-1401, CVE-2010-1402,
CVE-2010-1403, CVE-2010-1404, CVE-2010-1405, CVE-2010-1406,
CVE-2010-1407, CVE-2010-1408, CVE-2010-1409, CVE-2010-1410,
CVE-2010-1412, CVE-2010-1413, CVE-2010-1414, CVE-2010-1415,
CVE-2010-1416, CVE-2010-1417, CVE-2010-1418, CVE-2010-1419,
CVE-2010-1421, CVE-2010-1422, CVE-2010-1729, CVE-2010-1749,
CVE-2010-1757, CVE-2010-1758, CVE-2010-1759, CVE-2010-1760,
CVE-2010-1761, CVE-2010-1762, CVE-2010-1763, CVE-2010-1764,
CVE-2010-1766, CVE-2010-1767, CVE-2010-1769, CVE-2010-1770,
CVE-2010-1771, CVE-2010-1772, CVE-2010-1773, CVE-2010-1774,
CVE-2010-1780, CVE-2010-1781, CVE-2010-1782, CVE-2010-1783,
CVE-2010-1784, CVE-2010-1785, CVE-2010-1786, CVE-2010-1787,
CVE-2010-1788, CVE-2010-1789, CVE-2010-1790, CVE-2010-1791,
CVE-2010-1792, CVE-2010-1793, CVE-2010-1807, CVE-2010-1812,
CVE-2010-1813, CVE-2010-1814, CVE-2010-1815, CVE-2010-1822,
CVE-2010-1823, CVE-2010-1824, CVE-2010-1825, CVE-2010-2264,
CVE-2010-2295, CVE-2010-2297, CVE-2010-2300, CVE-2010-2301,
CVE-2010-2302, CVE-2010-2441, CVE-2010-3116, CVE-2010-3257,
CVE-2010-3259, CVE-2010-3312, CVE-2010-3803, CVE-2010-3804,
CVE-2010-3805, CVE-2010-3808, CVE-2010-3809, CVE-2010-3810,
CVE-2010-3811, CVE-2010-3812, CVE-2010-3813, CVE-2010-3816,
CVE-2010-3817, CVE-2010-3818, CVE-2010-3819, CVE-2010-3820,
CVE-2010-3821, CVE-2010-3822, CVE-2010-3823, CVE-2010-3824,
CVE-2010-3826, CVE-2010-3829, CVE-2010-3900, CVE-2010-4040
</description>
  <pkglist>
    <collection>
        <package name="libwebkit-1_0-2" arch="i586" version="1.2.6" release="0.2.1">
          <filename>libwebkit-1_0-2-1.2.6-0.2.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2" arch="x86_64" version="1.2.6" release="0.2.1">
          <filename>libwebkit-1_0-2-1.2.6-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2-32bit" arch="x86_64" version="1.2.6" release="0.2.1">
          <filename>libwebkit-1_0-2-32bit-1.2.6-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="i586" version="1.2.6" release="0.2.1">
          <filename>libwebkit-devel-1.2.6-0.2.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="x86_64" version="1.2.6" release="0.2.1">
          <filename>libwebkit-devel-1.2.6-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-lang" arch="noarch" version="1.2.6" release="0.2.1">
          <filename>libwebkit-lang-1.2.6-0.2.1.noarch.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="i586" version="1.2.6" release="0.2.1">
          <filename>webkit-jsc-1.2.6-0.2.1.i586.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="x86_64" version="1.2.6" release="0.2.1">
          <filename>webkit-jsc-1.2.6-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="95dd4d43bf606b24e65a58a7c22e5727"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3779">
  <id>xen-201101</id>
  <title>Xen: Collective Update 2011/01</title>
  <release>openSUSE 11.3</release>
  <issued date="1291814934"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628729" id="628729" title="bug number 628729" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652935" id="652935" title="bug number 652935" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649864" id="649864" title="bug number 649864" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641144" id="641144" title="bug number 641144" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=552115" id="552115" title="bug number 552115" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649277" id="649277" title="bug number 649277" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642078" id="642078" title="bug number 642078" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647681" id="647681" title="bug number 647681" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650871" id="650871" title="bug number 650871" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=497149" id="497149" title="bug number 497149" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640370" id="640370" title="bug number 640370" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=583568" id="583568" title="bug number 583568" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615206" id="615206" title="bug number 615206" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640773" id="640773" title="bug number 640773" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643477" id="643477" title="bug number 643477" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618087" id="618087" title="bug number 618087" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639546" id="639546" title="bug number 639546" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641859" id="641859" title="bug number 641859" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640773" id="640773" title="bug number 640773" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628719" id="628719" title="bug number 628719" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636231" id="636231" title="bug number 636231" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638465" id="638465" title="bug number 638465" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635380" id="635380" title="bug number 635380" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628701" id="628701" title="bug number 628701" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628701" id="628701" title="bug number 628701" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=603371" id="603371" title="bug number 603371" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640874" id="640874" title="bug number 640874" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629022" id="629022" title="bug number 629022" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=656245" id="656245" title="bug number 656245" type="bugzilla"/>
  </references>
  <description>Collective Xen Update, fixing the following reports:

Xen Hypervisor and Tools

- 628729 - [xm command]xm list performance is not good
- 652935 - Corrupted display when booting xen kernel
- 649864 - automatic numa cpu placement of xen conflicts
  with cpupools
- 641144 - FV Xen VM running windows or linux cannot write
  to virtual floppy drive
- 552115 - Remove target discovery in block-iscsi
- 649277 - Fix pci passthru in xend interface used by
  libvirt
- 642078 - xm snapshot-create causes qemu-dm to SEGV
- 647681 - L3: Passthrough of certain PCI device broken
  after SLES 11 to SP1 upgrade
- 650871 - Regression in Xen PCI Passthrough
- 497149 - SLES11 64bit Xen - SLES11 64bit HVM guest has
  corrupt text console
- 640370 - VM graphic console in VNC is corrupted
- 583568 - Xen kernel is not booting
- 615206 - Xen kernel fails to boot with IO-APIC problem
- 640773 - Xen kernel crashing right after grub
- 643477 - issues with PCI hotplug/hotunplug to Xen driver
  domain
- 618087 - VNC view won't stay connected to fully
  virtualized Linux Xen VMs
- 639546 - Dom-U deleted after introduction of the
  parameter &quot;change_home_server False&quot; in the VM
  configuration
- 641859 - block-dmmd script does not handle the
  configuration when only MD is used
- 640773 - Xen kernel crashing right after grub
- 628719 - improve check_device_status to handle HA cases
- 636231 - XEN: Unable to disconnect/remove CDROM drive
  from VM
- 638465 - hypervisor panic in memory handling
- 635380 - Fix pygrub Grub2 support
- 628701 - Improve performance when activate/deactivate
  dmmd devices
- 628701 - Fix qemu-dm handling of dmmd devices
- 651822 - Fix xm snapshot-xxx scripts lead to an chkdsk
- 656245 - Fix application or kernel in any pv domain able
  to crash Xen
- 658163 - Fix boot on Nehalem systems
- 659085 - Fix reboot for unknown reason (disable
  regression causing patch)
- 659070 - Revert keyboard fixes 

Virtual Machine Installer (vm-install) 

- 640874 - vm-install not creating guest with proper qcow2
  disk image format
- 629022 - [vm-install]max nics when create VM (Allow up to
  8 nics instead of 3.)
- 603371 - In KVM SVVP HAL timer tests (HCT) are failing
  (Disable hpet for windows guests on KVM.)
</description>
  <pkglist>
    <collection>
        <package name="vm-install" arch="i586" version="0.4.27" release="2.1.2">
          <filename>vm-install-0.4.27-2.1.2.i586.rpm</filename>
        </package>
        <package name="vm-install" arch="x86_64" version="0.4.27" release="2.1.2">
          <filename>vm-install-0.4.27-2.1.2.x86_64.rpm</filename>
        </package>
        <package name="xen" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-devel-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-devel" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-devel-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-doc-html-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-doc-html-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-doc-pdf-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-doc-pdf-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="i586" version="4.0.1_21326_02_k2.6.34.7_0.7" release="0.5.1">
          <filename>xen-kmp-default-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="x86_64" version="4.0.1_21326_02_k2.6.34.7_0.7" release="0.5.1">
          <filename>xen-kmp-default-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="i586" version="4.0.1_21326_02_k2.6.34.7_0.7" release="0.5.1">
          <filename>xen-kmp-desktop-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="x86_64" version="4.0.1_21326_02_k2.6.34.7_0.7" release="0.5.1">
          <filename>xen-kmp-desktop-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-pae" arch="i586" version="4.0.1_21326_02_k2.6.34.7_0.7" release="0.5.1">
          <filename>xen-kmp-pae-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-libs-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-libs-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-tools-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-tools" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-tools-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="i586" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-tools-domU-4.0.1_21326_02-0.5.1.i586.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="x86_64" version="4.0.1_21326_02" release="0.5.1">
          <filename>xen-tools-domU-4.0.1_21326_02-0.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2d8c11a525247ddd8145f19764f8f540"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3786">
  <id>yast2</id>
  <title>yast2: Fix for YaST2 module list from command line invocation</title>
  <release>openSUSE 11.3</release>
  <issued date="1294404255"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621848" id="621848" title="bug number 621848" type="bugzilla"/>
  </references>
  <description>This patch fixes bash completion in invoking yast, in
particular listing of YaST modules, which missed some
modules
</description>
  <pkglist>
    <collection>
        <package name="yast2" arch="i586" version="2.19.14" release="0.3.1">
          <filename>yast2-2.19.14-0.3.1.i586.rpm</filename>
        </package>
        <package name="yast2" arch="x86_64" version="2.19.14" release="0.3.1">
          <filename>yast2-2.19.14-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="yast2-devel-doc" arch="i586" version="2.19.14" release="0.3.1">
          <filename>yast2-devel-doc-2.19.14-0.3.1.i586.rpm</filename>
        </package>
        <package name="yast2-devel-doc" arch="x86_64" version="2.19.14" release="0.3.1">
          <filename>yast2-devel-doc-2.19.14-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="377185bf84bad167414a8e42aedb02b8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3803">
  <id>sysconfig</id>
  <title>sysconfig: Collective update fixing several bugs.</title>
  <release>openSUSE 11.3</release>
  <issued date="1294858397"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660774" id="660774" title="bug number 660774" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=630434" id="630434" title="bug number 630434" type="bugzilla"/>
  </references>
  <description>This collective update provides corrections for the
following sysconfig issues: #630434: Fix for udevmountd to
allow mounting of multipath devices. With this and the
corresponding multipath-tools patch, iscsi mounting works
as advertised, both multipathed and non-multipathed.
#660774: Fixed ifup-bonding to fail and remove bond when
there are no active slaves at the end and not on first
enslave failure.
</description>
  <pkglist>
    <collection>
        <package name="sysconfig" arch="i586" version="0.73.7" release="2.5.1">
          <filename>sysconfig-0.73.7-2.5.1.i586.rpm</filename>
        </package>
        <package name="sysconfig" arch="x86_64" version="0.73.7" release="2.5.1">
          <filename>sysconfig-0.73.7-2.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="814f6629807401b1292440ba4caa7620"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3790">
  <id>tar</id>
  <title>tar: This update fixes an endless loop if unpacking symbolic links with -k.</title>
  <release>openSUSE 11.3</release>
  <issued date="1294764932"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662408" id="662408" title="bug number 662408" type="bugzilla"/>
  </references>
  <description>When using &quot;tar -k&quot; to unpack a tarball which contains
symbolic links to a directory, where the symbolic link
already exists, tar gets into an endless loop and has to be
killed. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="tar" arch="i586" version="1.23" release="2.5.1">
          <filename>tar-1.23-2.5.1.i586.rpm</filename>
        </package>
        <package name="tar" arch="x86_64" version="1.23" release="2.5.1">
          <filename>tar-1.23-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="tar-backup-scripts" arch="i586" version="1.23" release="2.5.1">
          <filename>tar-backup-scripts-1.23-2.5.1.i586.rpm</filename>
        </package>
        <package name="tar-backup-scripts" arch="x86_64" version="1.23" release="2.5.1">
          <filename>tar-backup-scripts-1.23-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="tar-lang" arch="noarch" version="1.23" release="2.5.1">
          <filename>tar-lang-1.23-2.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="312bb87a60393e57ffea137c0115ade6"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3737">
  <id>libopensc2</id>
  <title>opensc security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1293007425"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660109" id="660109" title="bug number 660109" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4523" id="CVE-2010-4523" title="CVE-2010-4523" type="cve"/>
  </references>
  <description>Specially crafted smart cards could cause a buffer overflow
in opensc (CVE-2010-4523).
</description>
  <pkglist>
    <collection>
        <package name="libopensc2" arch="i586" version="0.11.13" release="2.3.1">
          <filename>libopensc2-0.11.13-2.3.1.i586.rpm</filename>
        </package>
        <package name="libopensc2" arch="x86_64" version="0.11.13" release="2.3.1">
          <filename>libopensc2-0.11.13-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libopensc2-32bit" arch="x86_64" version="0.11.13" release="2.3.1">
          <filename>libopensc2-32bit-0.11.13-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" arch="i586" version="0.11.13" release="2.3.1">
          <filename>opensc-0.11.13-2.3.1.i586.rpm</filename>
        </package>
        <package name="opensc" arch="x86_64" version="0.11.13" release="2.3.1">
          <filename>opensc-0.11.13-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-32bit" arch="x86_64" version="0.11.13" release="2.3.1">
          <filename>opensc-32bit-0.11.13-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-devel" arch="i586" version="0.11.13" release="2.3.1">
          <filename>opensc-devel-0.11.13-2.3.1.i586.rpm</filename>
        </package>
        <package name="opensc-devel" arch="x86_64" version="0.11.13" release="2.3.1">
          <filename>opensc-devel-0.11.13-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="145705eb6e6e72c15cf2ab4ad9e5ca80"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3774">
  <id>evince</id>
  <title>Fixing evince DVI font parser vulnerabilities (CVE-2010-2640 - CVE-2010-2643).</title>
  <release>openSUSE 11.3</release>
  <issued date="1294224137"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660555" id="660555" title="bug number 660555" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2640" id="CVE-2010-2640" title="CVE-2010-2640" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2641" id="CVE-2010-2641" title="CVE-2010-2641" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2642" id="CVE-2010-2642" title="CVE-2010-2642" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2643" id="CVE-2010-2643" title="CVE-2010-2643" type="cve"/>
  </references>
  <description>Multiple font parser vulnerabilities in the DVI backend of
evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have
been assigned to these issues.
</description>
  <pkglist>
    <collection>
        <package name="evince" arch="i586" version="2.30.1" release="3.3.1">
          <filename>evince-2.30.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="evince" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>evince-2.30.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="evince-devel" arch="i586" version="2.30.1" release="3.3.1">
          <filename>evince-devel-2.30.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="evince-devel" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>evince-devel-2.30.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="evince-lang" arch="noarch" version="2.30.1" release="3.3.1">
          <filename>evince-lang-2.30.1-3.3.1.noarch.rpm</filename>
        </package>
        <package name="nautilus-evince" arch="i586" version="2.30.1" release="3.3.1">
          <filename>nautilus-evince-2.30.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="nautilus-evince" arch="x86_64" version="2.30.1" release="3.3.1">
          <filename>nautilus-evince-2.30.1-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b05a056023e5bcac49ebdc63eaaf47c8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3811">
  <id>sudo</id>
  <title>sudo: security udpate</title>
  <release>openSUSE 11.3</release>
  <issued date="1295020250"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=663881" id="663881" title="bug number 663881" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=594738" id="594738" title="bug number 594738" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0010" id="CVE-2011-0010" title="CVE-2011-0010" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1163" id="CVE-2010-1163" title="CVE-2010-1163" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1646" id="CVE-2010-1646" title="CVE-2010-1646" type="cve"/>
  </references>
  <description>This update of sudo fixes:
- CVE-2011-0010: Does ask for the user password for GID
  changes now.
- CVE-2010-1646: CVSS v2 Base Score: 6.6 (CWE-264): The
  secure environment option can handle multiple occurrence
  of PATH now.
- CVE-2010-1163: CVSS v2 Base Score: 6.9 (CWE-20):
  Improved command matching.
</description>
  <pkglist>
    <collection>
        <package name="sudo" arch="i586" version="1.7.2p7" release="2.3.1">
          <filename>sudo-1.7.2p7-2.3.1.i586.rpm</filename>
        </package>
        <package name="sudo" arch="x86_64" version="1.7.2p7" release="2.3.1">
          <filename>sudo-1.7.2p7-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3d52ab695fb51ba3b31e68f1b6b9b738"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3798">
  <id>NetworkManager-kde4</id>
  <title>NetworkManager-kde4: Fix handling of BSSID</title>
  <release>openSUSE 11.3</release>
  <issued date="1294829686"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653514" id="653514" title="bug number 653514" type="bugzilla"/>
  </references>
  <description>This update adds fixes to handle BSSID settings correctly
(bko238046,bnc#653514,bnc#653515).
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager-kde4" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-kde4-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-kde4" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-kde4-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-kde4-lang" arch="noarch" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-kde4-lang-0.9.svn1057339-5.3.1.noarch.rpm</filename>
        </package>
        <package name="NetworkManager-kde4-libs" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-kde4-libs-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-kde4-libs" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-kde4-libs-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-kde4" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-novellvpn-kde4-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-kde4" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-novellvpn-kde4-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-openvpn-kde4" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-openvpn-kde4-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-openvpn-kde4" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-openvpn-kde4-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pptp-kde4" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-pptp-kde4-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-pptp-kde4" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-pptp-kde4-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-vpnc-kde4" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-vpnc-kde4-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-vpnc-kde4" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>NetworkManager-vpnc-kde4-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="plasmoid-networkmanagement" arch="i586" version="0.9.svn1057339" release="5.3.1">
          <filename>plasmoid-networkmanagement-0.9.svn1057339-5.3.1.i586.rpm</filename>
        </package>
        <package name="plasmoid-networkmanagement" arch="x86_64" version="0.9.svn1057339" release="5.3.1">
          <filename>plasmoid-networkmanagement-0.9.svn1057339-5.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5201379a7c3f327366f27f0de332aad0"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3827">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk: security update for JNLPSecurityManager</title>
  <release>openSUSE 11.3</release>
  <issued date="1295360423"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=664298" id="664298" title="bug number 664298" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=635365" id="635365" title="bug number 635365" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4351" id="CVE-2010-4351" title="CVE-2010-4351" type="cve"/>
  </references>
  <description>This update of java-1_6_0-openjdk improves the return value
handling of JNLPSecurityManager. Prior to this update the
JNLPSecurityManager silently returns in some cases when a
permission was denied. (CVE-2010-4351) Additionally the
java path was fixed to make java work with firefox again.
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.4-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.4-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.4-1.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.4-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.4-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.4-1.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.4-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.4-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b20.1.9.4" release="1.2.1">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.4-1.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ba141df885f3aefe25c8b888b999fc26"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3829">
  <id>libcollection-devel</id>
  <title>sssd: local denial of service (CVE-2010-4341)</title>
  <release>openSUSE 11.3</release>
  <issued date="1295424284"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660481" id="660481" title="bug number 660481" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4341" id="CVE-2010-4341" title="CVE-2010-4341" type="cve"/>
  </references>
  <description>This update fixes a local denial-of-service attack that
stops other users from logging in. The bug existed in the
pam_parse_in_data_v2() function. (CVE-2010-4341: CVSS v2
Base Score: 2.1)
</description>
  <pkglist>
    <collection>
        <package name="libcollection-devel" arch="i586" version="0.4.0" release="2.3.1">
          <filename>libcollection-devel-0.4.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="libcollection-devel" arch="x86_64" version="0.4.0" release="2.3.1">
          <filename>libcollection-devel-0.4.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcollection1" arch="i586" version="0.4.0" release="2.3.1">
          <filename>libcollection1-0.4.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="libcollection1" arch="x86_64" version="0.4.0" release="2.3.1">
          <filename>libcollection1-0.4.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdhash-devel" arch="i586" version="0.4.0" release="2.3.1">
          <filename>libdhash-devel-0.4.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="libdhash-devel" arch="x86_64" version="0.4.0" release="2.3.1">
          <filename>libdhash-devel-0.4.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdhash1" arch="i586" version="0.4.0" release="2.3.1">
          <filename>libdhash1-0.4.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="libdhash1" arch="x86_64" version="0.4.0" release="2.3.1">
          <filename>libdhash1-0.4.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libini_config-devel" arch="i586" version="0.4.0" release="2.3.1">
          <filename>libini_config-devel-0.4.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="libini_config-devel" arch="x86_64" version="0.4.0" release="2.3.1">
          <filename>libini_config-devel-0.4.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libini_config1" arch="i586" version="0.4.0" release="2.3.1">
          <filename>libini_config1-0.4.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="libini_config1" arch="x86_64" version="0.4.0" release="2.3.1">
          <filename>libini_config1-0.4.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-sssd-config" arch="i586" version="1.1.0" release="2.3.1">
          <filename>python-sssd-config-1.1.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="python-sssd-config" arch="x86_64" version="1.1.0" release="2.3.1">
          <filename>python-sssd-config-1.1.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" arch="i586" version="1.1.0" release="2.3.1">
          <filename>sssd-1.1.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="sssd" arch="x86_64" version="1.1.0" release="2.3.1">
          <filename>sssd-1.1.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-32bit" arch="x86_64" version="1.1.0" release="2.3.1">
          <filename>sssd-32bit-1.1.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ipa-provider" arch="i586" version="1.1.0" release="2.3.1">
          <filename>sssd-ipa-provider-1.1.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="sssd-ipa-provider" arch="x86_64" version="1.1.0" release="2.3.1">
          <filename>sssd-ipa-provider-1.1.0-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-tools" arch="i586" version="1.1.0" release="2.3.1">
          <filename>sssd-tools-1.1.0-2.3.1.i586.rpm</filename>
        </package>
        <package name="sssd-tools" arch="x86_64" version="1.1.0" release="2.3.1">
          <filename>sssd-tools-1.1.0-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b2e32dc284341acc0d3756068c0ef366"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3806">
  <id>perl</id>
  <title>perl: fixed multiple header injection problems in CGI module (CVE-2010-2761, CVE-2010-4410,CVE-2010-4411).</title>
  <release>openSUSE 11.3</release>
  <issued date="1294855637"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657343" id="657343" title="bug number 657343" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3172" id="CVE-2010-3172" title="CVE-2010-3172" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2761" id="CVE-2010-2761" title="CVE-2010-2761" type="cve"/>
  </references>
  <description>Multiple header injection problems in the CGI module of
perl have been fixed. They allowed to inject HTTP headers
in responses. CVE-2010-2761, CVE-2010-4410 and
CVE-2010-4411 have been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="perl" arch="i586" version="5.12.1" release="2.3.1">
          <filename>perl-5.12.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="perl" arch="x86_64" version="5.12.1" release="2.3.1">
          <filename>perl-5.12.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-32bit" arch="x86_64" version="5.12.1" release="2.3.1">
          <filename>perl-32bit-5.12.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" arch="i586" version="5.12.1" release="2.3.1">
          <filename>perl-base-5.12.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="perl-base" arch="x86_64" version="5.12.1" release="2.3.1">
          <filename>perl-base-5.12.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base-32bit" arch="x86_64" version="5.12.1" release="2.3.1">
          <filename>perl-base-32bit-5.12.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-doc" arch="noarch" version="5.12.1" release="2.3.1">
          <filename>perl-doc-5.12.1-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d2e3cacc14a39d5202e042866b684be5"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3837">
  <id>perl-Mail-SpamAssassin</id>
  <title>spamassassin: Update configuration enhancements</title>
  <release>openSUSE 11.3</release>
  <issued date="1295508880"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650645" id="650645" title="bug number 650645" type="bugzilla"/>
  </references>
  <description>This update adds a daily cron job run for calling
sa-update. In addition, it removes a warning in spamd
(bnc#650645)
</description>
  <pkglist>
    <collection>
        <package name="perl-Mail-SpamAssassin" arch="i586" version="3.3.1" release="3.3.1">
          <filename>perl-Mail-SpamAssassin-3.3.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="perl-Mail-SpamAssassin" arch="x86_64" version="3.3.1" release="3.3.1">
          <filename>perl-Mail-SpamAssassin-3.3.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Mail-SpamAssassin-Plugin-iXhash" arch="i586" version="1.5.5" release="3.3.1">
          <filename>perl-Mail-SpamAssassin-Plugin-iXhash-1.5.5-3.3.1.i586.rpm</filename>
        </package>
        <package name="perl-Mail-SpamAssassin-Plugin-iXhash" arch="x86_64" version="1.5.5" release="3.3.1">
          <filename>perl-Mail-SpamAssassin-Plugin-iXhash-1.5.5-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="spamassassin" arch="i586" version="3.3.1" release="3.3.1">
          <filename>spamassassin-3.3.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="spamassassin" arch="x86_64" version="3.3.1" release="3.3.1">
          <filename>spamassassin-3.3.1-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ec5fdd1017f5cb38e3fe2c7e7e66d273"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3814">
  <id>hplip</id>
  <title>hplip security update (CVE-2010-4267)</title>
  <release>openSUSE 11.3</release>
  <issued date="1295258916"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=336658" id="336658" title="bug number 336658" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4267" id="CVE-2010-4267" title="CVE-2010-4267" type="cve"/>
  </references>
  <description>Specially crafted SNMP replies could cause a buffer
overflow in hplip's sane backend (CVE-2010-4267).
</description>
  <pkglist>
    <collection>
        <package name="hplip" arch="i586" version="3.10.2" release="2.3.1">
          <filename>hplip-3.10.2-2.3.1.i586.rpm</filename>
        </package>
        <package name="hplip" arch="x86_64" version="3.10.2" release="2.3.1">
          <filename>hplip-3.10.2-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="hplip-hpijs" arch="i586" version="3.10.2" release="2.3.1">
          <filename>hplip-hpijs-3.10.2-2.3.1.i586.rpm</filename>
        </package>
        <package name="hplip-hpijs" arch="x86_64" version="3.10.2" release="2.3.1">
          <filename>hplip-hpijs-3.10.2-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="05212b3cb8da98c3c53cdc485be03b59"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3848">
  <id>evolution-tracker</id>
  <title>tracker: Plug file descriptor leaks. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1295624840"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617425" id="617425" title="bug number 617425" type="bugzilla"/>
  </references>
  <description>Due to leaks in the gstreamer and xmp extractors in
tracker, resources were not being appropriately freed. This
update fixes this problem.
</description>
  <pkglist>
    <collection>
        <package name="evolution-tracker" arch="i586" version="0.8.5" release="3.5.1">
          <filename>evolution-tracker-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="evolution-tracker" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>evolution-tracker-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libtracker-client-0_8-0" arch="i586" version="0.8.5" release="3.5.1">
          <filename>libtracker-client-0_8-0-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="libtracker-client-0_8-0" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>libtracker-client-0_8-0-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libtracker-extract-0_8-0" arch="i586" version="0.8.5" release="3.5.1">
          <filename>libtracker-extract-0_8-0-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="libtracker-extract-0_8-0" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>libtracker-extract-0_8-0-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libtracker-miner-0_8-0" arch="i586" version="0.8.5" release="3.5.1">
          <filename>libtracker-miner-0_8-0-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="libtracker-miner-0_8-0" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>libtracker-miner-0_8-0-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="nautilus-tracker" arch="i586" version="0.8.5" release="3.5.1">
          <filename>nautilus-tracker-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="nautilus-tracker" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>nautilus-tracker-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="tracker" arch="i586" version="0.8.5" release="3.5.1">
          <filename>tracker-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="tracker" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>tracker-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-applet" arch="i586" version="0.8.5" release="3.5.1">
          <filename>tracker-applet-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="tracker-applet" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>tracker-applet-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-devel" arch="i586" version="0.8.5" release="3.5.1">
          <filename>tracker-devel-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="tracker-devel" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>tracker-devel-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-gui" arch="i586" version="0.8.5" release="3.5.1">
          <filename>tracker-gui-0.8.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="tracker-gui" arch="x86_64" version="0.8.5" release="3.5.1">
          <filename>tracker-gui-0.8.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="tracker-lang" arch="noarch" version="0.8.5" release="3.5.1">
          <filename>tracker-lang-0.8.5-3.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2c1ad898579d3c9c0e8774e37f8e9908"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3884">
  <id>exiv2</id>
  <title>exiv2: Fix crash on reading some files</title>
  <release>openSUSE 11.3</release>
  <issued date="1296207871"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661016" id="661016" title="bug number 661016" type="bugzilla"/>
  </references>
  <description>This update provides a crash fix for opening certain
frequently occuring crashes when opening exif image
files(bnc#661016).
</description>
  <pkglist>
    <collection>
        <package name="exiv2" arch="i586" version="0.19" release="5.3.1">
          <filename>exiv2-0.19-5.3.1.i586.rpm</filename>
        </package>
        <package name="exiv2" arch="x86_64" version="0.19" release="5.3.1">
          <filename>exiv2-0.19-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="exiv2-lang" arch="noarch" version="0.19" release="5.3.1">
          <filename>exiv2-lang-0.19-5.3.1.noarch.rpm</filename>
        </package>
        <package name="libexiv2-6" arch="i586" version="0.19" release="5.3.1">
          <filename>libexiv2-6-0.19-5.3.1.i586.rpm</filename>
        </package>
        <package name="libexiv2-6" arch="x86_64" version="0.19" release="5.3.1">
          <filename>libexiv2-6-0.19-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libexiv2-6-32bit" arch="x86_64" version="0.19" release="5.3.1">
          <filename>libexiv2-6-32bit-0.19-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libexiv2-devel" arch="i586" version="0.19" release="5.3.1">
          <filename>libexiv2-devel-0.19-5.3.1.i586.rpm</filename>
        </package>
        <package name="libexiv2-devel" arch="x86_64" version="0.19" release="5.3.1">
          <filename>libexiv2-devel-0.19-5.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2152d89e75df9a00581d836cf42d421a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3849">
  <id>tomcat6</id>
  <title>tomcat6: fixing a XSS vulnerability (CVE-2010-4172)</title>
  <release>openSUSE 11.3</release>
  <issued date="1295369444"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655440" id="655440" title="bug number 655440" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4172" id="CVE-2010-4172" title="CVE-2010-4172" type="cve"/>
  </references>
  <description>This update fixes a cross-site scripting vulnerability that
affects the session list screen. This can be used to steal
session cookies because tomcat 6 does not use the httpOnly
flag for its cookies. (CVE-2010-4172)
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-admin-webapps-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-docs-webapp-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-el-1_0-api" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-el-1_0-api-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-javadoc-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-jsp-2_1-api-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-lib-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-servlet-2_5-api-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.24" release="5.8.2">
          <filename>tomcat6-webapps-6.0.24-5.8.2.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="79b2991fe1ea88aeb8b543d450fe3d3b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3872">
  <id>perl-CGI-Simple</id>
  <title>perl-CGI-Simple: fix crlf injection (CVE-2010-4410, CVE-2010-4411)</title>
  <release>openSUSE 11.3</release>
  <issued date="1296172015"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=663396" id="663396" title="bug number 663396" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4411" id="CVE-2010-4411" title="CVE-2010-4411" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4410" id="CVE-2010-4410" title="CVE-2010-4410" type="cve"/>
  </references>
  <description>The following vulnerabilities have been fixed in
perl-CGI-Simple: CVE-2010-4410 - crlf injection
CVE-2010-4411 - incomplete fix for crlf injection
</description>
  <pkglist>
    <collection>
        <package name="perl-CGI-Simple" arch="i586" version="1.113" release="0.3.1">
          <filename>perl-CGI-Simple-1.113-0.3.1.i586.rpm</filename>
        </package>
        <package name="perl-CGI-Simple" arch="x86_64" version="1.113" release="0.3.1">
          <filename>perl-CGI-Simple-1.113-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="260c0b71ac7ef40915d2ffc9546875fc"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3886">
  <id>akregator</id>
  <title>kdepim4: Update to 4.4.9</title>
  <release>openSUSE 11.3</release>
  <issued date="1296215199"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651155" id="651155" title="bug number 651155" type="bugzilla"/>
  </references>
  <description>This update provides an update of kdepim to 4.4.9,
improving compatibility with KDE 4.6 and providing many
stability fixes and enhancements.
</description>
  <pkglist>
    <collection>
        <package name="akregator" arch="i586" version="4.4.9" release="2.3.1">
          <filename>akregator-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="akregator" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>akregator-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="blogilo" arch="i586" version="4.4.9" release="2.3.1">
          <filename>blogilo-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="blogilo" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>blogilo-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kaddressbook" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kaddressbook-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kaddressbook" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kaddressbook-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kalarm" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kalarm-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kalarm" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kalarm-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kdepim4-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kdepim4" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kdepim4-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-devel" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kdepim4-devel-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-devel" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kdepim4-devel-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-runtime" arch="i586" version="4.4.9" release="1.3.1">
          <filename>kdepim4-runtime-4.4.9-1.3.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-runtime" arch="x86_64" version="4.4.9" release="1.3.1">
          <filename>kdepim4-runtime-4.4.9-1.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-runtime-devel" arch="i586" version="4.4.9" release="1.3.1">
          <filename>kdepim4-runtime-devel-4.4.9-1.3.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-runtime-devel" arch="x86_64" version="4.4.9" release="1.3.1">
          <filename>kdepim4-runtime-devel-4.4.9-1.3.1.x86_64.rpm</filename>
        </package>
        <package name="kdepim4-wizards" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kdepim4-wizards-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kdepim4-wizards" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kdepim4-wizards-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kjots" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kjots-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kjots" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kjots-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kmail" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kmail-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kmail" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kmail-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="knode" arch="i586" version="4.4.9" release="2.3.1">
          <filename>knode-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="knode" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>knode-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="knotes" arch="i586" version="4.4.9" release="2.3.1">
          <filename>knotes-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="knotes" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>knotes-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="kontact" arch="i586" version="4.4.9" release="2.3.1">
          <filename>kontact-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="kontact" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>kontact-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="korganizer" arch="i586" version="4.4.9" release="2.3.1">
          <filename>korganizer-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="korganizer" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>korganizer-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="ktimetracker" arch="i586" version="4.4.9" release="2.3.1">
          <filename>ktimetracker-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="ktimetracker" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>ktimetracker-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepim4" arch="i586" version="4.4.9" release="2.3.1">
          <filename>libkdepim4-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="libkdepim4" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>libkdepim4-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libkdepim4-devel" arch="i586" version="4.4.9" release="2.3.1">
          <filename>libkdepim4-devel-4.4.9-2.3.1.i586.rpm</filename>
        </package>
        <package name="libkdepim4-devel" arch="x86_64" version="4.4.9" release="2.3.1">
          <filename>libkdepim4-devel-4.4.9-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="17ad2b5e58935e14e8312c38d352f237"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3896">
  <id>calibre</id>
  <title>calibre: security update fixing a XSS issue</title>
  <release>openSUSE 11.3</release>
  <issued date="1296473518"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=664505" id="664505" title="bug number 664505" type="bugzilla"/>
  </references>
  <description>This update of calibre fixes a cross-site scripting (XSS)
and a file disclosure vulnerability.
</description>
  <pkglist>
    <collection>
        <package name="calibre" arch="i586" version="0.6.53" release="3.3.1">
          <filename>calibre-0.6.53-3.3.1.i586.rpm</filename>
        </package>
        <package name="calibre" arch="x86_64" version="0.6.53" release="3.3.1">
          <filename>calibre-0.6.53-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ff7eee298364416e6718096565b357b2"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3770">
  <id>libpcsclite1</id>
  <title>Fixing integer and buffer overflow in pcsc-ccid and pcsc-lite (CVE-2010-4530,CVE-2010-4531).</title>
  <release>openSUSE 11.3</release>
  <issued date="1294222614"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661000" id="661000" title="bug number 661000" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4531" id="CVE-2010-4531" title="CVE-2010-4531" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4530" id="CVE-2010-4530" title="CVE-2010-4530" type="cve"/>
  </references>
  <description>An integer overflow in pcsc-ccid and a buffer overflow in
pcsc-lite while handling smart card responses have been
fixed. CVE-2010-4530 and CVE-2010-4531 have been assigned
to these issues.
</description>
  <pkglist>
    <collection>
        <package name="libpcsclite1" arch="i586" version="1.5.5" release="7.3.1">
          <filename>libpcsclite1-1.5.5-7.3.1.i586.rpm</filename>
        </package>
        <package name="libpcsclite1" arch="x86_64" version="1.5.5" release="7.3.1">
          <filename>libpcsclite1-1.5.5-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpcsclite1-32bit" arch="x86_64" version="1.5.5" release="7.3.1">
          <filename>libpcsclite1-32bit-1.5.5-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-ccid" arch="i586" version="1.3.11" release="6.3.1">
          <filename>pcsc-ccid-1.3.11-6.3.1.i586.rpm</filename>
        </package>
        <package name="pcsc-ccid" arch="x86_64" version="1.3.11" release="6.3.1">
          <filename>pcsc-ccid-1.3.11-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-lite" arch="i586" version="1.5.5" release="7.3.1">
          <filename>pcsc-lite-1.5.5-7.3.1.i586.rpm</filename>
        </package>
        <package name="pcsc-lite" arch="x86_64" version="1.5.5" release="7.3.1">
          <filename>pcsc-lite-1.5.5-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="pcsc-lite-devel" arch="i586" version="1.5.5" release="7.3.1">
          <filename>pcsc-lite-devel-1.5.5-7.3.1.i586.rpm</filename>
        </package>
        <package name="pcsc-lite-devel" arch="x86_64" version="1.5.5" release="7.3.1">
          <filename>pcsc-lite-devel-1.5.5-7.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3f3e518922136ec6050f3f4c4bae37b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3913">
  <id>dhcp</id>
  <title>dhcp: fixing DoS via DHCPv6 decline messages (CVE-2011-0413)</title>
  <release>openSUSE 11.3</release>
  <issued date="1296754693"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667655" id="667655" title="bug number 667655" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0413" id="CVE-2011-0413" title="CVE-2011-0413" type="cve"/>
  </references>
  <description>A Denial of Service vulnerability while processing DHCPv6
decline messages hass been fixed. CVE-2011-0413 has been
assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="dhcp" arch="i586" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-4.1.2.ESV.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="dhcp" arch="x86_64" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-4.1.2.ESV.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-client" arch="i586" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-client-4.1.2.ESV.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="dhcp-client" arch="x86_64" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-client-4.1.2.ESV.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="i586" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-devel-4.1.2.ESV.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="x86_64" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-devel-4.1.2.ESV.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="i586" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-doc-4.1.2.ESV.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="x86_64" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-doc-4.1.2.ESV.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="i586" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-relay-4.1.2.ESV.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="x86_64" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-relay-4.1.2.ESV.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-server" arch="i586" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-server-4.1.2.ESV.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="dhcp-server" arch="x86_64" version="4.1.2.ESV.1" release="0.2.1">
          <filename>dhcp-server-4.1.2.ESV.1-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="97169f79203f773144c3a819d72520d3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3919">
  <id>opera</id>
  <title>Opera 11.01 fixes several critical security bugs</title>
  <release>openSUSE 11.3</release>
  <issued date="1296835040"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667639" id="667639" title="bug number 667639" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0681" id="CVE-2011-0681" title="CVE-2011-0681" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0682" id="CVE-2011-0682" title="CVE-2011-0682" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0683" id="CVE-2011-0683" title="CVE-2011-0683" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0684" id="CVE-2011-0684" title="CVE-2011-0684" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0685" id="CVE-2011-0685" title="CVE-2011-0685" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0686" id="CVE-2011-0686" title="CVE-2011-0686" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0687" id="CVE-2011-0687" title="CVE-2011-0687" type="cve"/>
  </references>
  <description>Opera 11.01 fixes several critical security bugs:
- CVE-2011-0681: CVSS v2 Base Score: 4.3 (MEDIUM)
  (AV:N/AC:M/Au:N/C:N/I:P/A:N): Other (CWE-Other)
- CVE-2011-0682: CVSS v2 Base Score: 9.3 (HIGH)
  (AV:N/AC:M/Au:N/C:C/I:C/A:C): Buffer Errors (CWE-119)
- CVE-2011-0683: CVSS v2 Base Score: 4.3 (MEDIUM)
  (AV:N/AC:M/Au:N/C:N/I:P/A:N): Other (CWE-Other)
- CVE-2011-0684: CVSS v2 Base Score: 7.8 (HIGH)
  (AV:N/AC:L/Au:N/C:C/I:N/A:N): Input Validation (CWE-20)
- CVE-2011-0685: CVSS v2 Base Score: 3.6 (LOW)
  (AV:L/AC:L/Au:N/C:P/I:P/A:N): Input Validation (CWE-20)
- CVE-2011-0686: CVSS v2 Base Score: 5.0 (MEDIUM)
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information
  (CWE-noinfo)
- CVE-2011-0687: CVSS v2 Base Score: 4.3 (MEDIUM)
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20)
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="11.01" release="1.2.1">
          <filename>opera-11.01-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="11.01" release="1.2.1">
          <filename>opera-11.01-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="opera-gtk" arch="i586" version="11.01" release="1.2.1">
          <filename>opera-gtk-11.01-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera-gtk" arch="x86_64" version="11.01" release="1.2.1">
          <filename>opera-gtk-11.01-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="opera-kde4" arch="i586" version="11.01" release="1.2.1">
          <filename>opera-kde4-11.01-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera-kde4" arch="x86_64" version="11.01" release="1.2.1">
          <filename>opera-kde4-11.01-1.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="22ee7e63f03a7972c8a11cec72942dde"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3918">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1296829094"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667313" id="667313" title="bug number 667313" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0025" id="CVE-2011-0025" title="CVE-2011-0025" type="cve"/>
  </references>
  <description>This update improves the signature handling of jar-files.
(CVE-2011-0025)
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.5-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.5-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.5-1.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.5-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.5-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.5-1.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.5-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.5-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b20.1.9.5" release="1.2.1">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.5-1.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f3f0c7e1fdbf64703d39ba1dd52c417e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3922">
  <id>exim</id>
  <title>exim: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297098823"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=668599" id="668599" title="bug number 668599" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0017" id="CVE-2011-0017" title="CVE-2011-0017" type="cve"/>
  </references>
  <description>Exim was updated to verify the return value of the
setuid/setgid calls now. (CVE-2011-0017: CVSS v2 Base
Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C): Link Following
(CWE-59))
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.5.1">
          <filename>exim-4.71-4.5.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.5.1">
          <filename>exim-4.71-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.5.1">
          <filename>eximon-4.71-4.5.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.5.1">
          <filename>eximon-4.71-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.5.1">
          <filename>eximstats-html-4.71-4.5.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.5.1">
          <filename>eximstats-html-4.71-4.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="20b5fb97afe6af85af16d8d8ccb6e41b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3893">
  <id>glib2</id>
  <title>glib2: Fixed file monitoring over NFS mounts</title>
  <release>openSUSE 11.3</release>
  <issued date="1296235380"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667260" id="667260" title="bug number 667260" type="bugzilla"/>
  </references>
  <description>This update fixes GNOME file monitoring over NFS:
- bnc#667260: No file monitoring over NFS mounts
</description>
  <pkglist>
    <collection>
        <package name="glib2" arch="i586" version="2.24.1" release="3.3.1">
          <filename>glib2-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="glib2" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>glib2-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-branding-upstream" arch="i586" version="2.24.1" release="3.3.1">
          <filename>glib2-branding-upstream-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="glib2-branding-upstream" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>glib2-branding-upstream-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-devel" arch="i586" version="2.24.1" release="3.3.1">
          <filename>glib2-devel-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="glib2-devel" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>glib2-devel-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-lang" arch="noarch" version="2.24.1" release="3.3.1">
          <filename>glib2-lang-2.24.1-3.3.1.noarch.rpm</filename>
        </package>
        <package name="libgio-2_0-0" arch="i586" version="2.24.1" release="3.3.1">
          <filename>libgio-2_0-0-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="libgio-2_0-0" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgio-2_0-0-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-32bit" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgio-2_0-0-32bit-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-fam" arch="i586" version="2.24.1" release="3.3.1">
          <filename>libgio-fam-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="libgio-fam" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgio-fam-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" arch="i586" version="2.24.1" release="3.3.1">
          <filename>libglib-2_0-0-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="libglib-2_0-0" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libglib-2_0-0-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-32bit" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libglib-2_0-0-32bit-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" arch="i586" version="2.24.1" release="3.3.1">
          <filename>libgmodule-2_0-0-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgmodule-2_0-0-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-32bit" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgmodule-2_0-0-32bit-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" arch="i586" version="2.24.1" release="3.3.1">
          <filename>libgobject-2_0-0-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgobject-2_0-0-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-32bit" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgobject-2_0-0-32bit-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgthread-2_0-0" arch="i586" version="2.24.1" release="3.3.1">
          <filename>libgthread-2_0-0-2.24.1-3.3.1.i586.rpm</filename>
        </package>
        <package name="libgthread-2_0-0" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgthread-2_0-0-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgthread-2_0-0-32bit" arch="x86_64" version="2.24.1" release="3.3.1">
          <filename>libgthread-2_0-0-32bit-2.24.1-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f05f70675fca4fd9695f4d5a082f98dc"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3895">
  <id>samba</id>
  <title>samba: Collective Fixes update</title>
  <release>openSUSE 11.3</release>
  <issued date="1296430349"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=656112" id="656112" title="bug number 656112" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=602418" id="602418" title="bug number 602418" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606304" id="606304" title="bug number 606304" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625936" id="625936" title="bug number 625936" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637755" id="637755" title="bug number 637755" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640870" id="640870" title="bug number 640870" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654719" id="654719" title="bug number 654719" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661842" id="661842" title="bug number 661842" type="bugzilla"/>
  </references>
  <description>This collective update for samba provides the following
fixes:

- Remove pcap_cache_loaded asserts from (re)load_printers.
  pcap_cache_loaded() returns false if the pcap cache
  contains no printer entries. correct call ordering is
  already enforced. (bso#7836); (bnc#625936).   
- Fix error paths in cups_async_callback(), an empty cups
  printer list should    not be treated as an error;
  (bnc#661842).
- Abide by printcap cache time, reload parent smbd pcap
  cache on expiry;    (bso#7836); (bnc#625936).
- Fix race in cups async printer services reload;
  (bso#7836); (bnc#625936).
- Fix Dolphin SMB share IO with SMB signing enabled;
  (bso#7791); (bnc#656112).
- Reduce unnecessary ldap round trips and eliminate invalid
  DN messages; (bnc#654719).
- Fix smbd crash with CUPS printers and no [printers] share
  defined; (bso#7297); (bnc#637755).
- Fix printing from 64-bit windows clients; (bso#6888);
  (bnc#640870).
- Use cached ntlm password in libsmbclient.  Prevent
  lockouts when kerberos tickets are lost; (bnc#602418);
  (bnc#606304).
</description>
  <pkglist>
    <collection>
        <package name="ldapsmb" arch="i586" version="1.34b" release="5.3.1">
          <filename>ldapsmb-1.34b-5.3.1.i586.rpm</filename>
        </package>
        <package name="ldapsmb" arch="x86_64" version="1.34b" release="5.3.1">
          <filename>ldapsmb-1.34b-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libldb-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libldb-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libldb-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libldb-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libldb0" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libldb0-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libldb0" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libldb0-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libnetapi-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libnetapi-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libnetapi0" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libnetapi0-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libnetapi0" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libnetapi0-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libsmbclient-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libsmbclient-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libsmbclient0-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libsmbclient0-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0-32bit" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libsmbclient0-32bit-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libsmbsharemodes-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libsmbsharemodes-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libsmbsharemodes0-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libsmbsharemodes0-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libtalloc-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtalloc-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtalloc2" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libtalloc2-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libtalloc2" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtalloc2-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libtdb-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtdb-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtdb1" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libtdb1-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libtdb1" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtdb1-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtdb1-32bit" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtdb1-32bit-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libtevent-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtevent-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtevent0" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libtevent0-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libtevent0" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libtevent0-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libwbclient-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libwbclient-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0" arch="i586" version="3.5.4" release="5.3.1">
          <filename>libwbclient0-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="libwbclient0" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libwbclient0-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0-32bit" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>libwbclient0-32bit-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba" arch="i586" version="3.5.4" release="5.3.1">
          <filename>samba-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="samba" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-32bit" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-32bit-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client" arch="i586" version="3.5.4" release="5.3.1">
          <filename>samba-client-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="samba-client" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-client-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-32bit" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-client-32bit-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-devel" arch="i586" version="3.5.4" release="5.3.1">
          <filename>samba-devel-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="samba-devel" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-devel-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-doc" arch="noarch" version="3.5.4" release="5.3.1">
          <filename>samba-doc-3.5.4-5.3.1.noarch.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="i586" version="3.5.4" release="5.3.1">
          <filename>samba-krb-printing-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-krb-printing-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind" arch="i586" version="3.5.4" release="5.3.1">
          <filename>samba-winbind-3.5.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="samba-winbind" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-winbind-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind-32bit" arch="x86_64" version="3.5.4" release="5.3.1">
          <filename>samba-winbind-32bit-3.5.4-5.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bd862adf1877d983d06f3926ea8d6cfa"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3925">
  <id>flash-player</id>
  <title>flash-player: Security update to 10.2.152.26 release</title>
  <release>openSUSE 11.3</release>
  <issued date="1297257712"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=670531" id="670531" title="bug number 670531" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0558" id="CVE-2011-0558" title="CVE-2011-0558" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0559" id="CVE-2011-0559" title="CVE-2011-0559" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0560" id="CVE-2011-0560" title="CVE-2011-0560" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0561" id="CVE-2011-0561" title="CVE-2011-0561" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0571" id="CVE-2011-0571" title="CVE-2011-0571" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0572" id="CVE-2011-0572" title="CVE-2011-0572" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0573" id="CVE-2011-0573" title="CVE-2011-0573" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0574" id="CVE-2011-0574" title="CVE-2011-0574" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0575" id="CVE-2011-0575" title="CVE-2011-0575" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0577" id="CVE-2011-0577" title="CVE-2011-0577" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0578" id="CVE-2011-0578" title="CVE-2011-0578" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0607" id="CVE-2011-0607" title="CVE-2011-0607" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0608" id="CVE-2011-0608" title="CVE-2011-0608" type="cve"/>
  </references>
  <description>The Adobe Flash Player was updated to the 10.2.152.26
release, fixing lots of bugs and security issues. The
update is rated critical by Adobe, although details have
not been published.

CVEs addressed: CVE-2011-0558, CVE-2011-0559,
CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572,
CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577,
CVE-2011-0578, CVE-2011-0607, CVE-2011-0608
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.2.152.26" release="0.2.1">
          <filename>flash-player-10.2.152.26-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="89ed397dfe1689f37817bd0e1028920f"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3942">
  <id>krb5</id>
  <title>krb5: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297252716"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=663619" id="663619" title="bug number 663619" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612890" id="612890" title="bug number 612890" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0281" id="CVE-2011-0281" title="CVE-2011-0281" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0282" id="CVE-2011-0282" title="CVE-2011-0282" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4022" id="CVE-2010-4022" title="CVE-2010-4022" type="cve"/>
  </references>
  <description>Multiple KDC DoS vulnerabilities if used with LDAP backends
have been fixed in krb5. CVE-2011-0281 and CVE-2011-0282
have been assigned. Additionally a DoS vulnerability in
kpropd has been fixed. CVE-2010-4022 has been assigned to
this issue.
</description>
  <pkglist>
    <collection>
        <package name="krb5" arch="i586" version="1.8.1" release="5.5.1">
          <filename>krb5-1.8.1-5.5.1.i586.rpm</filename>
        </package>
        <package name="krb5" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-32bit" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-32bit-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-client" arch="i586" version="1.8.1" release="5.5.1">
          <filename>krb5-client-1.8.1-5.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-client" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-client-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel" arch="i586" version="1.8.1" release="5.5.1">
          <filename>krb5-devel-1.8.1-5.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-devel" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-devel-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel-32bit" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-devel-32bit-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="i586" version="1.8.1" release="5.5.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="i586" version="1.8.1" release="5.5.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" arch="i586" version="1.8.1" release="5.5.1">
          <filename>krb5-server-1.8.1-5.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-server" arch="x86_64" version="1.8.1" release="5.5.1">
          <filename>krb5-server-1.8.1-5.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1092eedde0f92f110cb3f946bae3efbe"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3832">
  <id>git</id>
  <title>Fixing two git vulnerabilities (CVE-2010-3906, CVE-2010-2542).</title>
  <release>openSUSE 11.3</release>
  <issued date="1295259813"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659281" id="659281" title="bug number 659281" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624586" id="624586" title="bug number 624586" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3906" id="CVE-2010-3906" title="CVE-2010-3906" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2542" id="CVE-2010-2542" title="CVE-2010-2542" type="cve"/>
  </references>
  <description>This update fixes two vulnerabilities:

  XSS vulnerability in gitweb; a remote attacker could
craft an URL such that arbitrary content would be inserted
to the generated web page.

  Stack overflow vulnerability that can lead to arbitrary
code execution if user runs any git command on a specially
crafted git working copy.

  Security Issue references:
  -
[CVE-2010-3906](http://cve.mitre.org/cgi-bin/cvename.cgi?nam
    e=CVE-2010-3906) 
  -
[CVE-2010-2542](http://cve.mitre.org/cgi-bin/cvename.cgi?nam
    e=CVE-2010-2542)
</description>
  <pkglist>
    <collection>
        <package name="git" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-arch" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-arch-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-arch" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-arch-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-core-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-core" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-core-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-cvs" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-cvs-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-cvs" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-cvs-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-daemon" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-daemon-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-daemon" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-daemon-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-email" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-email-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-email" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-email-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-gui" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-gui-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-gui" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-gui-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-remote-helpers" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-remote-helpers-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-remote-helpers" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-remote-helpers-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-svn" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-svn-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-svn" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-svn-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="git-web" arch="i586" version="1.7.1" release="2.3.1">
          <filename>git-web-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="git-web" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>git-web-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gitk" arch="i586" version="1.7.1" release="2.3.1">
          <filename>gitk-1.7.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="gitk" arch="x86_64" version="1.7.1" release="2.3.1">
          <filename>gitk-1.7.1-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="531e6df1312ec14b8bf95c3fd1ddf5e3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3940">
  <id>opensuse-apparmor-quick_en-pdf</id>
  <title>opensuse-manuals_en: Online update for the openSUSE Start-Up and Reference Guide</title>
  <release>openSUSE 11.3</release>
  <issued date="1295277513"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661476" id="661476" title="bug number 661476" type="bugzilla"/>
  </references>
  <description>Collective update for the openSUSE manuals. It also adds
some new translations.
</description>
  <pkglist>
    <collection>
        <package name="opensuse-apparmor-quick_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-apparmor-quick_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-apps_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-apps_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-gnomequick_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-gnomequick_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-gnomeuser_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-gnomeuser_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-installquick_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-installquick_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdequick_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-kdequick_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-kdeuser_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-kdeuser_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_en" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-manuals_en-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_hu" arch="noarch" version="11.3" release="1.2.1">
          <filename>opensuse-manuals_hu-11.3-1.2.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_ja" arch="noarch" version="11.3" release="0.2.1">
          <filename>opensuse-manuals_ja-11.3-0.2.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-manuals_pt_BR" arch="noarch" version="11.3" release="0.2.1">
          <filename>opensuse-manuals_pt_BR-11.3-0.2.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-reference_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-reference_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-reference_hu-pdf" arch="noarch" version="11.3" release="1.2.1">
          <filename>opensuse-reference_hu-pdf-11.3-1.2.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-security_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-security_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
        <package name="opensuse-startup_en-pdf" arch="noarch" version="11.3" release="6.3.1">
          <filename>opensuse-startup_en-pdf-11.3-6.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="282b490a6339d926277a6ab7ab9cfcdf"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3983">
  <id>update-alternatives</id>
  <title>update-alternatives: This update fixes a database corruption that can occur after an openjdk update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297986328"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669716" id="669716" title="bug number 669716" type="bugzilla"/>
  </references>
  <description>openjdk update breaks Sun java alternative under some
circumstances. This ends in unusable java (both Sun and
openjdk). This update fixes the broken
/var/lib/rpm/alternatives/java and prevent from those
failures in the future.
</description>
  <pkglist>
    <collection>
        <package name="update-alternatives" arch="noarch" version="1.14.19" release="27.3.1">
          <filename>update-alternatives-1.14.19-27.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="361a47171782b23c172149e829c7fb5e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3959">
  <id>cpp45</id>
  <title>gcc45: Update to fix compilation issues of Mozilla Firefox 4.0</title>
  <release>openSUSE 11.3</release>
  <issued date="1297731910"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636118" id="636118" title="bug number 636118" type="bugzilla"/>
  </references>
  <description>This patch fixes a bug in gcc45 that leads to a
miscompilation of some Mozilla Firefox components, in
particular Sync.
</description>
  <pkglist>
    <collection>
        <package name="cpp45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>cpp45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="cpp45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>cpp45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-ada" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-ada-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45-ada" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-ada-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-ada-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-ada-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-c++" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-c++-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45-c++" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-c++-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-fortran" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-fortran-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45-fortran" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-fortran-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-fortran-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-fortran-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-info" arch="noarch" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-info-4.5.0_20100604-2.3.1.noarch.rpm</filename>
        </package>
        <package name="gcc45-locale" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-locale-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45-locale" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-locale-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-obj-c++" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-obj-c++-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45-obj-c++" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-obj-c++-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-objc" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-objc-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="gcc45-objc" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-objc-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="gcc45-objc-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>gcc45-objc-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libada45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libada45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libada45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libada45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libada45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libada45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libgcc45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgcc45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libgcc45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libgcc45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgfortran45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libgfortran45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgfortran45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libgfortran45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgfortran45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libgfortran45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgomp45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libgomp45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libgomp45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libgomp45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgomp45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libgomp45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libobjc45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libobjc45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libobjc45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libobjc45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libobjc45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libobjc45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++45" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libstdc++45" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++45-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++45-devel" arch="i586" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-devel-4.5.0_20100604-2.3.1.i586.rpm</filename>
        </package>
        <package name="libstdc++45-devel" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-devel-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++45-devel-32bit" arch="x86_64" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-devel-32bit-4.5.0_20100604-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++45-doc" arch="noarch" version="4.5.0_20100604" release="2.3.1">
          <filename>libstdc++45-doc-4.5.0_20100604-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dfa947ed26289f5461eec3fea1eeb3f3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3969">
  <id>java-1_6_0-sun</id>
  <title>java-1_6_0-sun: Sun Java 1.6 updated to update 24</title>
  <release>openSUSE 11.3</release>
  <issued date="1297902684"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672449" id="672449" title="bug number 672449" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4452" id="CVE-2010-4452" title="CVE-2010-4452" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4454" id="CVE-2010-4454" title="CVE-2010-4454" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4462" id="CVE-2010-4462" title="CVE-2010-4462" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4463" id="CVE-2010-4463" title="CVE-2010-4463" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4465" id="CVE-2010-4465" title="CVE-2010-4465" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4467" id="CVE-2010-4467" title="CVE-2010-4467" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4469" id="CVE-2010-4469" title="CVE-2010-4469" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4473" id="CVE-2010-4473" title="CVE-2010-4473" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4422" id="CVE-2010-4422" title="CVE-2010-4422" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4451" id="CVE-2010-4451" title="CVE-2010-4451" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4466" id="CVE-2010-4466" title="CVE-2010-4466" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4470" id="CVE-2010-4470" title="CVE-2010-4470" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4471" id="CVE-2010-4471" title="CVE-2010-4471" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476" id="CVE-2010-4476" title="CVE-2010-4476" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4447" id="CVE-2010-4447" title="CVE-2010-4447" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4475" id="CVE-2010-4475" title="CVE-2010-4475" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4468" id="CVE-2010-4468" title="CVE-2010-4468" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4450" id="CVE-2010-4450" title="CVE-2010-4450" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448" id="CVE-2010-4448" title="CVE-2010-4448" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4472" id="CVE-2010-4472" title="CVE-2010-4472" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4474" id="CVE-2010-4474" title="CVE-2010-4474" type="cve"/>
  </references>
  <description>Sun Java 1.6 was updated to Update 24 fixing various bugs
and security issues.

The update is rated critical by Sun.

Following CVEs were addressed: CVE-2010-4452
CVE-2010-4454        CVE-2010-4462    CVE-2010-4463
CVE-2010-4465 CVE-2010-4467    CVE-2010-4469 CVE-2010-4473
CVE-2010-4422    CVE-2010-4451        CVE-2010-4466
CVE-2010-4470 CVE-2010-4471 CVE-2010-4476
CVE-2010-4447        CVE-2010-4475    CVE-2010-4468
CVE-2010-4450 CVE-2010-4448    CVE-2010-4472 CVE-2010-4474
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u24-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u24-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u24-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u24-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u24-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u24-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u24-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u24-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u24-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u24-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u24-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u24" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u24-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="059adad9d8dc1602b3c896571bc10cc1"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="3982">
  <id>libunique-1_0-0</id>
  <title>libunique-1_0-0:  This update fixes a bug, causing multiple instances of application-browser and nautilus</title>
  <release>openSUSE 11.3</release>
  <issued date="1297986515"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640615" id="640615" title="bug number 640615" type="bugzilla"/>
  </references>
  <description>libunique is not working right; multiple
application-browser and nautilus instances are created.
Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="libunique-1_0-0" arch="i586" version="1.1.6" release="5.3.1">
          <filename>libunique-1_0-0-1.1.6-5.3.1.i586.rpm</filename>
        </package>
        <package name="libunique-1_0-0" arch="x86_64" version="1.1.6" release="5.3.1">
          <filename>libunique-1_0-0-1.1.6-5.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e9ec624b2168a52c0d050355dae2987c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4020">
  <id>bind</id>
  <title>bind: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298560705"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674431" id="674431" title="bug number 674431" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414" id="CVE-2011-0414" title="CVE-2011-0414" type="cve"/>
  </references>
  <description>This bind update fixes a remote denial of service
vulnerability that can be triggered using an IXFR or DDNS
update. (CVE-2011-0414: CVSS v2 Base Score: 7.1
(AV:N/AC:M/Au:N/C:N/I:N/A:C))
</description>
  <pkglist>
    <collection>
        <package name="bind" arch="i586" version="9.7.3" release="1.4.1">
          <filename>bind-9.7.3-1.4.1.i586.rpm</filename>
        </package>
        <package name="bind" arch="x86_64" version="9.7.3" release="1.4.1">
          <filename>bind-9.7.3-1.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="i586" version="9.7.3" release="1.4.1">
          <filename>bind-chrootenv-9.7.3-1.4.1.i586.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="x86_64" version="9.7.3" release="1.4.1">
          <filename>bind-chrootenv-9.7.3-1.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-devel" arch="i586" version="9.7.3" release="1.4.1">
          <filename>bind-devel-9.7.3-1.4.1.i586.rpm</filename>
        </package>
        <package name="bind-devel" arch="x86_64" version="9.7.3" release="1.4.1">
          <filename>bind-devel-9.7.3-1.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" arch="noarch" version="9.7.3" release="1.4.1">
          <filename>bind-doc-9.7.3-1.4.1.noarch.rpm</filename>
        </package>
        <package name="bind-libs" arch="i586" version="9.7.3" release="1.4.1">
          <filename>bind-libs-9.7.3-1.4.1.i586.rpm</filename>
        </package>
        <package name="bind-libs" arch="x86_64" version="9.7.3" release="1.4.1">
          <filename>bind-libs-9.7.3-1.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-libs-32bit" arch="x86_64" version="9.7.3" release="1.4.1">
          <filename>bind-libs-32bit-9.7.3-1.4.1.x86_64.rpm</filename>
        </package>
        <package name="bind-utils" arch="i586" version="9.7.3" release="1.4.1">
          <filename>bind-utils-9.7.3-1.4.1.i586.rpm</filename>
        </package>
        <package name="bind-utils" arch="x86_64" version="9.7.3" release="1.4.1">
          <filename>bind-utils-9.7.3-1.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0ac79a390b8c314a5c62e76f50c46d2b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3835">
  <id>libsvn_auth_gnome_keyring-1-0</id>
  <title>subversion: Fixing servercrash in SVNParentPath (CVE-2010-4539) and OOM bug (CVE-2010-4644)</title>
  <release>openSUSE 11.3</release>
  <issued date="1295450690"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662030" id="662030" title="bug number 662030" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4539" id="CVE-2010-4539" title="CVE-2010-4539" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4644" id="CVE-2010-4644" title="CVE-2010-4644" type="cve"/>
  </references>
  <description>The subversion server could be crashed by clients inside
SVNParentPath(). Additionally an Out Of Memory condition
via 'blame -g' has been fixed. CVE-2010-4539 and
CVE-2010-4644  have been assigned to these issues.
</description>
  <pkglist>
    <collection>
        <package name="libsvn_auth_gnome_keyring-1-0" arch="i586" version="1.6.9" release="4.5.1">
          <filename>libsvn_auth_gnome_keyring-1-0-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="libsvn_auth_gnome_keyring-1-0" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>libsvn_auth_gnome_keyring-1-0-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libsvn_auth_kwallet-1-0" arch="i586" version="1.6.9" release="4.5.1">
          <filename>libsvn_auth_kwallet-1-0-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="libsvn_auth_kwallet-1-0" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>libsvn_auth_kwallet-1-0-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-devel" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-devel-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion-devel" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-devel-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-perl" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-perl-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion-perl" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-perl-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-python" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-python-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion-python" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-python-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-ruby" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-ruby-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion-ruby" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-ruby-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-server" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-server-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion-server" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-server-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="subversion-tools" arch="i586" version="1.6.9" release="4.5.1">
          <filename>subversion-tools-1.6.9-4.5.1.i586.rpm</filename>
        </package>
        <package name="subversion-tools" arch="x86_64" version="1.6.9" release="4.5.1">
          <filename>subversion-tools-1.6.9-4.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="adbea70480ce6498af09c3437d107b65"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3788">
  <id>t1lib</id>
  <title>Fixing AFM font parser vulnerability in t1lib (CVE-2010-2642).</title>
  <release>openSUSE 11.3</release>
  <issued date="1294764225"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662411" id="662411" title="bug number 662411" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2642" id="CVE-2010-2642" title="CVE-2010-2642" type="cve"/>
  </references>
  <description>A heap overflow in the AFM font parser of DVI files has
been fixed in t1lib. CVE-2010-2642 has been assigned to
this issue.
</description>
  <pkglist>
    <collection>
        <package name="t1lib" arch="i586" version="5.1.2" release="6.3.1">
          <filename>t1lib-5.1.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="t1lib" arch="x86_64" version="5.1.2" release="6.3.1">
          <filename>t1lib-5.1.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="t1lib-devel" arch="i586" version="5.1.2" release="6.3.1">
          <filename>t1lib-devel-5.1.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="t1lib-devel" arch="x86_64" version="5.1.2" release="6.3.1">
          <filename>t1lib-devel-5.1.2-6.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="05603f3a64fc81196dd8aea9696233f0"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3945">
  <id>tomcat6</id>
  <title>tomcat6: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297436491"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669897" id="669897" title="bug number 669897" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669929" id="669929" title="bug number 669929" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669930" id="669930" title="bug number 669930" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3718" id="CVE-2010-3718" title="CVE-2010-3718" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0013" id="CVE-2011-0013" title="CVE-2011-0013" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0534" id="CVE-2011-0534" title="CVE-2011-0534" type="cve"/>
  </references>
  <description>This tomcat6 update fixes:
- CVE-2010-3718: CVSS v2 Base Score: 4.0
  (AV:N/AC:H/Au:N/C:P/I:P/A:N): Design Error
  (CWE-DesignError)
- CVE-2011-0013: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:P/A:N): XSS (CWE-79)
- CVE-2011-0534: CVSS v2 Base Score: 5.0
  (AV:N/AC:L/Au:N/C:N/I:N/A:P): Resource Management Errors
  (CWE-399)
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-admin-webapps-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-docs-webapp-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-el-1_0-api" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-el-1_0-api-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-javadoc-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-jsp-2_1-api-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-lib-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-servlet-2_5-api-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.24" release="5.10.1">
          <filename>tomcat6-webapps-6.0.24-5.10.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2b52efa9623c9b7b01a51b23a70a97fd"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4025">
  <id>avahi</id>
  <title>avahi: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298911071"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671797" id="671797" title="bug number 671797" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=none" id="none" title="none" type="cve"/>
  </references>
  <description>This update fixes a remote denial of service in the avahi
daemon that can be triggered remotely via a null UDP
packet. CVE-2011-1002: CVSS v2 Base Score: 5.0
(AV:N/AC:L/Au:N/C:N/I:N/A:P): Resource Management Errors
(CWE-399)
</description>
  <pkglist>
    <collection>
        <package name="avahi" arch="i586" version="0.6.25" release="15.3.1">
          <filename>avahi-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="avahi" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>avahi-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-compat-howl-devel" arch="i586" version="0.6.25" release="15.3.1">
          <filename>avahi-compat-howl-devel-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="avahi-compat-howl-devel" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>avahi-compat-howl-devel-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-compat-mDNSResponder-devel" arch="i586" version="0.6.25" release="15.3.1">
          <filename>avahi-compat-mDNSResponder-devel-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="avahi-compat-mDNSResponder-devel" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>avahi-compat-mDNSResponder-devel-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-lang" arch="noarch" version="0.6.25" release="15.3.1">
          <filename>avahi-lang-0.6.25-15.3.1.noarch.rpm</filename>
        </package>
        <package name="avahi-utils" arch="i586" version="0.6.25" release="15.3.1">
          <filename>avahi-utils-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="avahi-utils" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>avahi-utils-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" arch="i586" version="0.6.25" release="15.3.1">
          <filename>libavahi-client3-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="libavahi-client3" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libavahi-client3-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3-32bit" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libavahi-client3-32bit-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" arch="i586" version="0.6.25" release="15.3.1">
          <filename>libavahi-common3-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="libavahi-common3" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libavahi-common3-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3-32bit" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libavahi-common3-32bit-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core6" arch="i586" version="0.6.25" release="15.3.1">
          <filename>libavahi-core6-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="libavahi-core6" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libavahi-core6-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-devel" arch="i586" version="0.6.25" release="15.3.1">
          <filename>libavahi-devel-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="libavahi-devel" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libavahi-devel-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdns_sd" arch="i586" version="0.6.25" release="15.3.1">
          <filename>libdns_sd-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="libdns_sd" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libdns_sd-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdns_sd-32bit" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libdns_sd-32bit-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libhowl0" arch="i586" version="0.6.25" release="15.3.1">
          <filename>libhowl0-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="libhowl0" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>libhowl0-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
        <package name="python-avahi" arch="i586" version="0.6.25" release="15.3.1">
          <filename>python-avahi-0.6.25-15.3.1.i586.rpm</filename>
        </package>
        <package name="python-avahi" arch="x86_64" version="0.6.25" release="15.3.1">
          <filename>python-avahi-0.6.25-15.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4cae64c147405ced352b3a74c41b1c19"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4038">
  <id>java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298927586"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671714" id="671714" title="bug number 671714" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0706" id="CVE-2011-0706" title="CVE-2011-0706" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4469" id="CVE-2010-4469" title="CVE-2010-4469" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4465" id="CVE-2010-4465" title="CVE-2010-4465" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4472" id="CVE-2010-4472" title="CVE-2010-4472" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448" id="CVE-2010-4448" title="CVE-2010-4448" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4450" id="CVE-2010-4450" title="CVE-2010-4450" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4471" id="CVE-2010-4471" title="CVE-2010-4471" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4470" id="CVE-2010-4470" title="CVE-2010-4470" type="cve"/>
  </references>
  <description>Multiple vulnerabilities were fixed in java-1_6_0-openjdk:
- CVE-2010-4448: CVSS v2 Base Score: 2.6
  (AV:N/AC:H/Au:N/C:N/I:P/A:N): DNS cache poisoning by
  untrusted applets
- CVE-2010-4450: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Launcher incorrect
  processing of empty library path entries
- CVE-2010-4465: CVSS v2 Base Score: 6.8
  (AV:N/AC:M/Au:N/C:P/I:P/A:P): Swing timer-based security
  manager bypass
- CVE-2010-4469: CVSS v2 Base Score: 6.8
  (AV:N/AC:M/Au:N/C:P/I:P/A:P): Hotspot backward jsr heap
  corruption
- CVE-2010-4470: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): JAXP untrusted component
  state manipulation
- CVE-2010-4471: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:P/A:N): Java2D font-related system
  property leak
- CVE-2010-4472: CVSS v2 Base Score: 2.6
  (AV:N/AC:H/Au:N/C:P/I:N/A:N): Untrusted code allowed to
  replace DSIG/C14N implementation
- CVE-2011-0706: CVSS v2 Base Score: 7.5
  (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges,
  and Access Control (CWE-264)
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk" arch="i586" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.7-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk" arch="x86_64" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-1.6.0.0_b20.1.9.7-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-demo" arch="noarch" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.7-1.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="i586" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.7-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-devel" arch="x86_64" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.7-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-javadoc" arch="noarch" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.7-1.2.1.noarch.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="i586" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.7-1.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-plugin" arch="x86_64" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.7-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-src" arch="noarch" version="1.6.0.0_b20.1.9.7" release="1.2.1">
          <filename>java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.7-1.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="026bb5ef15ed0afaf4f271f909038865"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4078">
  <id>acroread</id>
  <title>acroread security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299059198"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669550" id="669550" title="bug number 669550" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4091" id="CVE-2010-4091" title="CVE-2010-4091" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0562" id="CVE-2011-0562" title="CVE-2011-0562" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0563" id="CVE-2011-0563" title="CVE-2011-0563" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0565" id="CVE-2011-0565" title="CVE-2011-0565" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0566" id="CVE-2011-0566" title="CVE-2011-0566" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0567" id="CVE-2011-0567" title="CVE-2011-0567" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0570" id="CVE-2011-0570" title="CVE-2011-0570" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0585" id="CVE-2011-0585" title="CVE-2011-0585" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0586" id="CVE-2011-0586" title="CVE-2011-0586" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0587" id="CVE-2011-0587" title="CVE-2011-0587" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0588" id="CVE-2011-0588" title="CVE-2011-0588" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0589" id="CVE-2011-0589" title="CVE-2011-0589" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0590" id="CVE-2011-0590" title="CVE-2011-0590" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0591" id="CVE-2011-0591" title="CVE-2011-0591" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0592" id="CVE-2011-0592" title="CVE-2011-0592" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0593" id="CVE-2011-0593" title="CVE-2011-0593" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0594" id="CVE-2011-0594" title="CVE-2011-0594" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0595" id="CVE-2011-0595" title="CVE-2011-0595" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0596" id="CVE-2011-0596" title="CVE-2011-0596" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0598" id="CVE-2011-0598" title="CVE-2011-0598" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0599" id="CVE-2011-0599" title="CVE-2011-0599" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0600" id="CVE-2011-0600" title="CVE-2011-0600" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0602" id="CVE-2011-0602" title="CVE-2011-0602" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0603" id="CVE-2011-0603" title="CVE-2011-0603" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0604" id="CVE-2011-0604" title="CVE-2011-0604" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0606" id="CVE-2011-0606" title="CVE-2011-0606" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0558" id="CVE-2011-0558" title="CVE-2011-0558" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0559" id="CVE-2011-0559" title="CVE-2011-0559" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0560" id="CVE-2011-0560" title="CVE-2011-0560" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0561" id="CVE-2011-0561" title="CVE-2011-0561" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0571" id="CVE-2011-0571" title="CVE-2011-0571" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0572" id="CVE-2011-0572" title="CVE-2011-0572" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0573" id="CVE-2011-0573" title="CVE-2011-0573" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0574" id="CVE-2011-0574" title="CVE-2011-0574" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0575" id="CVE-2011-0575" title="CVE-2011-0575" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0577" id="CVE-2011-0577" title="CVE-2011-0577" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0578" id="CVE-2011-0578" title="CVE-2011-0578" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0607" id="CVE-2011-0607" title="CVE-2011-0607" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0608" id="CVE-2011-0608" title="CVE-2011-0608" type="cve"/>
  </references>
  <description>Specially crafted PDF documents could crash acroread or
lead to execution of arbitrary code. acroread was updated
to version 9.4.2 to address the issues.

(CVE-2010-4091, CVE-2011-0562, CVE-2011-0563,
CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570,
CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588,
CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592,
CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596,
CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602,
CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0558,
CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571,
CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575,
CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608)
</description>
  <pkglist>
    <collection>
        <package name="acroread" arch="i586" version="9.4.2" release="0.2.1">
          <filename>acroread-9.4.2-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f05cfefef1b777104ad340e4e4847c8a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3967">
  <id>gimp</id>
  <title>gimp: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297942239"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662043" id="662043" title="bug number 662043" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4540" id="CVE-2010-4540" title="CVE-2010-4540" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4541" id="CVE-2010-4541" title="CVE-2010-4541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4542" id="CVE-2010-4542" title="CVE-2010-4542" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4543" id="CVE-2010-4543" title="CVE-2010-4543" type="cve"/>
  </references>
  <description>Four buffer overflows have been fixed in gimp and its
plugins. CVE-2010-4540-CVE-2010-4543 have been assigned to
these issues.
- CVE-2010-4540: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-4541: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-4542: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2010-4543: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
</description>
  <pkglist>
    <collection>
        <package name="gimp" arch="i586" version="2.6.8" release="7.3.1">
          <filename>gimp-2.6.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="gimp" arch="x86_64" version="2.6.8" release="7.3.1">
          <filename>gimp-2.6.8-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-branding-upstream" arch="i586" version="2.6.8" release="7.3.1">
          <filename>gimp-branding-upstream-2.6.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="gimp-branding-upstream" arch="x86_64" version="2.6.8" release="7.3.1">
          <filename>gimp-branding-upstream-2.6.8-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-devel" arch="i586" version="2.6.8" release="7.3.1">
          <filename>gimp-devel-2.6.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="gimp-devel" arch="x86_64" version="2.6.8" release="7.3.1">
          <filename>gimp-devel-2.6.8-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-help-browser" arch="i586" version="2.6.8" release="7.3.1">
          <filename>gimp-help-browser-2.6.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="gimp-help-browser" arch="x86_64" version="2.6.8" release="7.3.1">
          <filename>gimp-help-browser-2.6.8-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-lang" arch="noarch" version="2.6.8" release="7.3.1">
          <filename>gimp-lang-2.6.8-7.3.1.noarch.rpm</filename>
        </package>
        <package name="gimp-module-hal" arch="i586" version="2.6.8" release="7.3.1">
          <filename>gimp-module-hal-2.6.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="gimp-module-hal" arch="x86_64" version="2.6.8" release="7.3.1">
          <filename>gimp-module-hal-2.6.8-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-plugins-python" arch="i586" version="2.6.8" release="7.3.1">
          <filename>gimp-plugins-python-2.6.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="gimp-plugins-python" arch="x86_64" version="2.6.8" release="7.3.1">
          <filename>gimp-plugins-python-2.6.8-7.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9fdd866f83a73a80a04ef10f7c8b01dd"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4111">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Security update to 3.6.15</title>
  <release>openSUSE 11.3</release>
  <issued date="1299523124"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667155" id="667155" title="bug number 667155" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053" id="CVE-2011-0053" title="CVE-2011-0053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0062" id="CVE-2011-0062" title="CVE-2011-0062" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0051" id="CVE-2011-0051" title="CVE-2011-0051" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0055" id="CVE-2011-0055" title="CVE-2011-0055" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0054" id="CVE-2011-0054" title="CVE-2011-0054" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0056" id="CVE-2011-0056" title="CVE-2011-0056" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0057" id="CVE-2011-0057" title="CVE-2011-0057" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0058" id="CVE-2011-0058" title="CVE-2011-0058" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1585" id="CVE-2010-1585" title="CVE-2010-1585" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0061" id="CVE-2011-0061" title="CVE-2011-0061" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0059" id="CVE-2011-0059" title="CVE-2011-0059" type="cve"/>
  </references>
  <description>MozillaFirefox was updated to version 3.6.15, fixing
various security issues.

Following security issues were fixed: MFSA 2011-01: Mozilla
developers identified and fixed several memory safety bugs
in the browser engine used in Firefox and other
Mozilla-based products. Some of these bugs showed evidence
of memory corruption under certain circumstances, and we
presume that with enough effort at least some of these
could be exploited to run arbitrary code. References

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff
Walden, Henry Sivonen, Martijn Wargers, David Baron and
Marcia Knous reported memory safety problems that affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0053)

Igor Bukanov and Gary Kwong reported memory safety problems
that affected Firefox 3.6 only. (CVE-2011-0062)


MFSA 2011-02 / CVE-2011-0051: Security researcher Zach
Hoffman reported that a recursive call to eval() wrapped in
a try/catch statement places the browser into a
inconsistent state. Any dialog box opened in this state is
displayed without text and with non-functioning buttons.
Closing the window causes the dialog to evaluate to true.
An attacker could use this issue to force a user into
accepting any dialog, such as one granting elevated
privileges to the page presenting the dialog.

MFSA 2011-03 / CVE-2011-0055: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a method used by JSON.stringify contained a
use-after-free error in which a currently in-use pointer
was freed and subsequently dereferenced. This could lead to
arbitrary code execution if an attacker was able to store
malicious code in the freed section of memory.

Mozilla developer Igor Bukanov also independently
discovered and reported this issue two weeks after the
initial report was received.


MFSA 2011-04 / CVE-2011-0054: Security researcher Christian
Holler reported that the JavaScript engine's internal
memory mapping of non-local JS variables contained a buffer
overflow which could potentially be used by an attacker to
run arbitrary code on a victim's computer.

MFSA 2011-05 / CVE-2011-0056: Security researcher Christian
Holler reported that the JavaScript engine's internal
mapping of string values contained an error in cases where
the number of values being stored was above 64K. In such
cases an offset pointer was manually moved forwards and
backwards to access the larger address space. If an
exception was thrown between the time that the offset
pointer was moved forward and the time it was reset, then
the exception object would be read from an invalid memory
address, potentially executing attacker-controlled memory.

MFSA 2011-06 / CVE-2011-0057: Daniel Kozlowski reported
that a JavaScript Worker could be used to keep a reference
to an object that could be freed during garbage collection.
Subsequent calls through this deleted reference could cause
attacker-controlled memory to be executed on a victim's
computer.

MFSA 2011-07 / CVE-2011-0058: Alex Miller reported that
when very long strings were constructed and inserted into
an HTML document, the browser would incorrectly construct
the layout objects used to display the text. Under such
conditions an incorrect length would be calculated for a
text run resulting in too small of a memory buffer being
allocated to store the text. This issue could be used by an
attacker to write data past the end of the buffer and
execute malicious code on a victim's computer. This issue
affects only Mozilla browsers on Windows.

MFSA 2011-08 / CVE-2010-1585: Mozilla security developer
Roberto Suggi Liverani reported that ParanoidFragmentSink,
a class used to sanitize potentially unsafe HTML for
display, allows javascript: URLs and other inline
JavaScript when the embedding document is a chrome
document. While there are no unsafe uses of this class in
any released products, extension code could have
potentially used it in an unsafe manner.

MFSA 2011-09 / CVE-2011-0061: Security researcher Jordi
Chancel reported that a JPEG image could be constructed
that would be decoded incorrectly, causing data to be
written past the end of a buffer created to store the
image. An attacker could potentially craft such an image
that would cause malicious code to be stored in memory and
then later executed on a victim's computer.

MFSA 2011-10 / CVE-2011-0059: Adobe security researcher
Peleus Uhley reported that when plugin-initiated requests
receive a 307 redirect response, the plugin is not notified
and the request is forwarded to the new location. This is
true even for cross-site redirects, so any custom headers
that were added as part of the initial request would be
forwarded intact across origins. This poses a CSRF risk for
web applications that rely on custom headers only being
present in requests from their own origin.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-3.6.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-3.6.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.15" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-js192-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-js192-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-js192-32bit-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.15-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.15" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.15-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="40b2da5c59a31ab6766059fda7dc182a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4070">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Security update to 3.1.8</title>
  <release>openSUSE 11.3</release>
  <issued date="1299069168"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667155" id="667155" title="bug number 667155" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053" id="CVE-2011-0053" title="CVE-2011-0053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0062" id="CVE-2011-0062" title="CVE-2011-0062" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0051" id="CVE-2011-0051" title="CVE-2011-0051" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0055" id="CVE-2011-0055" title="CVE-2011-0055" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0054" id="CVE-2011-0054" title="CVE-2011-0054" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0056" id="CVE-2011-0056" title="CVE-2011-0056" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0057" id="CVE-2011-0057" title="CVE-2011-0057" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0058" id="CVE-2011-0058" title="CVE-2011-0058" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1585" id="CVE-2010-1585" title="CVE-2010-1585" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0061" id="CVE-2011-0061" title="CVE-2011-0061" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0059" id="CVE-2011-0059" title="CVE-2011-0059" type="cve"/>
  </references>
  <description>MozillaThunderbird was updated to version 3.1.8, fixing
various security issues.

Following security issues were fixed: MFSA 2011-01: Mozilla
developers identified and fixed several memory safety bugs
in the browser engine used in Firefox and other
Mozilla-based products. Some of these bugs showed evidence
of memory corruption under certain circumstances, and we
presume that with enough effort at least some of these
could be exploited to run arbitrary code.

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff
Walden, Henry Sivonen, Martijn Wargers, David Baron and
Marcia Knous reported memory safety problems that affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0053)

Igor Bukanov and Gary Kwong reported memory safety problems
that affected Firefox 3.6 only. (CVE-2011-0062)



MFSA 2011-08 / CVE-2010-1585: Mozilla security developer
Roberto Suggi Liverani reported that ParanoidFragmentSink,
a class used to sanitize potentially unsafe HTML for
display, allows javascript: URLs and other inline
JavaScript when the embedding document is a chrome
document. While there are no unsafe uses of this class in
any released products, extension code could have
potentially used it in an unsafe manner.

MFSA 2011-09 / CVE-2011-0061: Security researcher Jordi
Chancel reported that a JPEG image could be constructed
that would be decoded incorrectly, causing data to be
written past the end of a buffer created to store the
image. An attacker could potentially craft such an image
that would cause malicious code to be stored in memory and
then later executed on a victim's computer.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-3.1.8-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-3.1.8-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-devel-3.1.8-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-devel-3.1.8-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-translations-common-3.1.8-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-translations-common-3.1.8-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-translations-other-3.1.8-0.7.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.1.8" release="0.7.1">
          <filename>MozillaThunderbird-translations-other-3.1.8-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.1.2" release="9.7.1">
          <filename>enigmail-1.1.2-9.7.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.1.2" release="9.7.1">
          <filename>enigmail-1.1.2-9.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1f4bdebc8d07494856b7f28190f03348"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4074">
  <id>seamonkey</id>
  <title>seamonkey: Security update to 2.0.12</title>
  <release>openSUSE 11.3</release>
  <issued date="1299061686"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667155" id="667155" title="bug number 667155" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053" id="CVE-2011-0053" title="CVE-2011-0053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0062" id="CVE-2011-0062" title="CVE-2011-0062" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0051" id="CVE-2011-0051" title="CVE-2011-0051" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0055" id="CVE-2011-0055" title="CVE-2011-0055" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0054" id="CVE-2011-0054" title="CVE-2011-0054" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0056" id="CVE-2011-0056" title="CVE-2011-0056" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0057" id="CVE-2011-0057" title="CVE-2011-0057" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0058" id="CVE-2011-0058" title="CVE-2011-0058" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1585" id="CVE-2010-1585" title="CVE-2010-1585" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0061" id="CVE-2011-0061" title="CVE-2011-0061" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0059" id="CVE-2011-0059" title="CVE-2011-0059" type="cve"/>
  </references>
  <description>Mozilla Seamonkey was updated to version 2.0.12, fixing
various security issues.

Following security issues were fixed: MFSA 2011-01: Mozilla
developers identified and fixed several memory safety bugs
in the browser engine used in Firefox and other
Mozilla-based products. Some of these bugs showed evidence
of memory corruption under certain circumstances, and we
presume that with enough effort at least some of these
could be exploited to run arbitrary code.

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff
Walden, Henry Sivonen, Martijn Wargers, David Baron and
Marcia Knous reported memory safety problems that affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0053)

Igor Bukanov and Gary Kwong reported memory safety problems
that affected Firefox 3.6 only. (CVE-2011-0062)


MFSA 2011-02 / CVE-2011-0051: Security researcher Zach
Hoffman reported that a recursive call to eval() wrapped in
a try/catch statement places the browser into a
inconsistent state. Any dialog box opened in this state is
displayed without text and with non-functioning buttons.
Closing the window causes the dialog to evaluate to true.
An attacker could use this issue to force a user into
accepting any dialog, such as one granting elevated
privileges to the page presenting the dialog.

MFSA 2011-03 / CVE-2011-0055: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a method used by JSON.stringify contained a
use-after-free error in which a currently in-use pointer
was freed and subsequently dereferenced. This could lead to
arbitrary code execution if an attacker was able to store
malicious code in the freed section of memory.

Mozilla developer Igor Bukanov also independently
discovered and reported this issue two weeks after the
initial report was received.


MFSA 2011-04 / CVE-2011-0054: Security researcher Christian
Holler reported that the JavaScript engine's internal
memory mapping of non-local JS variables contained a buffer
overflow which could potentially be used by an attacker to
run arbitrary code on a victim's computer.

MFSA 2011-05 / CVE-2011-0056: Security researcher Christian
Holler reported that the JavaScript engine's internal
mapping of string values contained an error in cases where
the number of values being stored was above 64K. In such
cases an offset pointer was manually moved forwards and
backwards to access the larger address space. If an
exception was thrown between the time that the offset
pointer was moved forward and the time it was reset, then
the exception object would be read from an invalid memory
address, potentially executing attacker-controlled memory.

MFSA 2011-06 / CVE-2011-0057: Daniel Kozlowski reported
that a JavaScript Worker could be used to keep a reference
to an object that could be freed during garbage collection.
Subsequent calls through this deleted reference could cause
attacker-controlled memory to be executed on a victim's
computer.

MFSA 2011-07 / CVE-2011-0058: Alex Miller reported that
when very long strings were constructed and inserted into
an HTML document, the browser would incorrectly construct
the layout objects used to display the text. Under such
conditions an incorrect length would be calculated for a
text run resulting in too small of a memory buffer being
allocated to store the text. This issue could be used by an
attacker to write data past the end of the buffer and
execute malicious code on a victim's computer. This issue
affects only Mozilla browsers on Windows.

MFSA 2011-08 / CVE-2010-1585: Mozilla security developer
Roberto Suggi Liverani reported that ParanoidFragmentSink,
a class used to sanitize potentially unsafe HTML for
display, allows javascript: URLs and other inline
JavaScript when the embedding document is a chrome
document. While there are no unsafe uses of this class in
any released products, extension code could have
potentially used it in an unsafe manner.

MFSA 2011-09 / CVE-2011-0061: Security researcher Jordi
Chancel reported that a JPEG image could be constructed
that would be decoded incorrectly, causing data to be
written past the end of a buffer created to store the
image. An attacker could potentially craft such an image
that would cause malicious code to be stored in memory and
then later executed on a victim's computer.

MFSA 2011-10 / CVE-2011-0059: Adobe security researcher
Peleus Uhley reported that when plugin-initiated requests
receive a 307 redirect response, the plugin is not notified
and the request is forwarded to the new location. This is
true even for cross-site redirects, so any custom headers
that were added as part of the initial request would be
forwarded intact across origins. This poses a CSRF risk for
web applications that rely on custom headers only being
present in requests from their own origin.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.12" release="0.2.1">
          <filename>seamonkey-2.0.12-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.12" release="0.2.1">
          <filename>seamonkey-2.0.12-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.12" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.12-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.12" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.12-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.12" release="0.2.1">
          <filename>seamonkey-irc-2.0.12-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.12" release="0.2.1">
          <filename>seamonkey-irc-2.0.12-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.12" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.12-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.12" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.12-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.12" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.12-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.12" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.12-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.12" release="0.2.1">
          <filename>seamonkey-venkman-2.0.12-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.12" release="0.2.1">
          <filename>seamonkey-venkman-2.0.12-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b24f856008f7c6cade73beb41d6114a5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4073">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Security update to 1.9.1.17</title>
  <release>openSUSE 11.3</release>
  <issued date="1299070237"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667155" id="667155" title="bug number 667155" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053" id="CVE-2011-0053" title="CVE-2011-0053" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0062" id="CVE-2011-0062" title="CVE-2011-0062" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0051" id="CVE-2011-0051" title="CVE-2011-0051" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0055" id="CVE-2011-0055" title="CVE-2011-0055" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0054" id="CVE-2011-0054" title="CVE-2011-0054" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0056" id="CVE-2011-0056" title="CVE-2011-0056" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0057" id="CVE-2011-0057" title="CVE-2011-0057" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0058" id="CVE-2011-0058" title="CVE-2011-0058" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1585" id="CVE-2010-1585" title="CVE-2010-1585" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0061" id="CVE-2011-0061" title="CVE-2011-0061" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0059" id="CVE-2011-0059" title="CVE-2011-0059" type="cve"/>
  </references>
  <description>Mozilla XULRunner 1.9.1 was updated to version 1.9.1.17,
fixing various security issues.

Following security issues were fixed: MFSA 2010-74 /
CVE-2010-3777: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

MFSA 2011-01: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code.

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff
Walden, Henry Sivonen, Martijn Wargers, David Baron and
Marcia Knous reported memory safety problems that affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0053)

Igor Bukanov and Gary Kwong reported memory safety problems
that affected Firefox 3.6 only. (CVE-2011-0062)


MFSA 2011-02 / CVE-2011-0051: Security researcher Zach
Hoffman reported that a recursive call to eval() wrapped in
a try/catch statement places the browser into a
inconsistent state. Any dialog box opened in this state is
displayed without text and with non-functioning buttons.
Closing the window causes the dialog to evaluate to true.
An attacker could use this issue to force a user into
accepting any dialog, such as one granting elevated
privileges to the page presenting the dialog.

MFSA 2011-03 / CVE-2011-0055: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
that a method used by JSON.stringify contained a
use-after-free error in which a currently in-use pointer
was freed and subsequently dereferenced. This could lead to
arbitrary code execution if an attacker was able to store
malicious code in the freed section of memory.

Mozilla developer Igor Bukanov also independently
discovered and reported this issue two weeks after the
initial report was received.


MFSA 2011-04 / CVE-2011-0054: Security researcher Christian
Holler reported that the JavaScript engine's internal
memory mapping of non-local JS variables contained a buffer
overflow which could potentially be used by an attacker to
run arbitrary code on a victim's computer.

MFSA 2011-05 / CVE-2011-0056: Security researcher Christian
Holler reported that the JavaScript engine's internal
mapping of string values contained an error in cases where
the number of values being stored was above 64K. In such
cases an offset pointer was manually moved forwards and
backwards to access the larger address space. If an
exception was thrown between the time that the offset
pointer was moved forward and the time it was reset, then
the exception object would be read from an invalid memory
address, potentially executing attacker-controlled memory.

MFSA 2011-06 / CVE-2011-0057: Daniel Kozlowski reported
that a JavaScript Worker could be used to keep a reference
to an object that could be freed during garbage collection.
Subsequent calls through this deleted reference could cause
attacker-controlled memory to be executed on a victim's
computer.

MFSA 2011-07 / CVE-2011-0058: Alex Miller reported that
when very long strings were constructed and inserted into
an HTML document, the browser would incorrectly construct
the layout objects used to display the text. Under such
conditions an incorrect length would be calculated for a
text run resulting in too small of a memory buffer being
allocated to store the text. This issue could be used by an
attacker to write data past the end of the buffer and
execute malicious code on a victim's computer. This issue
affects only Mozilla browsers on Windows.

MFSA 2011-08 / CVE-2010-1585: Mozilla security developer
Roberto Suggi Liverani reported that ParanoidFragmentSink,
a class used to sanitize potentially unsafe HTML for
display, allows javascript: URLs and other inline
JavaScript when the embedding document is a chrome
document. While there are no unsafe uses of this class in
any released products, extension code could have
potentially used it in an unsafe manner.

MFSA 2011-10 / CVE-2011-0059: Adobe security researcher
Peleus Uhley reported that when plugin-initiated requests
receive a 307 redirect response, the plugin is not notified
and the request is forwarded to the new location. This is
true even for cross-site redirects, so any custom headers
that were added as part of the initial request would be
forwarded intact across origins. This poses a CSRF risk for
web applications that rely on custom headers only being
present in requests from their own origin.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.17" release="0.2.1">
          <filename>python-xpcom191-1.9.1.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.17" release="0.2.1">
          <filename>python-xpcom191-1.9.1.17-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="56710fbf333ba396b2cd7ef7b9eddf3a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3906">
  <id>aaa_base</id>
  <title>aaa_base security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1296665289"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665479" id="665479" title="bug number 665479" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0461" id="CVE-2011-0461" title="CVE-2011-0461" type="cve"/>
  </references>
  <description>The boot.localfs init script wrote a file to /dev/shm
during shut-down. Since local users may create symlinks
there a malicious user could cause corruption of arbitrary
files (CVE-2011-0461).
</description>
  <pkglist>
    <collection>
        <package name="aaa_base" arch="i586" version="11.3" release="8.7.1">
          <filename>aaa_base-11.3-8.7.1.i586.rpm</filename>
        </package>
        <package name="aaa_base" arch="x86_64" version="11.3" release="8.7.1">
          <filename>aaa_base-11.3-8.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="22c22b9c7b0c0ca91f16cb7b210ff5fa"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4140">
  <id>timezone-2011c</id>
  <title>timezone: Update to 2011c</title>
  <release>openSUSE 11.3</release>
  <issued date="1299688929"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672339" id="672339" title="bug number 672339" type="bugzilla"/>
  </references>
  <description>The Olson timezone database has been updated to version
2011c:

This package update contains the following DST-related
changes:

  * Pacific/Fiji will end DST 3 weeks earlier than expected
    - on March 6, 2011, not March 27, 2011.
  * Pacific/Apia will switch from WSDT to WST on Apr 3;
    however, the precise time of the switch has been
    incorrect in previous version.
  * Chile (America/Santiago, Pacific/Easter) will postpone
    the end of DST by a month again, this time to help
    dealing with the water shortage; the DST will end on
    April 3, 2011, not March 13, 2011.

These new zones have been introduced:

  * Mercer County, North Dakota
    (America/North_Dakota/Beulah) switched from the
    mountain time zone to the central time zone at the last
    transition from daylight-saving to standard time (on
    Nov. 7, 2010).
  * Detailed information on time changes in some Indian
    reservations in Alaska has been discovered, leading to
    split of new timezones America/Sitka and
    America/Metlakatla off America/Juneau.

Historical time information has been adjusted for these
zones:
  * America/Juneau has been adjusted in accordance with the
    discovered information on Alaska time history.
  * Asia/Hong_Kong declared that daylight saving was used
    in year 1977, while in fact it was not.
  * South Australia (Australia/Adelaide,
    Australia/Broken_Hill) definitions have been cleaned
    up; the zone binary data changed but not the
    interpretation.
  * Pacific/Honolulu has been corrected to correctly define
    abandonment of local mean time as of 1896 and DST usage
    between 1942 and 1945.
</description>
  <pkglist>
    <collection>
        <package name="timezone" arch="i586" version="2011c" release="0.3.1">
          <filename>timezone-2011c-0.3.1.i586.rpm</filename>
        </package>
        <package name="timezone" arch="x86_64" version="2011c" release="0.3.1">
          <filename>timezone-2011c-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-java" arch="noarch" version="2011c" release="0.3.1">
          <filename>timezone-java-2011c-0.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="dd8c2662c660015cac9fcdec1cd1bd64"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4028">
  <id>build</id>
  <title>build security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298910795"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665768" id="665768" title="bug number 665768" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4226" id="CVE-2010-4226" title="CVE-2010-4226" type="cve"/>
  </references>
  <description>The build script uses cpio to extract untrusted rpm
packages for bootstrapping virtual machines. cpio is not
safe to use for this task, therefore the build script now
uses bsdtar instead (CVE-2010-4226).
</description>
  <pkglist>
    <collection>
        <package name="build" arch="noarch" version="2010.07.28" release="1.3.1">
          <filename>build-2010.07.28-1.3.1.noarch.rpm</filename>
        </package>
        <package name="build-mkbaselibs" arch="noarch" version="2010.07.28" release="1.3.1">
          <filename>build-mkbaselibs-2010.07.28-1.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8a7f021eac78d95308f258ac01264dc7"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4117">
  <id>ndesk-dbus-glib</id>
  <title>ndesk-dbus-glib: An incorrect rpm obsolete is removed by this update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299636405"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677099" id="677099" title="bug number 677099" type="bugzilla"/>
  </references>
  <description>ndesk-dbus-glib has an incorrect obsoletes to
dbus-sharp-glib. This is removed by this update.
</description>
  <pkglist>
    <collection>
        <package name="ndesk-dbus-glib" arch="noarch" version="0.4.1" release="41.3.1">
          <filename>ndesk-dbus-glib-0.4.1-41.3.1.noarch.rpm</filename>
        </package>
        <package name="ndesk-dbus-glib-devel" arch="noarch" version="0.4.1" release="41.3.1">
          <filename>ndesk-dbus-glib-devel-0.4.1-41.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="357af51e82a80d6aba64b77f549cfeb4"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4143">
  <id>libtiff-devel</id>
  <title>tiff security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300113602"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672510" id="672510" title="bug number 672510" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0191" id="CVE-2011-0191" title="CVE-2011-0191" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192" id="CVE-2011-0192" title="CVE-2011-0192" type="cve"/>
  </references>
  <description>specially crafted tiff images could cause buffer overflows
in libtiff (CVE-2011-0191, CVE-2011-0192).
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.6.1">
          <filename>libtiff-devel-3.9.2-5.6.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.6.1">
          <filename>libtiff-devel-3.9.2-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.6.1">
          <filename>libtiff-devel-32bit-3.9.2-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.6.1">
          <filename>libtiff3-3.9.2-5.6.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.6.1">
          <filename>libtiff3-3.9.2-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.6.1">
          <filename>libtiff3-32bit-3.9.2-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.6.1">
          <filename>tiff-3.9.2-5.6.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.6.1">
          <filename>tiff-3.9.2-5.6.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="78a600cb874177bfaa3ad1a821054329"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4163">
  <id>krb5</id>
  <title>krb5 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300269168"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671717" id="671717" title="bug number 671717" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0284" id="CVE-2011-0284" title="CVE-2011-0284" type="cve"/>
  </references>
  <description>A double-free issue in kdc when PKINIT is enabled allowed
remote attackers to crash the daemon or potentially execute
arbitrary code (CVE-2011-0284).
</description>
  <pkglist>
    <collection>
        <package name="krb5" arch="i586" version="1.8.1" release="5.7.1">
          <filename>krb5-1.8.1-5.7.1.i586.rpm</filename>
        </package>
        <package name="krb5" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-32bit" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-32bit-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-client" arch="i586" version="1.8.1" release="5.7.1">
          <filename>krb5-client-1.8.1-5.7.1.i586.rpm</filename>
        </package>
        <package name="krb5-client" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-client-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel" arch="i586" version="1.8.1" release="5.7.1">
          <filename>krb5-devel-1.8.1-5.7.1.i586.rpm</filename>
        </package>
        <package name="krb5-devel" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-devel-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel-32bit" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-devel-32bit-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="i586" version="1.8.1" release="5.7.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.7.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="i586" version="1.8.1" release="5.7.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.7.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" arch="i586" version="1.8.1" release="5.7.1">
          <filename>krb5-server-1.8.1-5.7.1.i586.rpm</filename>
        </package>
        <package name="krb5-server" arch="x86_64" version="1.8.1" release="5.7.1">
          <filename>krb5-server-1.8.1-5.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9916013cd20dec1f56fad723f0aa16ff"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4031">
  <id>nbd</id>
  <title>nbd: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298910791"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674281" id="674281" title="bug number 674281" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0530" id="CVE-2011-0530" title="CVE-2011-0530" type="cve"/>
  </references>
  <description>Nbd was updated to fix a buffer overflow in the mainloop()
function of nbd-server.c. This vulnerability can be
exploited by remote attackers via long requests to execute
arbitrary code.  (CVE-2011-0530: CVSS v2 Base Score: 7.5
(AV:N/AC:L/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119))
</description>
  <pkglist>
    <collection>
        <package name="nbd" arch="i586" version="2.9.20" release="1.3.1">
          <filename>nbd-2.9.20-1.3.1.i586.rpm</filename>
        </package>
        <package name="nbd" arch="x86_64" version="2.9.20" release="1.3.1">
          <filename>nbd-2.9.20-1.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbd-doc" arch="i586" version="2.9.20" release="1.3.1">
          <filename>nbd-doc-2.9.20-1.3.1.i586.rpm</filename>
        </package>
        <package name="nbd-doc" arch="x86_64" version="2.9.20" release="1.3.1">
          <filename>nbd-doc-2.9.20-1.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b0e296153de17efe7743735c16f84527"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4142">
  <id>libpulse-browse0</id>
  <title>pulseaudio: Fix directory permissions</title>
  <release>openSUSE 11.3</release>
  <issued date="1300061244"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=638052" id="638052" title="bug number 638052" type="bugzilla"/>
  </references>
  <description>This update fixes the directory permissions of /var/lib/gdm
that caused GDM to start up slowly (bnc#638052).
</description>
  <pkglist>
    <collection>
        <package name="libpulse-browse0" arch="i586" version="0.9.21" release="10.3.1">
          <filename>libpulse-browse0-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="libpulse-browse0" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>libpulse-browse0-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-devel" arch="i586" version="0.9.21" release="10.3.1">
          <filename>libpulse-devel-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="libpulse-devel" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>libpulse-devel-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0" arch="i586" version="0.9.21" release="10.3.1">
          <filename>libpulse-mainloop-glib0-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>libpulse-mainloop-glib0-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse-mainloop-glib0-32bit" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>libpulse-mainloop-glib0-32bit-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse0" arch="i586" version="0.9.21" release="10.3.1">
          <filename>libpulse0-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="libpulse0" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>libpulse0-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpulse0-32bit" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>libpulse0-32bit-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-esound-compat" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-esound-compat-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-esound-compat" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-esound-compat-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-gdm-hooks" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-gdm-hooks-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-gdm-hooks" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-gdm-hooks-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-lang" arch="noarch" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-lang-0.9.21-10.3.1.noarch.rpm</filename>
        </package>
        <package name="pulseaudio-module-bluetooth" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-bluetooth-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-bluetooth" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-bluetooth-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-gconf" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-gconf-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-gconf" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-gconf-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-jack" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-jack-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-jack" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-jack-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-lirc" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-lirc-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-lirc" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-lirc-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-x11" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-x11-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-x11" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-x11-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-module-zeroconf" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-zeroconf-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-module-zeroconf" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-module-zeroconf-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pulseaudio-utils" arch="i586" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-utils-0.9.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="pulseaudio-utils" arch="x86_64" version="0.9.21" release="10.3.1">
          <filename>pulseaudio-utils-0.9.21-10.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c7d313e1aff6279e40b708930c181922"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4171">
  <id>aaa_base</id>
  <title>aaa_base security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300378251"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678827" id="678827" title="bug number 678827" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0468" id="CVE-2011-0468" title="CVE-2011-0468" type="cve"/>
  </references>
  <description>shell meta characters in file names could cause interactive
shells to execute arbitrary commands when performing tab
expansion (CVE-2011-0468).
</description>
  <pkglist>
    <collection>
        <package name="aaa_base" arch="i586" version="11.3" release="8.9.1">
          <filename>aaa_base-11.3-8.9.1.i586.rpm</filename>
        </package>
        <package name="aaa_base" arch="x86_64" version="11.3" release="8.9.1">
          <filename>aaa_base-11.3-8.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c6adc20d1a4415d4e7e42f1c39acb978"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4154">
  <id>clamav</id>
  <title>clamav security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299214901"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673753" id="673753" title="bug number 673753" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1003" id="CVE-2011-1003" title="CVE-2011-1003" type="cve"/>
  </references>
  <description>Specially crafted VBA data in Microsoft Office documents
could crash clamav or potentially even cause execution of
arbitrary code. clamav was updated to version 0.97 to fix
the issue (CVE-2011-1003).
</description>
  <pkglist>
    <collection>
        <package name="clamav" arch="i586" version="0.97" release="5.2.2">
          <filename>clamav-0.97-5.2.2.i586.rpm</filename>
        </package>
        <package name="clamav" arch="x86_64" version="0.97" release="5.2.2">
          <filename>clamav-0.97-5.2.2.x86_64.rpm</filename>
        </package>
        <package name="clamav-db" arch="noarch" version="0.97" release="5.2.2">
          <filename>clamav-db-0.97-5.2.2.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d22f623604ba3755a25670cba8fcdc1b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4158">
  <id>dosfstools</id>
  <title>dosfstools: This update fixes a buffer overflow in fsck.vfat</title>
  <release>openSUSE 11.3</release>
  <issued date="1300293431"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677236" id="677236" title="bug number 677236" type="bugzilla"/>
  </references>
  <description>This update fixes the following bug: A buffer overflow can
happen when creating an entry of vfat filesystem trough
alloc_rootdir_entry(). This function is used when fsck.vfat
-f is called.
</description>
  <pkglist>
    <collection>
        <package name="dosfstools" arch="i586" version="3.0.9" release="4.3.1">
          <filename>dosfstools-3.0.9-4.3.1.i586.rpm</filename>
        </package>
        <package name="dosfstools" arch="x86_64" version="3.0.9" release="4.3.1">
          <filename>dosfstools-3.0.9-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0b644aa4547633317ae22ed9a031fc28"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4187">
  <id>flash-player</id>
  <title>flash-player: Update to 10.2.153.1</title>
  <release>openSUSE 11.3</release>
  <issued date="1300748694"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679672" id="679672" title="bug number 679672" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0609" id="CVE-2011-0609" title="CVE-2011-0609" type="cve"/>
  </references>
  <description>The Adobe Flash Player was updated to the 10.2.153.1,
fixing several bugs and one security issue. 

This vulnerability (CVE-2011-0609) could cause a crash and
potentially allow an attacker to take control of the
affected system. There are reports that this vulnerability
is being exploited in the wild in targeted attacks via a
Flash (.swf) file embedded in a Microsoft Excel (.xls) file
delivered as an email attachment.
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.2.153.1" release="0.2.1">
          <filename>flash-player-10.2.153.1-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d6abaa5121d5e2b3545eaaf1d1051a49"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4076">
  <id>libpango-1_0-0</id>
  <title>pango security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298995096"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672502" id="672502" title="bug number 672502" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=666101" id="666101" title="bug number 666101" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0064" id="CVE-2011-0064" title="CVE-2011-0064" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0020" id="CVE-2011-0020" title="CVE-2011-0020" type="cve"/>
  </references>
  <description>Specially crafted font files could cause a heap corruption
in applications linked against pango (CVE-2011-0064,
CVE-2011-0020).
</description>
  <pkglist>
    <collection>
        <package name="pango" arch="i586" version="1.28.0" release="3.3.1">
          <filename>pango-1.28.0-3.3.1.i586.rpm</filename>
        </package>
        <package name="pango" arch="x86_64" version="1.28.0" release="3.3.1">
          <filename>pango-1.28.0-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="pango-32bit" arch="x86_64" version="1.28.0" release="3.3.1">
          <filename>pango-32bit-1.28.0-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="pango-devel" arch="i586" version="1.28.0" release="3.3.1">
          <filename>pango-devel-1.28.0-3.3.1.i586.rpm</filename>
        </package>
        <package name="pango-devel" arch="x86_64" version="1.28.0" release="3.3.1">
          <filename>pango-devel-1.28.0-3.3.1.x86_64.rpm</filename>
        </package>
        <package name="pango-module-thai-lang" arch="i586" version="1.28.0" release="3.3.1">
          <filename>pango-module-thai-lang-1.28.0-3.3.1.i586.rpm</filename>
        </package>
        <package name="pango-module-thai-lang" arch="x86_64" version="1.28.0" release="3.3.1">
          <filename>pango-module-thai-lang-1.28.0-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="57ec32ae9da676079038d1b4ce85bbe7"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4122">
  <id>xen-201103</id>
  <title>Collective update for xen</title>
  <release>openSUSE 11.3</release>
  <issued date="1299692742"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658569" id="658569" title="bug number 658569" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=633573" id="633573" title="bug number 633573" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641419" id="641419" title="bug number 641419" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661931" id="661931" title="bug number 661931" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=656369" id="656369" title="bug number 656369" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658163" id="658163" title="bug number 658163" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658704" id="658704" title="bug number 658704" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661298" id="661298" title="bug number 661298" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659070" id="659070" title="bug number 659070" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659466" id="659466" title="bug number 659466" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654543" id="654543" title="bug number 654543" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651822" id="651822" title="bug number 651822" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613584" id="613584" title="bug number 613584" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659872" id="659872" title="bug number 659872" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657272" id="657272" title="bug number 657272" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659665" id="659665" title="bug number 659665" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659431" id="659431" title="bug number 659431" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665767" id="665767" title="bug number 665767" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665446" id="665446" title="bug number 665446" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665541" id="665541" title="bug number 665541" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=613957" id="613957" title="bug number 613957" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657349" id="657349" title="bug number 657349" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661829" id="661829" title="bug number 661829" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655438" id="655438" title="bug number 655438" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654591" id="654591" title="bug number 654591" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625333" id="625333" title="bug number 625333" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677856" id="677856" title="bug number 677856" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677557" id="677557" title="bug number 677557" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=668621" id="668621" title="bug number 668621" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631680" id="631680" title="bug number 631680" type="bugzilla"/>
  </references>
  <description>Collective update for XEN

Xen
- 668600: libvirt massive filedescriptor leak after latest
  XEN update (same as 661931)
- 658569: SLES 11 SP1 dom0 iptables gives lots of physdev
  messages
- 633573: System fail to boot after running several warm
  reboot tests
- 658704: SLES11 SP1 Xen boot panic in x2apic mode
- 641419: L3: Xen: qemu-dm reports &quot;xc_map_foreign_batch:
  mmap failed:
- 661931: Fix fd leak in xenstore library (same as 668600)
- 656369: g5plus: sles11sp1 xen crash with 8 socket x2apic
  preenabled
- 658163: maintenance release - Nehalem system cannot boot
  into xen with maintenance release installed
- 658704: SLES11 SP1 Xen boot panic in x2apic mode
- 661298: maintenance release candidate - Windows VMs
  reboot too fast, triggering failsafe
- 659070: Fail to input '|' in en-us keyboard
- 659466: XEN drbd block device type not working on SLES 11
  SP1
- 654543: PV guest won't unplug the IDE disk created by
  qemu-dm
- 651822: make sure we only apply the snapshot once, and
  the changes made after snapshot-apply hit the disk.
- 613584: If available, use kpartx '-f' option in domUloader
- 659872: xend: Do no release domain lock on checkpoint
  operation.

virt-manager
- 657272: virt-manager creates default 'dir' storage pool
  in /var/lib/libvirt/images on xen host

libvirt
- 659665: DomU hangs if vcpus&gt;1 and pci passthrough active
- 659431: Failed to start KVM VM

vm-install
- 661829: vm-install ignores inst source, description and
  other in vm-settings xml file
- 657349: Info file for linuxrc is not picked up by Xen
- 613957: Fedora 13 PV DomU can't be installed
- 665767: L3:kvm vminstall generates bad xml
- 665446: Attempt to start installation of new KVM virt
- 665541: vm-install fails tu create a virtual machine (kvm)
- 677856: Fix failure due to missing /var/run/vm-install
  directory
- 677557: Fix install openSUSE 11.4 as a guest on XEN
- 631680: Fix KVM install of openSUSE 11.3 on KVM failing
  on first reboot
- 668621: Fix creation of a new VM in virt-manager
</description>
  <pkglist>
    <collection>
        <package name="libvirt" arch="i586" version="0.8.1" release="4.4.7">
          <filename>libvirt-0.8.1-4.4.7.i586.rpm</filename>
        </package>
        <package name="libvirt" arch="x86_64" version="0.8.1" release="4.4.7">
          <filename>libvirt-0.8.1-4.4.7.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" arch="i586" version="0.8.1" release="4.4.7">
          <filename>libvirt-client-0.8.1-4.4.7.i586.rpm</filename>
        </package>
        <package name="libvirt-client" arch="x86_64" version="0.8.1" release="4.4.7">
          <filename>libvirt-client-0.8.1-4.4.7.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="i586" version="0.8.1" release="4.4.7">
          <filename>libvirt-devel-0.8.1-4.4.7.i586.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="x86_64" version="0.8.1" release="4.4.7">
          <filename>libvirt-devel-0.8.1-4.4.7.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="i586" version="0.8.1" release="4.4.7">
          <filename>libvirt-doc-0.8.1-4.4.7.i586.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="x86_64" version="0.8.1" release="4.4.7">
          <filename>libvirt-doc-0.8.1-4.4.7.x86_64.rpm</filename>
        </package>
        <package name="libvirt-python" arch="i586" version="0.8.1" release="4.4.7">
          <filename>libvirt-python-0.8.1-4.4.7.i586.rpm</filename>
        </package>
        <package name="libvirt-python" arch="x86_64" version="0.8.1" release="4.4.7">
          <filename>libvirt-python-0.8.1-4.4.7.x86_64.rpm</filename>
        </package>
        <package name="virt-manager" arch="i586" version="0.8.4" release="5.3.1">
          <filename>virt-manager-0.8.4-5.3.1.i586.rpm</filename>
        </package>
        <package name="virt-manager" arch="x86_64" version="0.8.4" release="5.3.1">
          <filename>virt-manager-0.8.4-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="vm-install" arch="i586" version="0.4.29" release="0.2.1">
          <filename>vm-install-0.4.29-0.2.1.i586.rpm</filename>
        </package>
        <package name="vm-install" arch="x86_64" version="0.4.29" release="0.2.1">
          <filename>vm-install-0.4.29-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="xen" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-devel-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-devel" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-devel-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-doc-html-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-doc-html-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-doc-pdf-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-doc-pdf-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="i586" version="4.0.1_21326_06_k2.6.34.7_0.7" release="0.3.1">
          <filename>xen-kmp-default-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="x86_64" version="4.0.1_21326_06_k2.6.34.7_0.7" release="0.3.1">
          <filename>xen-kmp-default-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="i586" version="4.0.1_21326_06_k2.6.34.7_0.7" release="0.3.1">
          <filename>xen-kmp-desktop-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="x86_64" version="4.0.1_21326_06_k2.6.34.7_0.7" release="0.3.1">
          <filename>xen-kmp-desktop-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-pae" arch="i586" version="4.0.1_21326_06_k2.6.34.7_0.7" release="0.3.1">
          <filename>xen-kmp-pae-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-libs-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-libs-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-tools-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-tools" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-tools-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="i586" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-tools-domU-4.0.1_21326_06-0.3.1.i586.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="x86_64" version="4.0.1_21326_06" release="0.3.1">
          <filename>xen-tools-domU-4.0.1_21326_06-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2b0bba5735c447165b94d23f27462cb0"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3937">
  <id>libopenssl-devel</id>
  <title>openssl: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297350828"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=670526" id="670526" title="bug number 670526" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014" id="CVE-2011-0014" title="CVE-2011-0014" type="cve"/>
  </references>
  <description>This update improves the ClientHello handshake message
parsing function. Prior to this update is was possible that
this function reads beyond the end of a message leading to
invalid memory access and a crash. Under some circumstances
it was possible that information from the OCSP extensions
was disclosed. (CVE-2011-0014: CVSS v2 Base Score: 5.8
(AV:N/AC:M/Au:N/C:P/I:N/A:P))
</description>
  <pkglist>
    <collection>
        <package name="libopenssl-devel" arch="i586" version="1.0.0" release="6.7.1">
          <filename>libopenssl-devel-1.0.0-6.7.1.i586.rpm</filename>
        </package>
        <package name="libopenssl-devel" arch="x86_64" version="1.0.0" release="6.7.1">
          <filename>libopenssl-devel-1.0.0-6.7.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="i586" version="0.9.8m" release="3.3.2">
          <filename>libopenssl0_9_8-0.9.8m-3.3.2.i586.rpm</filename>
        </package>
        <package name="libopenssl0_9_8" arch="x86_64" version="0.9.8m" release="3.3.2">
          <filename>libopenssl0_9_8-0.9.8m-3.3.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl0_9_8-32bit" arch="x86_64" version="0.9.8m" release="3.3.2">
          <filename>libopenssl0_9_8-32bit-0.9.8m-3.3.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="i586" version="1.0.0" release="6.7.1">
          <filename>libopenssl1_0_0-1.0.0-6.7.1.i586.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="x86_64" version="1.0.0" release="6.7.1">
          <filename>libopenssl1_0_0-1.0.0-6.7.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0-32bit" arch="x86_64" version="1.0.0" release="6.7.1">
          <filename>libopenssl1_0_0-32bit-1.0.0-6.7.1.x86_64.rpm</filename>
        </package>
        <package name="openssl" arch="i586" version="1.0.0" release="6.7.1">
          <filename>openssl-1.0.0-6.7.1.i586.rpm</filename>
        </package>
        <package name="openssl" arch="x86_64" version="1.0.0" release="6.7.1">
          <filename>openssl-1.0.0-6.7.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-doc" arch="noarch" version="1.0.0" release="6.7.1">
          <filename>openssl-doc-1.0.0-6.7.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6fa449aeb87caffe28c3b9c6c86d110b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4222">
  <id>timezone-2011d</id>
  <title>timezone: Update to 2011d</title>
  <release>openSUSE 11.3</release>
  <issued date="1301045279"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=682451" id="682451" title="bug number 682451" type="bugzilla"/>
  </references>
  <description>This update provides latest timezone information, taken
from Olson database 2011d: 

* Pacific/Apia: Move DST from April 3rd to April 2nd
* Europe/Istanbul: Move DST from March 27th to 28th
* America/Cuba: DST starts on March 20th

* Samoa  DST will occur a day earlier, on April 11th, 2011.

* America/Cuba Daylight Saving Time will occur on March
  20th, 2011.

* Europe/Istanbul Daylight Saving Time will occur on March
  28th, 2011,because of a nationwide exam scheduled to take
  place on Sunday, March 27.
</description>
  <pkglist>
    <collection>
        <package name="timezone" arch="i586" version="2011d" release="0.2.1">
          <filename>timezone-2011d-0.2.1.i586.rpm</filename>
        </package>
        <package name="timezone" arch="x86_64" version="2011d" release="0.2.1">
          <filename>timezone-2011d-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-java" arch="noarch" version="2011d" release="0.2.1">
          <filename>timezone-java-2011d-0.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bc16f619545b7f4363d9b52ae27d54ca"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4201">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300900028"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=680771" id="680771" title="bug number 680771" type="bugzilla"/>
  </references>
  <description>MozillaFirefox was updated to version 3.6.16 to fix the
following security issue:

MFSA 2011-11 Several invalid HTTPS certificates were placed
on the certificate blacklist to prevent their misuse.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-3.6.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-3.6.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.16" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-js192-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-js192-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-js192-32bit-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.16" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9c599ec9524943dd925e08f39ec9a644"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4202">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300897086"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=680771" id="680771" title="bug number 680771" type="bugzilla"/>
  </references>
  <description>Mozilla XULRunner 1.9.1 was updated to version 1.9.1.18 to
fix the following security issue:

MFSA 2011-11 Several invalid HTTPS certificates were placed
on the certificate blacklist to prevent their misuse.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.18-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.18-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.18" release="0.2.1">
          <filename>python-xpcom191-1.9.1.18-0.2.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.18" release="0.2.1">
          <filename>python-xpcom191-1.9.1.18-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="046bef6d0b1f5475d2f2ae7a31ca0bd9"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4204">
  <id>seamonkey</id>
  <title>seamonkey security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300897091"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=680771" id="680771" title="bug number 680771" type="bugzilla"/>
  </references>
  <description>Mozilla Seamonkey was updated to version 2.0.13 to fix the
following security issue:

MFSA 2011-11 Several invalid HTTPS certificates were placed
on the certificate blacklist to prevent their misuse.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.13" release="0.2.1">
          <filename>seamonkey-2.0.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.13" release="0.2.1">
          <filename>seamonkey-2.0.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.13" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.13" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.13" release="0.2.1">
          <filename>seamonkey-irc-2.0.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.13" release="0.2.1">
          <filename>seamonkey-irc-2.0.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.13" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.13" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.13" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.13" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.13-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.13" release="0.2.1">
          <filename>seamonkey-venkman-2.0.13-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.13" release="0.2.1">
          <filename>seamonkey-venkman-2.0.13-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="148fe6d84695ba070dc7dccc516f71c3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4239">
  <id>flash-player</id>
  <title>flash-player: Update to 10.2.153.1</title>
  <release>openSUSE 11.3</release>
  <issued date="1301339991"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679672" id="679672" title="bug number 679672" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=682902" id="682902" title="bug number 682902" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0609" id="CVE-2011-0609" title="CVE-2011-0609" type="cve"/>
  </references>
  <description>The Adobe Standalone Flash Player was updated to the
10.2.153.1, fixing several bugs and one security issue.
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.2.153.1" release="0.4.1">
          <filename>flash-player-10.2.153.1-0.4.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3870a0164d7d50641b014ef8dd166377"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4029">
  <id>logwatch</id>
  <title>logwatch: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1301071916"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674984" id="674984" title="bug number 674984" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1018" id="CVE-2011-1018" title="CVE-2011-1018" type="cve"/>
  </references>
  <description>The update of logwatch improves the input validation.
Before it was possible by an attacker to use special
characters in a log-file to execute arbitrary commands.
(CVSS v2 Base Score: 8.5 (AV:N/AC:M/Au:S/C:C/I:C/A:C))
</description>
  <pkglist>
    <collection>
        <package name="logwatch" arch="noarch" version="7.3.6" release="73.5.1">
          <filename>logwatch-7.3.6-73.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a1e82bae773b3acde8a96d83d1c3f7af"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3971">
  <id>postgresql</id>
  <title>postgresql security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1297940857"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660478" id="660478" title="bug number 660478" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4015" id="CVE-2010-4015" title="CVE-2010-4015" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4014" id="CVE-2010-4014" title="CVE-2010-4014" type="cve"/>
  </references>
  <description>A buffer overflow in the intarray module potentially
allowed attackers to execute arbitrary code as the user
running postgresql (CVE-2010-4015:CVSS v2 Base Score: 4.9).
Additionally a possible log forging problem was fixed too.
(CVE-2010-4014)
</description>
  <pkglist>
    <collection>
        <package name="postgresql" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-contrib" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-contrib-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-contrib" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-contrib-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-devel" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-devel-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-devel" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-devel-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-docs" arch="noarch" version="8.4.7" release="0.2.1">
          <filename>postgresql-docs-8.4.7-0.2.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-libs" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-libs-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-libs" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-libs-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-libs-32bit" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-libs-32bit-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-plperl" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-plperl-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-plperl" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-plperl-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-plpython" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-plpython-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-plpython" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-plpython-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-pltcl" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-pltcl-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-pltcl" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-pltcl-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql-server" arch="i586" version="8.4.7" release="0.2.1">
          <filename>postgresql-server-8.4.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="postgresql-server" arch="x86_64" version="8.4.7" release="0.2.1">
          <filename>postgresql-server-8.4.7-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="adb565d77b411d0dfcb59e652ffb2251"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3758">
  <id>libxml2</id>
  <title>libxml2: fixing Xpath processing (CVE-2010-4494)</title>
  <release>openSUSE 11.3</release>
  <issued date="1294149009"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661471" id="661471" title="bug number 661471" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494" id="CVE-2010-4494" title="CVE-2010-4494" type="cve"/>
  </references>
  <description>A bug in the Xpath processing inside libxml2 has been
fixed. CVE-2010-4494 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="libxml2" arch="i586" version="2.7.7" release="4.5.1">
          <filename>libxml2-2.7.7-4.5.1.i586.rpm</filename>
        </package>
        <package name="libxml2" arch="x86_64" version="2.7.7" release="4.5.1">
          <filename>libxml2-2.7.7-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-32bit" arch="x86_64" version="2.7.7" release="4.5.1">
          <filename>libxml2-32bit-2.7.7-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-devel" arch="i586" version="2.7.7" release="4.5.1">
          <filename>libxml2-devel-2.7.7-4.5.1.i586.rpm</filename>
        </package>
        <package name="libxml2-devel" arch="x86_64" version="2.7.7" release="4.5.1">
          <filename>libxml2-devel-2.7.7-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-devel-32bit" arch="x86_64" version="2.7.7" release="4.5.1">
          <filename>libxml2-devel-32bit-2.7.7-4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-doc" arch="noarch" version="2.7.7" release="4.5.1">
          <filename>libxml2-doc-2.7.7-4.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5d434b6485c2304298f396868f22e809"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4184">
  <id>fuse</id>
  <title>fuse security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298911936"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651598" id="651598" title="bug number 651598" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=668820" id="668820" title="bug number 668820" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=670585" id="670585" title="bug number 670585" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0541" id="CVE-2011-0541" title="CVE-2011-0541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3879" id="CVE-2010-3879" title="CVE-2010-3879" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0543" id="CVE-2011-0543" title="CVE-2011-0543" type="cve"/>
  </references>
  <description>Race conditions in fuse allowed unprivileged users to
umount arbitrary mount points
(CVE-2011-0541,CVE-2010-3879,CVE-2011-0543).
</description>
  <pkglist>
    <collection>
        <package name="fuse" arch="i586" version="2.8.5" release="2.7.1">
          <filename>fuse-2.8.5-2.7.1.i586.rpm</filename>
        </package>
        <package name="fuse" arch="x86_64" version="2.8.5" release="2.7.1">
          <filename>fuse-2.8.5-2.7.1.x86_64.rpm</filename>
        </package>
        <package name="fuse-devel" arch="i586" version="2.8.5" release="2.7.1">
          <filename>fuse-devel-2.8.5-2.7.1.i586.rpm</filename>
        </package>
        <package name="fuse-devel" arch="x86_64" version="2.8.5" release="2.7.1">
          <filename>fuse-devel-2.8.5-2.7.1.x86_64.rpm</filename>
        </package>
        <package name="fuse-devel-static" arch="i586" version="2.8.5" release="2.7.1">
          <filename>fuse-devel-static-2.8.5-2.7.1.i586.rpm</filename>
        </package>
        <package name="fuse-devel-static" arch="x86_64" version="2.8.5" release="2.7.1">
          <filename>fuse-devel-static-2.8.5-2.7.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid-devel" arch="i586" version="2.17.2" release="6.3.1">
          <filename>libblkid-devel-2.17.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="libblkid-devel" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libblkid-devel-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid-devel-32bit" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libblkid-devel-32bit-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" arch="i586" version="2.17.2" release="6.3.1">
          <filename>libblkid1-2.17.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="libblkid1" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libblkid1-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1-32bit" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libblkid1-32bit-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfuse2" arch="i586" version="2.8.5" release="2.7.1">
          <filename>libfuse2-2.8.5-2.7.1.i586.rpm</filename>
        </package>
        <package name="libfuse2" arch="x86_64" version="2.8.5" release="2.7.1">
          <filename>libfuse2-2.8.5-2.7.1.x86_64.rpm</filename>
        </package>
        <package name="libfuse2-32bit" arch="x86_64" version="2.8.5" release="2.7.1">
          <filename>libfuse2-32bit-2.8.5-2.7.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid-devel" arch="i586" version="2.17.2" release="6.3.1">
          <filename>libuuid-devel-2.17.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="libuuid-devel" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libuuid-devel-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid-devel-32bit" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libuuid-devel-32bit-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" arch="i586" version="2.17.2" release="6.3.1">
          <filename>libuuid1-2.17.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="libuuid1" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libuuid1-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1-32bit" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>libuuid1-32bit-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" arch="i586" version="2.17.2" release="6.3.1">
          <filename>util-linux-2.17.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="util-linux" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>util-linux-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-lang" arch="noarch" version="2.17.2" release="6.3.1">
          <filename>util-linux-lang-2.17.2-6.3.1.noarch.rpm</filename>
        </package>
        <package name="uuidd" arch="i586" version="2.17.2" release="6.3.1">
          <filename>uuidd-2.17.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="uuidd" arch="x86_64" version="2.17.2" release="6.3.1">
          <filename>uuidd-2.17.2-6.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="980051116d8e822b2468ec9d96dbe8c9"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3810">
  <id>apparmor-parser</id>
  <title>apparmor-parser: parser could generate policy using an unconfined fallback execute transition</title>
  <release>openSUSE 11.3</release>
  <issued date="1294764871"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662928" id="662928" title="bug number 662928" type="bugzilla"/>
  </references>
  <description>Fixed apparmor-parser: The parser could generate a policy
using an unconfined fallback execute transition.
</description>
  <pkglist>
    <collection>
        <package name="apparmor-parser" arch="i586" version="2.3.1" release="22.5.1">
          <filename>apparmor-parser-2.3.1-22.5.1.i586.rpm</filename>
        </package>
        <package name="apparmor-parser" arch="x86_64" version="2.3.1" release="22.5.1">
          <filename>apparmor-parser-2.3.1-22.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5354f0c1ce553e93cac1a450d27fd370"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4274">
  <id>quagga</id>
  <title>quagga: remote denial of service</title>
  <release>openSUSE 11.3</release>
  <issued date="1301588405"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654270" id="654270" title="bug number 654270" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1674" id="CVE-2010-1674" title="CVE-2010-1674" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1675" id="CVE-2010-1675" title="CVE-2010-1675" type="cve"/>
  </references>
  <description>This security update of quagga fixes:
- CVE-2010-1674: Direct BGP peers can send malformed
  extended communities which lead to a NULL pointer
  dereference.
- CVE-2010-1675: A malformed AS_PATHLIMIT path attribute
  will cause a session reset in Quagga. This malformed
  package is forwarded by other routers and can be used to
  take &quot;all&quot; Quagga routers off the Internet with one
  single announcement.
</description>
  <pkglist>
    <collection>
        <package name="quagga" arch="i586" version="0.99.17" release="1.5.1">
          <filename>quagga-0.99.17-1.5.1.i586.rpm</filename>
        </package>
        <package name="quagga" arch="x86_64" version="0.99.17" release="1.5.1">
          <filename>quagga-0.99.17-1.5.1.x86_64.rpm</filename>
        </package>
        <package name="quagga-devel" arch="i586" version="0.99.17" release="1.5.1">
          <filename>quagga-devel-0.99.17-1.5.1.i586.rpm</filename>
        </package>
        <package name="quagga-devel" arch="x86_64" version="0.99.17" release="1.5.1">
          <filename>quagga-devel-0.99.17-1.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="31570a6579bd3f777114a502ce59c28e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4250">
  <id>gdm</id>
  <title>gdm security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1301524963"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679786" id="679786" title="bug number 679786" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0727" id="CVE-2011-0727" title="CVE-2011-0727" type="cve"/>
  </references>
  <description>Local users could trick gdm into changing ownership of
arbitrary files by placing symlinks in the user session
cache (CVE-2011-0727).
</description>
  <pkglist>
    <collection>
        <package name="gdm" arch="i586" version="2.30.2" release="6.3.1">
          <filename>gdm-2.30.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="gdm" arch="x86_64" version="2.30.2" release="6.3.1">
          <filename>gdm-2.30.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="gdm-branding-upstream" arch="i586" version="2.30.2" release="6.3.1">
          <filename>gdm-branding-upstream-2.30.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="gdm-branding-upstream" arch="x86_64" version="2.30.2" release="6.3.1">
          <filename>gdm-branding-upstream-2.30.2-6.3.1.x86_64.rpm</filename>
        </package>
        <package name="gdm-lang" arch="noarch" version="2.30.2" release="6.3.1">
          <filename>gdm-lang-2.30.2-6.3.1.noarch.rpm</filename>
        </package>
        <package name="gnome-applets-gdm" arch="i586" version="2.30.2" release="6.3.1">
          <filename>gnome-applets-gdm-2.30.2-6.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-applets-gdm" arch="x86_64" version="2.30.2" release="6.3.1">
          <filename>gnome-applets-gdm-2.30.2-6.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b3781af589fc32f2bed22cd0b798f489"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4119">
  <id>apache2-mod_php5</id>
  <title>php5: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299691550"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655968" id="655968" title="bug number 655968" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=656523" id="656523" title="bug number 656523" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660102" id="660102" title="bug number 660102" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=666512" id="666512" title="bug number 666512" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669189" id="669189" title="bug number 669189" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669188" id="669188" title="bug number 669188" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669162" id="669162" title="bug number 669162" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672933" id="672933" title="bug number 672933" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671710" id="671710" title="bug number 671710" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662932" id="662932" title="bug number 662932" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4150" id="CVE-2010-4150" title="CVE-2010-4150" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3709" id="CVE-2010-3709" title="CVE-2010-3709" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4697" id="CVE-2010-4697" title="CVE-2010-4697" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4698" id="CVE-2010-4698" title="CVE-2010-4698" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4699" id="CVE-2010-4699" title="CVE-2010-4699" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4700" id="CVE-2010-4700" title="CVE-2010-4700" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0755" id="CVE-2011-0755" title="CVE-2011-0755" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0753" id="CVE-2011-0753" title="CVE-2011-0753" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0752" id="CVE-2011-0752" title="CVE-2011-0752" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0420" id="CVE-2011-0420" title="CVE-2011-0420" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0708" id="CVE-2011-0708" title="CVE-2011-0708" type="cve"/>
  </references>
  <description>php5 was updated to fix several security issues.
(CVE-2010-3709, CVE-2010-4150, CVE-2010-4645,
CVE-2010-4697, CVE-2010-4698, CVE-2010-4699, CVE-2010-4700,
CVE-2011-0752, CVE-2011-0753, CVE-2011-0755,CVE-2011-0708,
CVE-2011-0420)
</description>
  <pkglist>
    <collection>
        <package name="apache2-mod_php5" arch="i586" version="5.3.3" release="0.17.1">
          <filename>apache2-mod_php5-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="apache2-mod_php5" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>apache2-mod_php5-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-bcmath-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-bcmath-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-bz2" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-bz2-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-bz2" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-bz2-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-calendar" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-calendar-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-calendar" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-calendar-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ctype" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-ctype-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-ctype" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-ctype-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-curl" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-curl-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-curl" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-curl-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-dba" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-dba-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-dba" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-dba-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-devel" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-devel-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-devel" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-devel-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-dom" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-dom-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-dom" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-dom-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-enchant" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-enchant-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-enchant" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-enchant-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-exif" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-exif-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-exif" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-exif-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-fastcgi-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-fastcgi-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-fileinfo-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-fileinfo-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ftp" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-ftp-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-ftp" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-ftp-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gd" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-gd-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-gd" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-gd-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gettext" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-gettext-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-gettext" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-gettext-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gmp" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-gmp-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-gmp" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-gmp-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-hash" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-hash-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-hash" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-hash-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-iconv" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-iconv-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-iconv" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-iconv-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-imap" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-imap-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-imap" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-imap-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-intl" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-intl-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-intl" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-intl-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-json" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-json-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-json" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-json-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ldap" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-ldap-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-ldap" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-ldap-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-mbstring-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-mbstring-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-mcrypt-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-mcrypt-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mysql" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-mysql-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-mysql" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-mysql-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-odbc" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-odbc-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-odbc" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-odbc-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-openssl" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-openssl-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-openssl" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-openssl-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-pcntl-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-pcntl-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pdo" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-pdo-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-pdo" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-pdo-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pear" arch="noarch" version="5.3.3" release="0.17.1">
          <filename>php5-pear-5.3.3-0.17.1.noarch.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-pgsql-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-pgsql-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-phar" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-phar-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-phar" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-phar-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-posix" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-posix-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-posix" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-posix-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pspell" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-pspell-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-pspell" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-pspell-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-readline" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-readline-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-readline" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-readline-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-shmop" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-shmop-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-shmop" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-shmop-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-snmp" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-snmp-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-snmp" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-snmp-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-soap" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-soap-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-soap" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-soap-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sockets" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-sockets-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-sockets" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-sockets-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-sqlite-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-sqlite-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-suhosin-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-suhosin-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-sysvmsg-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-sysvmsg-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-sysvsem-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-sysvsem-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-sysvshm-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-sysvshm-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-tidy" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-tidy-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-tidy" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-tidy-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-tokenizer-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-tokenizer-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-wddx" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-wddx-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-wddx" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-wddx-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-xmlreader-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-xmlreader-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-xmlrpc-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-xmlrpc-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-xmlwriter-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-xmlwriter-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xsl" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-xsl-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-xsl" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-xsl-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-zip" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-zip-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-zip" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-zip-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
        <package name="php5-zlib" arch="i586" version="5.3.3" release="0.17.1">
          <filename>php5-zlib-5.3.3-0.17.1.i586.rpm</filename>
        </package>
        <package name="php5-zlib" arch="x86_64" version="5.3.3" release="0.17.1">
          <filename>php5-zlib-5.3.3-0.17.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="91ad8179619f085b1bff0b74be23860a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4002">
  <id>evince</id>
  <title>evince: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300354937"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671064" id="671064" title="bug number 671064" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0433" id="CVE-2011-0433" title="CVE-2011-0433" type="cve"/>
  </references>
  <description>This update of evince fixes a buffer overflow in
linetoken(). (CVE-2011-0433)
</description>
  <pkglist>
    <collection>
        <package name="evince" arch="i586" version="2.30.1" release="3.7.1">
          <filename>evince-2.30.1-3.7.1.i586.rpm</filename>
        </package>
        <package name="evince" arch="x86_64" version="2.30.1" release="3.7.1">
          <filename>evince-2.30.1-3.7.1.x86_64.rpm</filename>
        </package>
        <package name="evince-devel" arch="i586" version="2.30.1" release="3.7.1">
          <filename>evince-devel-2.30.1-3.7.1.i586.rpm</filename>
        </package>
        <package name="evince-devel" arch="x86_64" version="2.30.1" release="3.7.1">
          <filename>evince-devel-2.30.1-3.7.1.x86_64.rpm</filename>
        </package>
        <package name="evince-lang" arch="noarch" version="2.30.1" release="3.7.1">
          <filename>evince-lang-2.30.1-3.7.1.noarch.rpm</filename>
        </package>
        <package name="nautilus-evince" arch="i586" version="2.30.1" release="3.7.1">
          <filename>nautilus-evince-2.30.1-3.7.1.i586.rpm</filename>
        </package>
        <package name="nautilus-evince" arch="x86_64" version="2.30.1" release="3.7.1">
          <filename>nautilus-evince-2.30.1-3.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9271581e6f273a200a34c5607159ac28"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4225">
  <id>kdelibs4</id>
  <title>kdelibs4 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1301049869"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669222" id="669222" title="bug number 669222" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1094" id="CVE-2011-1094" title="CVE-2011-1094" type="cve"/>
  </references>
  <description>KSSL did not properly verify the host name of a certificate
if the certificate was issued for an IP address
(CVE-2011-1094).
</description>
  <pkglist>
    <collection>
        <package name="kdelibs4" arch="i586" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="i586" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="i586" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-core-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-core-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="i586" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-doc-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>kdelibs4-doc-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4" arch="i586" version="4.4.4" release="3.4.1">
          <filename>libkde4-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="libkde4" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libkde4-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-32bit" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libkde4-32bit-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="i586" version="4.4.4" release="3.4.1">
          <filename>libkde4-devel-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libkde4-devel-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4" arch="i586" version="4.4.4" release="3.4.1">
          <filename>libkdecore4-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libkdecore4-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-32bit" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libkdecore4-32bit-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="i586" version="4.4.4" release="3.4.1">
          <filename>libkdecore4-devel-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libkdecore4-devel-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="i586" version="4.4.4" release="3.4.1">
          <filename>libksuseinstall-devel-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libksuseinstall-devel-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="i586" version="4.4.4" release="3.4.1">
          <filename>libksuseinstall1-4.4.4-3.4.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libksuseinstall1-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1-32bit" arch="x86_64" version="4.4.4" release="3.4.1">
          <filename>libksuseinstall1-32bit-4.4.4-3.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b669058739aa03c68e584cf741d7488a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4306">
  <id>xorg-x11</id>
  <title>xorg-x11 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302046035"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674733" id="674733" title="bug number 674733" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465" id="CVE-2011-0465" title="CVE-2011-0465" type="cve"/>
  </references>
  <description>Remote attackers could execute arbitrary commands as root
by assigning specially crafted hostnames to X11 clients via
XDMCP (CVE-2011-0465).
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11" arch="i586" version="7.5" release="12.3.1">
          <filename>xorg-x11-7.5-12.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11" arch="x86_64" version="7.5" release="12.3.1">
          <filename>xorg-x11-7.5-12.3.1.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-xauth" arch="i586" version="7.5" release="12.3.1">
          <filename>xorg-x11-xauth-7.5-12.3.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-xauth" arch="x86_64" version="7.5" release="12.3.1">
          <filename>xorg-x11-xauth-7.5-12.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5a790e6448f5df8668d64d463dc93348"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4237">
  <id>dbus-1-glib</id>
  <title>dbus-1-glibsecurity update</title>
  <release>openSUSE 11.3</release>
  <issued date="1301059548"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628607" id="628607" title="bug number 628607" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" id="CVE-2010-1172" title="CVE-2010-1172" type="cve"/>
  </references>
  <description>dbus-glib allowed local users to write properties that were
exported read-only via dbus (CVE-2010-1172).
</description>
  <pkglist>
    <collection>
        <package name="dbus-1-glib" arch="i586" version="0.86" release="2.3.1">
          <filename>dbus-1-glib-0.86-2.3.1.i586.rpm</filename>
        </package>
        <package name="dbus-1-glib" arch="x86_64" version="0.86" release="2.3.1">
          <filename>dbus-1-glib-0.86-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-glib-32bit" arch="x86_64" version="0.86" release="2.3.1">
          <filename>dbus-1-glib-32bit-0.86-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-glib-devel" arch="i586" version="0.86" release="2.3.1">
          <filename>dbus-1-glib-devel-0.86-2.3.1.i586.rpm</filename>
        </package>
        <package name="dbus-1-glib-devel" arch="x86_64" version="0.86" release="2.3.1">
          <filename>dbus-1-glib-devel-0.86-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-glib-doc" arch="noarch" version="0.86" release="2.3.1">
          <filename>dbus-1-glib-doc-0.86-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c5a5662d3a662205fd610bc206306876"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4009">
  <id>telepathy-gabble</id>
  <title>telepathy-gabble: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298385344"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673257" id="673257" title="bug number 673257" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1000" id="CVE-2011-1000" title="CVE-2011-1000" type="cve"/>
  </references>
  <description>This update of telepathy-gabble is validating the origin of
a google:jingleinfo update message now. Not validating the
origin could be used to intercept calls. CVE-2011-1000:
CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N): Input
Validation (CWE-20)
</description>
  <pkglist>
    <collection>
        <package name="telepathy-gabble" arch="i586" version="0.9.11" release="2.3.1">
          <filename>telepathy-gabble-0.9.11-2.3.1.i586.rpm</filename>
        </package>
        <package name="telepathy-gabble" arch="x86_64" version="0.9.11" release="2.3.1">
          <filename>telepathy-gabble-0.9.11-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="telepathy-gabble-doc" arch="i586" version="0.9.11" release="2.3.1">
          <filename>telepathy-gabble-doc-0.9.11-2.3.1.i586.rpm</filename>
        </package>
        <package name="telepathy-gabble-doc" arch="x86_64" version="0.9.11" release="2.3.1">
          <filename>telepathy-gabble-doc-0.9.11-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d9c571856b1f69a3c64bbbb2e223f366"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4164">
  <id>libvirt</id>
  <title>libvirt security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300313305"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678406" id="678406" title="bug number 678406" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1146" id="CVE-2011-1146" title="CVE-2011-1146" type="cve"/>
  </references>
  <description>several API calls did not honor the read-only flag
connections. Attackers could exploit that to modify the
state of the system or potentially execute code
(CVE-2011-1146).
</description>
  <pkglist>
    <collection>
        <package name="libvirt" arch="i586" version="0.8.1" release="4.6.2">
          <filename>libvirt-0.8.1-4.6.2.i586.rpm</filename>
        </package>
        <package name="libvirt" arch="x86_64" version="0.8.1" release="4.6.2">
          <filename>libvirt-0.8.1-4.6.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" arch="i586" version="0.8.1" release="4.6.2">
          <filename>libvirt-client-0.8.1-4.6.2.i586.rpm</filename>
        </package>
        <package name="libvirt-client" arch="x86_64" version="0.8.1" release="4.6.2">
          <filename>libvirt-client-0.8.1-4.6.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="i586" version="0.8.1" release="4.6.2">
          <filename>libvirt-devel-0.8.1-4.6.2.i586.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="x86_64" version="0.8.1" release="4.6.2">
          <filename>libvirt-devel-0.8.1-4.6.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="i586" version="0.8.1" release="4.6.2">
          <filename>libvirt-doc-0.8.1-4.6.2.i586.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="x86_64" version="0.8.1" release="4.6.2">
          <filename>libvirt-doc-0.8.1-4.6.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-python" arch="i586" version="0.8.1" release="4.6.2">
          <filename>libvirt-python-0.8.1-4.6.2.i586.rpm</filename>
        </package>
        <package name="libvirt-python" arch="x86_64" version="0.8.1" release="4.6.2">
          <filename>libvirt-python-0.8.1-4.6.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4b2b721d1b754e85fd46bd42ce5af4fe"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4271">
  <id>mailman</id>
  <title>mailman security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1301588053"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637295" id="637295" title="bug number 637295" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=418589" id="418589" title="bug number 418589" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671745" id="671745" title="bug number 671745" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3089" id="CVE-2010-3089" title="CVE-2010-3089" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0707" id="CVE-2011-0707" title="CVE-2011-0707" type="cve"/>
  </references>
  <description>mailman was updates to version 2.1.14 to fix several
cross-site-scripting (XSS) vulnerabilities (CVE-2011-0707,
CVE-2010-3089).
</description>
  <pkglist>
    <collection>
        <package name="mailman" arch="i586" version="2.1.14" release="6.2.1">
          <filename>mailman-2.1.14-6.2.1.i586.rpm</filename>
        </package>
        <package name="mailman" arch="x86_64" version="2.1.14" release="6.2.1">
          <filename>mailman-2.1.14-6.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="91b363b34cee2ce2b5bd516c1e4f8dbf"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4318">
  <id>libmoon-devel</id>
  <title>moonlight security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302130395"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667077" id="667077" title="bug number 667077" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0989" id="CVE-2011-0989" title="CVE-2011-0989" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0990" id="CVE-2011-0990" title="CVE-2011-0990" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0991" id="CVE-2011-0991" title="CVE-2011-0991" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0992" id="CVE-2011-0992" title="CVE-2011-0992" type="cve"/>
  </references>
  <description>Moonlight was prone to several security problems:

CVE-2011-0989: modification of read-only values via
RuntimeHelpers.InitializeArray CVE-2011-0990: buffer
overflow due to race condition in in Array.FastCopy
CVE-2011-0991: use-after-free due to  DynamicMethod
resurrection CVE-2011-0992: information leak due to
improper thread finalization
</description>
  <pkglist>
    <collection>
        <package name="libmoon-devel" arch="i586" version="2.4.1" release="0.2.1">
          <filename>libmoon-devel-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="libmoon-devel" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>libmoon-devel-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libmoon0" arch="i586" version="2.4.1" release="0.2.1">
          <filename>libmoon0-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="libmoon0" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>libmoon0-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-desktop" arch="i586" version="2.4.1" release="0.2.1">
          <filename>moonlight-desktop-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="moonlight-desktop" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>moonlight-desktop-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-desktop-devel" arch="i586" version="2.4.1" release="0.2.1">
          <filename>moonlight-desktop-devel-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="moonlight-desktop-devel" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>moonlight-desktop-devel-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-plugin" arch="i586" version="2.4.1" release="0.2.1">
          <filename>moonlight-plugin-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="moonlight-plugin" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>moonlight-plugin-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-tools" arch="i586" version="2.4.1" release="0.2.1">
          <filename>moonlight-tools-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="moonlight-tools" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>moonlight-tools-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="moonlight-web-devel" arch="i586" version="2.4.1" release="0.2.1">
          <filename>moonlight-web-devel-2.4.1-0.2.1.i586.rpm</filename>
        </package>
        <package name="moonlight-web-devel" arch="x86_64" version="2.4.1" release="0.2.1">
          <filename>moonlight-web-devel-2.4.1-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a1c2bff8830482988670093dc6b9a18a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4320">
  <id>python-feedparser</id>
  <title>python-feedparser security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302017481"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=680074" id="680074" title="bug number 680074" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1156" id="CVE-2011-1156" title="CVE-2011-1156" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1157" id="CVE-2011-1157" title="CVE-2011-1157" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1158" id="CVE-2011-1158" title="CVE-2011-1158" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5065" id="CVE-2009-5065" title="CVE-2009-5065" type="cve"/>
  </references>
  <description>Various issues in python-feedparser have been fixed,
including fixes for crashes due to missing input
sanitizaion and a XSS vulnerability. CVE-2011-1156,
CVE-2011-1157, CVE-2011-1158 and CVE-2009-5065 have been
assigned to these issues.
</description>
  <pkglist>
    <collection>
        <package name="python-feedparser" arch="noarch" version="4.1" release="6.3.1">
          <filename>python-feedparser-4.1-6.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8c390bdc26a1e65a905a05fe7b953842"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4087">
  <id>libcgroup-devel</id>
  <title>libcgroup security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299247929"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675506" id="675506" title="bug number 675506" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675048" id="675048" title="bug number 675048" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1006" id="CVE-2011-1006" title="CVE-2011-1006" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1022" id="CVE-2011-1022" title="CVE-2011-1022" type="cve"/>
  </references>
  <description>libcgroup suffered from a heap based buffer overflow
(CVE-2011-1006).

The cgrulesengd daemon did not verify the origin of netlink
messages, allowing local users to spoof events
(CVE-2011-1022).
</description>
  <pkglist>
    <collection>
        <package name="libcgroup-devel" arch="i586" version="0.36.2" release="2.3.1">
          <filename>libcgroup-devel-0.36.2-2.3.1.i586.rpm</filename>
        </package>
        <package name="libcgroup-devel" arch="x86_64" version="0.36.2" release="2.3.1">
          <filename>libcgroup-devel-0.36.2-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcgroup1" arch="i586" version="0.36.2" release="2.3.1">
          <filename>libcgroup1-0.36.2-2.3.1.i586.rpm</filename>
        </package>
        <package name="libcgroup1" arch="x86_64" version="0.36.2" release="2.3.1">
          <filename>libcgroup1-0.36.2-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcgroup1-32bit" arch="x86_64" version="0.36.2" release="2.3.1">
          <filename>libcgroup1-32bit-0.36.2-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2e72ada925fdd0e351ba60bf02b6d29c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4312">
  <id>NetworkManager</id>
  <title>NetworkManager security update (CVE-2010-1172).</title>
  <release>openSUSE 11.3</release>
  <issued date="1301063744"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628607" id="628607" title="bug number 628607" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" id="CVE-2010-1172" title="CVE-2010-1172" type="cve"/>
  </references>
  <description>dbus-glib allowed local users to write properties that were
exported read-only via dbus (CVE-2010-1172).
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager" arch="i586" version="0.8" release="8.2.3">
          <filename>NetworkManager-0.8-8.2.3.i586.rpm</filename>
        </package>
        <package name="NetworkManager" arch="x86_64" version="0.8" release="8.2.3">
          <filename>NetworkManager-0.8-8.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="i586" version="0.8" release="8.2.3">
          <filename>NetworkManager-devel-0.8-8.2.3.i586.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="x86_64" version="0.8" release="8.2.3">
          <filename>NetworkManager-devel-0.8-8.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="i586" version="0.8" release="8.2.3">
          <filename>NetworkManager-doc-0.8-8.2.3.i586.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="x86_64" version="0.8" release="8.2.3">
          <filename>NetworkManager-doc-0.8-8.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="i586" version="0.8" release="8.2.3">
          <filename>NetworkManager-glib-0.8-8.2.3.i586.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="x86_64" version="0.8" release="8.2.3">
          <filename>NetworkManager-glib-0.8-8.2.3.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d643968fe884b0ae2ec3258842594406"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4321">
  <id>libvirt</id>
  <title>libvirt security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302189568"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=684877" id="684877" title="bug number 684877" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1486" id="CVE-2011-1486" title="CVE-2011-1486" type="cve"/>
  </references>
  <description>libvirtd could mix errors from several threads leading to a
crash (CVE-2011-1486).
</description>
  <pkglist>
    <collection>
        <package name="libvirt" arch="i586" version="0.8.1" release="4.8.1">
          <filename>libvirt-0.8.1-4.8.1.i586.rpm</filename>
        </package>
        <package name="libvirt" arch="x86_64" version="0.8.1" release="4.8.1">
          <filename>libvirt-0.8.1-4.8.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" arch="i586" version="0.8.1" release="4.8.1">
          <filename>libvirt-client-0.8.1-4.8.1.i586.rpm</filename>
        </package>
        <package name="libvirt-client" arch="x86_64" version="0.8.1" release="4.8.1">
          <filename>libvirt-client-0.8.1-4.8.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="i586" version="0.8.1" release="4.8.1">
          <filename>libvirt-devel-0.8.1-4.8.1.i586.rpm</filename>
        </package>
        <package name="libvirt-devel" arch="x86_64" version="0.8.1" release="4.8.1">
          <filename>libvirt-devel-0.8.1-4.8.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="i586" version="0.8.1" release="4.8.1">
          <filename>libvirt-doc-0.8.1-4.8.1.i586.rpm</filename>
        </package>
        <package name="libvirt-doc" arch="x86_64" version="0.8.1" release="4.8.1">
          <filename>libvirt-doc-0.8.1-4.8.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-python" arch="i586" version="0.8.1" release="4.8.1">
          <filename>libvirt-python-0.8.1-4.8.1.i586.rpm</filename>
        </package>
        <package name="libvirt-python" arch="x86_64" version="0.8.1" release="4.8.1">
          <filename>libvirt-python-0.8.1-4.8.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e9fef1e2654d61da2a2d71bc5080cda5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4314">
  <id>dhcp</id>
  <title>dhcp security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302128559"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675052" id="675052" title="bug number 675052" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673792" id="673792" title="bug number 673792" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997" id="CVE-2011-0997" title="CVE-2011-0997" type="cve"/>
  </references>
  <description>A rogue dhcp server could instruct clients to use a host
name that contains shell meta characters. Since many
scripts in the system do not expect unusal characters in
the system's host name the dhcp client needs to sanitize
the host name offered by the server (CVE-2011-0997).
</description>
  <pkglist>
    <collection>
        <package name="dhcp" arch="i586" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-4.1.2.ESV.1-0.6.1.i586.rpm</filename>
        </package>
        <package name="dhcp" arch="x86_64" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-4.1.2.ESV.1-0.6.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-client" arch="i586" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-client-4.1.2.ESV.1-0.6.1.i586.rpm</filename>
        </package>
        <package name="dhcp-client" arch="x86_64" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-client-4.1.2.ESV.1-0.6.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="i586" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-devel-4.1.2.ESV.1-0.6.1.i586.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="x86_64" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-devel-4.1.2.ESV.1-0.6.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="i586" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-doc-4.1.2.ESV.1-0.6.1.i586.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="x86_64" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-doc-4.1.2.ESV.1-0.6.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="i586" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-relay-4.1.2.ESV.1-0.6.1.i586.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="x86_64" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-relay-4.1.2.ESV.1-0.6.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-server" arch="i586" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-server-4.1.2.ESV.1-0.6.1.i586.rpm</filename>
        </package>
        <package name="dhcp-server" arch="x86_64" version="4.1.2.ESV.1" release="0.6.1">
          <filename>dhcp-server-4.1.2.ESV.1-0.6.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="de4797f9c94f3b0ff7de22fe56cce72b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4291">
  <id>pm-utils</id>
  <title>pm-utils: This update fixes a bug in upower</title>
  <release>openSUSE 11.3</release>
  <issued date="1301957714"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=670074" id="670074" title="bug number 670074" type="bugzilla"/>
  </references>
  <description>Powersave uses upower which is not working correctly, so
the battery and AC-adapter status don't work. Fixed by this
update.
</description>
  <pkglist>
    <collection>
        <package name="pm-utils" arch="i586" version="1.3.0" release="10.3.1">
          <filename>pm-utils-1.3.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="pm-utils" arch="x86_64" version="1.3.0" release="10.3.1">
          <filename>pm-utils-1.3.0-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="pm-utils-ndiswrapper" arch="i586" version="1.3.0" release="10.3.1">
          <filename>pm-utils-ndiswrapper-1.3.0-10.3.1.i586.rpm</filename>
        </package>
        <package name="pm-utils-ndiswrapper" arch="x86_64" version="1.3.0" release="10.3.1">
          <filename>pm-utils-ndiswrapper-1.3.0-10.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4e53c769f0f974cd9fb2a8715cf909eb"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4339">
  <id>wireshark</id>
  <title>wireshark security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302511642"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678567" id="678567" title="bug number 678567" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678568" id="678568" title="bug number 678568" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678569" id="678569" title="bug number 678569" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678571" id="678571" title="bug number 678571" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1138" id="CVE-2011-1138" title="CVE-2011-1138" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1139" id="CVE-2011-1139" title="CVE-2011-1139" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1140" id="CVE-2011-1140" title="CVE-2011-1140" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1143" id="CVE-2011-1143" title="CVE-2011-1143" type="cve"/>
  </references>
  <description>Wireshark was updated to version 1.4.4 to fix several
security issues (CVE-2011-1138, CVE-2011-1139,
CVE-2011-1140 CVE-2011-1143).
</description>
  <pkglist>
    <collection>
        <package name="wireshark" arch="i586" version="1.4.4" release="0.2.1">
          <filename>wireshark-1.4.4-0.2.1.i586.rpm</filename>
        </package>
        <package name="wireshark" arch="x86_64" version="1.4.4" release="0.2.1">
          <filename>wireshark-1.4.4-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="wireshark-devel" arch="i586" version="1.4.4" release="0.2.1">
          <filename>wireshark-devel-1.4.4-0.2.1.i586.rpm</filename>
        </package>
        <package name="wireshark-devel" arch="x86_64" version="1.4.4" release="0.2.1">
          <filename>wireshark-devel-1.4.4-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a2a083e4666e86e24dc663c364c5bc33"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4357">
  <id>dhcpcd</id>
  <title>dhcp security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302530703"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675052" id="675052" title="bug number 675052" type="bugzilla"/>
  </references>
  <description>A rogue dhcp server could instruct clients to use a host
name that contains shell meta characters. Since many
scripts in the system do not expect unusal characters in
the system's host name the dhcp client needs to sanitize
the host name offered by the server (CVE-2011-0997).
</description>
  <pkglist>
    <collection>
        <package name="dhcpcd" arch="i586" version="3.2.3" release="61.64.1">
          <filename>dhcpcd-3.2.3-61.64.1.i586.rpm</filename>
        </package>
        <package name="dhcpcd" arch="x86_64" version="3.2.3" release="61.64.1">
          <filename>dhcpcd-3.2.3-61.64.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="bb2c9e2bf7d4fce6f9c1cea63f88604b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4303">
  <id>nbd</id>
  <title>nbd: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302005163"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674281" id="674281" title="bug number 674281" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0530" id="CVE-2011-0530" title="CVE-2011-0530" type="cve"/>
  </references>
  <description>Nbd was updated to fix a buffer overflow in the mainloop()
function of nbd-server.c. This vulnerability can be
exploited by remote attackers via long requests to execute
arbitrary code.  (CVE-2011-0530: CVSS v2 Base Score: 7.5
(AV:N/AC:L/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119))
</description>
  <pkglist>
    <collection>
        <package name="nbd" arch="i586" version="2.9.20" release="1.5.1">
          <filename>nbd-2.9.20-1.5.1.i586.rpm</filename>
        </package>
        <package name="nbd" arch="x86_64" version="2.9.20" release="1.5.1">
          <filename>nbd-2.9.20-1.5.1.x86_64.rpm</filename>
        </package>
        <package name="nbd-doc" arch="i586" version="2.9.20" release="1.5.1">
          <filename>nbd-doc-2.9.20-1.5.1.i586.rpm</filename>
        </package>
        <package name="nbd-doc" arch="x86_64" version="2.9.20" release="1.5.1">
          <filename>nbd-doc-2.9.20-1.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="410ac699d1d301dbc997f23677f5cf85"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4352">
  <id>libmodplug</id>
  <title>Fixing libmodplug buffer overflow (CVE-2011-1574).</title>
  <release>openSUSE 11.3</release>
  <issued date="1302597402"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=686624" id="686624" title="bug number 686624" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1574" id="CVE-2011-1574" title="CVE-2011-1574" type="cve"/>
  </references>
  <description>Libmodplug is vulnerable to a stack based buffer overflow
when handling malicious S3M media files. CVE-2011-1574 has
been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="libmodplug-devel" arch="i586" version="0.8.7" release="7.3.1">
          <filename>libmodplug-devel-0.8.7-7.3.1.i586.rpm</filename>
        </package>
        <package name="libmodplug-devel" arch="x86_64" version="0.8.7" release="7.3.1">
          <filename>libmodplug-devel-0.8.7-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmodplug0" arch="i586" version="0.8.7" release="7.3.1">
          <filename>libmodplug0-0.8.7-7.3.1.i586.rpm</filename>
        </package>
        <package name="libmodplug0" arch="x86_64" version="0.8.7" release="7.3.1">
          <filename>libmodplug0-0.8.7-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmodplug0-32bit" arch="x86_64" version="0.8.7" release="7.3.1">
          <filename>libmodplug0-32bit-0.8.7-7.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2c26c7b0408c91c9e2546c046db16ad5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3953">
  <id>sysconfig</id>
  <title>ifcfg-* file permission fix</title>
  <release>openSUSE 11.3</release>
  <issued date="1297740180"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=670871" id="670871" title="bug number 670871" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637183" id="637183" title="bug number 637183" type="bugzilla"/>
  </references>
  <description>This update fixes the file permissions for ifcfg-* files.
(For 11.2 this update also fixes bnc#637183)
</description>
  <pkglist>
    <collection>
        <package name="sysconfig" arch="i586" version="0.73.7" release="2.7.1">
          <filename>sysconfig-0.73.7-2.7.1.i586.rpm</filename>
        </package>
        <package name="sysconfig" arch="x86_64" version="0.73.7" release="2.7.1">
          <filename>sysconfig-0.73.7-2.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="599e58d17aa27f5a63186a0e47be999e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4373">
  <id>krb5</id>
  <title>krb5 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302791482"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=687469" id="687469" title="bug number 687469" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0285" id="CVE-2011-0285" title="CVE-2011-0285" type="cve"/>
  </references>
  <description>A remote attacker may be able to make kadmind free an
invalid pointer, leading to a crash of the service
(CVE-2011-0285).
</description>
  <pkglist>
    <collection>
        <package name="krb5" arch="i586" version="1.8.1" release="5.9.1">
          <filename>krb5-1.8.1-5.9.1.i586.rpm</filename>
        </package>
        <package name="krb5" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-32bit" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-32bit-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-client" arch="i586" version="1.8.1" release="5.9.1">
          <filename>krb5-client-1.8.1-5.9.1.i586.rpm</filename>
        </package>
        <package name="krb5-client" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-client-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel" arch="i586" version="1.8.1" release="5.9.1">
          <filename>krb5-devel-1.8.1-5.9.1.i586.rpm</filename>
        </package>
        <package name="krb5-devel" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-devel-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-devel-32bit" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-devel-32bit-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="i586" version="1.8.1" release="5.9.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.9.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-plugin-kdb-ldap-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="i586" version="1.8.1" release="5.9.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.9.1.i586.rpm</filename>
        </package>
        <package name="krb5-plugin-preauth-pkinit" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-plugin-preauth-pkinit-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" arch="i586" version="1.8.1" release="5.9.1">
          <filename>krb5-server-1.8.1-5.9.1.i586.rpm</filename>
        </package>
        <package name="krb5-server" arch="x86_64" version="1.8.1" release="5.9.1">
          <filename>krb5-server-1.8.1-5.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="738b6be686cb4004906408a9188c527a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4262">
  <id>OpenOffice_org</id>
  <title>Update of OpenOffice_org to Libreoffice 3.3.1</title>
  <release>openSUSE 11.3</release>
  <issued date="1301525256"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667421" id="667421" title="bug number 667421" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=507768" id="507768" title="bug number 507768" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=515553" id="515553" title="bug number 515553" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=527738" id="527738" title="bug number 527738" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=532920" id="532920" title="bug number 532920" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=569266" id="569266" title="bug number 569266" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=581954" id="581954" title="bug number 581954" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=589624" id="589624" title="bug number 589624" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=594248" id="594248" title="bug number 594248" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=604638" id="604638" title="bug number 604638" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605472" id="605472" title="bug number 605472" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607735" id="607735" title="bug number 607735" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608572" id="608572" title="bug number 608572" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=610921" id="610921" title="bug number 610921" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612263" id="612263" title="bug number 612263" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612902" id="612902" title="bug number 612902" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615000" id="615000" title="bug number 615000" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617593" id="617593" title="bug number 617593" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618846" id="618846" title="bug number 618846" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618864" id="618864" title="bug number 618864" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620924" id="620924" title="bug number 620924" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621116" id="621116" title="bug number 621116" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621472" id="621472" title="bug number 621472" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621739" id="621739" title="bug number 621739" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622920" id="622920" title="bug number 622920" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623352" id="623352" title="bug number 623352" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623944" id="623944" title="bug number 623944" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628098" id="628098" title="bug number 628098" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=628876" id="628876" title="bug number 628876" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629085" id="629085" title="bug number 629085" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629546" id="629546" title="bug number 629546" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=629920" id="629920" title="bug number 629920" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631912" id="631912" title="bug number 631912" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=631993" id="631993" title="bug number 631993" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634260" id="634260" title="bug number 634260" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634478" id="634478" title="bug number 634478" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634517" id="634517" title="bug number 634517" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=634974" id="634974" title="bug number 634974" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636367" id="636367" title="bug number 636367" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=636691" id="636691" title="bug number 636691" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=637925" id="637925" title="bug number 637925" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639288" id="639288" title="bug number 639288" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639297" id="639297" title="bug number 639297" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640112" id="640112" title="bug number 640112" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=640128" id="640128" title="bug number 640128" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=645116" id="645116" title="bug number 645116" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647959" id="647959" title="bug number 647959" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=649506" id="649506" title="bug number 649506" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650049" id="650049" title="bug number 650049" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651250" id="651250" title="bug number 651250" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651964" id="651964" title="bug number 651964" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652204" id="652204" title="bug number 652204" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652364" id="652364" title="bug number 652364" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=652562" id="652562" title="bug number 652562" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653519" id="653519" title="bug number 653519" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654039" id="654039" title="bug number 654039" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=654065" id="654065" title="bug number 654065" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655194" id="655194" title="bug number 655194" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655763" id="655763" title="bug number 655763" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655912" id="655912" title="bug number 655912" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657135" id="657135" title="bug number 657135" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660816" id="660816" title="bug number 660816" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=663245" id="663245" title="bug number 663245" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=664516" id="664516" title="bug number 664516" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665112" id="665112" title="bug number 665112" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=667421" id="667421" title="bug number 667421" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678998" id="678998" title="bug number 678998" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2935" id="CVE-2010-2935" title="CVE-2010-2935" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2936" id="CVE-2010-2936" title="CVE-2010-2936" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3450" id="CVE-2010-3450" title="CVE-2010-3450" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3451" id="CVE-2010-3451" title="CVE-2010-3451" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3452" id="CVE-2010-3452" title="CVE-2010-3452" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3453" id="CVE-2010-3453" title="CVE-2010-3453" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3454" id="CVE-2010-3454" title="CVE-2010-3454" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3689" id="CVE-2010-3689" title="CVE-2010-3689" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3702" id="CVE-2010-3702" title="CVE-2010-3702" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3704" id="CVE-2010-3704" title="CVE-2010-3704" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4253" id="CVE-2010-4253" title="CVE-2010-4253" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4643" id="CVE-2010-4643" title="CVE-2010-4643" type="cve"/>
  </references>
  <description>Maintenance update to LibreOffice-3.3.1. It adds some
interesting features, fixes many bugs, including several
security vulnerabilities.

The previous OpenOffice_org packages are also renamed to
libreoffice.

LibreOffice is continuation of the OpenOffice.org project.
This update replaces the OpenOffice.org installation,
including helper packages, e.g. dictionaries, templates.
The new stuff is backward compatible.

- fixed security bugs:
* PowerPoint document processing (CVE-2010-2935,
  CVE-2010-2936)
* extensions and filter package files (CVE-2010-3450)
* RTF document processing (CVE-2010-3451, CVE-2010-3452)
* Word document processing (CVE-2010-3453, CVE-2010-3454)
* insecure LD_LIBRARY_PATH usage (CVE-2010-3689)
* PDF Import extension resulting from 3rd party library XPD
  (CVE-2010-3702, CVE-2010-3704)
* PNG file processing (CVE-2010-4253)
* TGA file processing (CVE-2010-4643)

- most important changes:
- add conflicts to force migration to libreoffice
- obsolete Quickstarter
- enabled KDE3 support (bnc#678998)
- libreoffice-3.3.1.2 == 3.3.1-rc2 == final
- fixed audio/video playback in presentation (deb#612940,
  bnc#651250)
- fixed non-working input methods in KDE4 (bnc#665112)
- fixed occasional blank first slide (fdo#34533)
- fixed cairo canvas edge count calculation (bnc#647959)
- updated to libreoffice-3.3.1.2 (3.3.1-rc2):
* l10n
* updated some translations
* libs-core
* crashing oosplash and malformed picture (bnc#652562)
* Byref and declare Basic statement (fdo#33964, i#115716)
* fixed BorderLine(2) conversion to SvxBorderLine
  (fdo#34226)
* libs-gui
* getEnglishSearchFontName() searches Takao fonts
* sdk
* fix ODK settings.mk to only set STLPORTLIB if needed
* writer
* rtfExport::HackIsWW8OrHigher(): return true (fdo#33478)
* visual editor destroys formulas containing symbols
  (fdo#32759, fdo#32755)
- enabled KDE4 support for SLED11; LO-3.3.1 fixed the
  remaining annoying bugs
- fixed EMF+ import (bnc#650049)
- updated to libreoffice-3.3.1.1 (3.3.1-rc1):
* artwork
* new MIME type icons for LibreOffice
* bootstrap
* wrong line break with ( (fdo#31271)
* build
* default formula string (n#664516)
* don't version the bundled ct2n extension
* last update of translations from Pootle for 3.3.1
* calc
* import of cell attributes from Excel documents
* incorrect page number in page preview mode (fdo#33155)
* components
* remove pesky on-line registration menu entry (fdo#33112)
* crash on changing position of drawing object in header
  (rhbz#673819)
* extras
* start using technical.dic instead of oracle.dic
  (fdo#31798)
* filters
* pictures DOCX import (bnc#655763)
* parse 'color' property (fdo#33551)
* fix ole object import for writer (DOCX) (fdo#33237)
* help
* OOo -&gt; LibO on Getting Support page (fdo#33249)
* libs-core
* handle css::table::BorderLine
* add preferred Malayalam fonts (fdo#32953)
* fix KDE3 library search order (fdo#32797)
* StarDesktop.terminate macro behaviour (#30879)
* Sun Microsystems -&gt; TDF in desktop file (fdo#31191)
* fixed several crashes around config UNO API (fdo#33994)
* implementation names weren't matching with xcu (fdo#32872)
* improve the check for existence of the localized help
  (fdo#33258)
* libs-extern
* upgrade libwpd to 0.9.1
* libs-gui
* painting of axial gradients (116318)
* fix wrong collation for Catalan language
* crash when moving through database types (fdo#32561)
* paint toolbar handle positioned properly (fdo#32558)
* remove the menu when Left Alt Key was pressed; for GTK
* default currency for Estonia should be Euro (fdo#33160)
* year of era in long format for zh_TW by default
  (fdo#33459)
* writer
* use standard Edit button width of 50 (fdo#32633)
* improve formfield checkbox binary export (bnc#660816)
* infinite loop while exporting some files in DOC/DOCX/RTF
* CTL/Other Default Font (i#25247, i#25561, i#48064,
  i#92341)
- libreoffice-build-3.3.0.4 == 3.3.0-rc4 == final
- updated to libreoffice-3.3.0.4 (3.3-rc4):
* common:
* remove pesky on-line registration menu entry (fdo#33112)
* artwork:
* fix search toolbar up/down search button icons
* base:
* report builder not shows properties on report fields
  (fdo#32742)
* report left/right page margin setting ignored on 64-bit
  (i#116187)
* build:
* updated translations
* calc:
* reverted problematic and dangerous:
* performance of filters with many filtered ranges
  (i#116164)
* obtain correct data range for external references
  (i#115906)
* libs-core:
* FMR crasher (fdo#33099)
* backgrounds for polypolygons in metafile (i#116371)
* unopkg crasher on SLED11-SP1 (bnc#655912)
* libs-gui:
* use sane scrollbar sizes when drawing
* painting of axial gradients (i#116318)
* do not mix unrelated X11 Visuals (fdo#33108)
* avoid GetHelpText() call which can be quite heavy
* writer:
* fields fixes: key inputs, 0-length fields import
  (bnc#657135)
- replaced obsolete SuSEconfig gtk2 module call with
  %%icon_theme_cache_post(un) macros for openSUSE &gt; 11.3
  (bnc#663245)
- updated to libreoffice-3.3.0.3 (3.3-rc3):
* build:
* use libreoffice and lo* wrappers; update man pages
  accordingly
* navigation buttons' patch selection handling (fdo#32380,
  bnc#649506)
* calc:
* bogus check for numerical sheet names (fdo#32570)
* performance of filters with many filtered ranges
  (i#116164)
* obtain correct data range for external references
  (i#115906)
* avoid double-paste when pasting text into cell comment
  (fdo#32572)
* components:
* fix nsplugin for LibreOffice name
* fixing large OOXML files (i#115944)
* layout breakage for KDE, X11 and (possibly) Mac
  (fdo#32133)
* extensions:
* patching xpdf to patchlevel 3.02pl5
* extras:
* creating technical.dic based on src/*.dic
* filters:
* small TGAReader improvement (i#164349)
* PageRange handling in writer PDF export (#116085)
* impress:
* missing font color (rhbz#663857)
* use updated anchor for group shapes (i#115898)
* presentation objects on master pages (i#115993)
* libs-core:
* survive missing window (rhbz#666216)
* better font selection in Japanese locale.
* do not block when launching Firefox (fdo#32427)
* show the license information in a separate dialog
  (fdo#32563)
* make unopkg --suppress-license skip license in all cases
  (fdo#32840)
* libs-extern-sys:
* better XPATH handling (i#164350)
* libs-gui:
* use the initial language if not specified (fdo#32523)
* clean up search cache singleton in correct order
  (rhbz#666088)
* writer:
* undo/redo crash with postits (rhbz#660342)
* rearrange title dialog to get translations (fdo#32633)
* move to the next record during mail merge (fdo#32790)
- updated to libreoffice-3.3.0.2 (3.3-rc2):
* common:
* copy &amp; paste a text formatted cell (i#115825)
* replaced http://www.openoffice.org (fdo#32169)
* bootstrap:
* check if KDE is &gt;= 4.2
* cleanup unfortunate license duplication
* calc:
* ignore preceding spaces when parsing numbers
* make the string 'New Record' localizable (fdo#32209)
* remove trailing spaces too when parsing CSV simple numbers
* display correct record information in Data Form dialog
  (fdo#32196)
* components:
* make the ODMA check box clickable again (fdo#32132)
* fixed the sizes of Tips and Extended tips check boxes
* make 'Reset help agent' button clickable again (fdo#32132)
* extensions:
* fix filled polygons on PDF import
* filters:
* performance for import of XLSX files with drawing objects
  (i#115940)
* impress:
* missing embedded object in ODP export (i#115898)
* grey as default color for native tables in Impress
* graphics on master page cannot be deleted (i#115993)
* libs-core:
* save with the proper DOC variant (fdo#32219)
* removed dupe para ids introduced by copy&amp;paste
* colon needed for LD_LIBRARY_PATH set but empty
* wikihelp: use the right Help ID URL (fdo#32338)
* MySQL Cast(col1 as CHAR) yields error (i#115436)
* import compatibility for enhanced fields names (fdo#32172)
* libs-extern-sys:
* XPATH handling fix
* libs-gui:
* PPTX import crasher (bnc#654065)
* copy&amp;paste problem of metafiles (i#115825)
* force Qt paint system to native (fdo#30991)
* display problem with Vegur font (fdo#31243)
* URIs must be exported as 7bit ASCII (i#115788)
* regression in WMF text rendering (fdo#32236, i#115825)
* postprocess:
* only register EvolutionLocal when EVO support is enabled
  (fdo#32007)
* writer:
* after &quot;data to fields&quot; mail merge does not work
  (fdo#31190)
* missing outline feature in new RTF export filter
  (fdo#32039)
* encoding of Greek letters names with accent in French
  (i#115956)
* build bits:
* better build identification in the about dialog
- updated to libreoffice-3.3.0.1 (3.3-rc1):
* ooo integration:
* Merge commit 'ooo/OOO330_m17' into libreoffice-3-3
* common:
* more RTF import/export fixes
* updated branding for rc
* artwork:
* fixed icons with PNG optimizations
* remove remaining ODF MIME type icons
* bootstrap:
* Add BrOffice artwork / branding support
* Do not install HTML versions of LICENSE and README
* install credits file
* build:
* empty toolbar (bnc#654039)
* pack PostgreSQL driver as .oxt instead of .zip
* calc:
* avoid pasting data from OOo Calc as an OLE object
* scaling factor calculation for drawing layer (i#115313)
* broken filter option in Datapilot (i#115431)
* &quot;Precision as shown&quot; not working if automatic decimal
  (i#115512)
* disable document modify and broadcasting of changes on
  range names
* don't update visible ranges for invisible panes
* changing margins in print preview should mark the
  document modified
* make VLOOKUP work with an external reference once again
  (fdo#31718)
* more strict parsing of external range names
* no automatic width adjustment of the dropdown popups
  (fdo#31710)
* re-calculate visible range when switching sheets
* skip hidden cells while expanding range selection
* components:
* overlapping controls
* bad alloc and convert to ZipIOException (rh#656191)
* divide by zero (rh#657628)
* extras:
* use consistent autocorrect file names
* filters:
* fix writerfilter XSL to handle more elements
* missing call to importDocumentProperties (bnc#655194)
* rotated text DOCX import (fdo#30474)
* impress:
* avoid antialiasing for drag rect
* libs-core:
* Adapted README according to list feedback
* register EvolutionLocal when evolution support is enabled
  (fdo#32007)
* crash during toolpanel re-docking
* crash in FR version when typing / as first character
  (i#115774)
* only start the quick-starter on restart
* don't crash when quickstarter is exited by user
  (rh#650170)
* shutdown quickstarter at end of desktop session
  (rh#650170)
* exit quickstarter if physically deleted (rh#610103)
* autocorrect crasher (rh#647392)
* start quickstarter on every launch if configured to use it
* Switch toolbar icon size to 'auto-detect'
* libs-extern:
* Use the new stable libwp* releases as default
* libs-extern-sys:
* fixed urllib.urlopen in the internal python (fdo#31466)
* libs-gui:
* Allow the dropdown list of a combo box to be scrollable.
  (fdo#31710)
* PDF export regression for simple RTL cases (i#115618)
* freeze with ODP import (i#115761)
* make toolbar icon size native-widget controlled
* use BrOffice in pt_BR locale (fdo#31770)
* release the clipboard after flush (i#163153)
* l10n:
* BrOffice in Brazil =&gt; %PRODUCTNAME_BR for win32 installer
* sdk:
* correct resolveLink function (i#115310)
* writer:
* crash when opening File/Print dialog fixed (i#115354)
* better enhanced fields navigation
* allow to localize the &quot;My AutoText&quot; string (i#66304)
* table alignment set to &quot;From Left&quot; when moving the right
  (bnc#636367)
* font color selection didn't effect new text (bnc#652204)
* column break DOC import problem (bnc#652364)
* build bits:
* install branding for the welcome screen (bnc#653519)
- fixed URL, summary, and description for LibreOffice
- bumped requires to libreoffice-branding-upstream &gt;
  3.2.99.3
- created l10n-prebuilt subpackage for prebuilt registry
  files (bnc#651964)
- disabled KDE3 stuff on openSUSE &gt;= 11.2 (bnc#605472,
  bnc#621472)
- added gcc-c++ and libxml2-devel into BuildRequires; were
  required by kdelibs3-devel before
- updated to libreoffice-3.2.99.3 (3.3-beta3):
* ooo integration:
* Merge commit 'ooo/OOO330_m13'
* common:
* impress ruler behaviour
* add Title Page dialog (i#7065)
* save 1MB on wizards per language
* images optimized for smaller size
* do not insert a new cell beyond the end
* handle multiple selection for printing (i#115266)
* remove VBAForm property and associated geometry hack
  (fdo#30856)
* base:
* key columns in all tables (i#114026)
* reports executed for data display (i#114627)
* calc:
* non-functional select
* defined names in Calc functions (i#79854)
* use Ctrl-Shift-D to launch selection list
* regression for range array input, e.g. {=A1:A5}
* crash on importing docs with database functions
* crash on importing named ranges on higher sheets
* remove the &quot;insert new sheet&quot; tab in read-only mode
* incorrect display of references from the formula input
  wizard
* new tab page 'Compatibility' in the Options dialog
  (fdo#30559)
* components:
* default to evolution
* crash in scanner dialog (rh#648475)
* extras:
* added LibreOffice and Tango palettes
* filters:
* crash on unsupported .tiffs (i#93300)
* vertical text alignment and placeholder style (bnc#645116)
* impress:
* broken zoom behaviour
* crash in OGL transitions
* support for PPT newsflash slide transition
* libs-core:
* register EVO address book
* more quickstarter fixes (i#108846)
* missing media-type for ODF thumbnails
* add credits hyperlink into about dialog
* freeze when adding an extension (i#114933)
* -quickstart option, and help fix (i#108846)
* GNOME filepicker filter selection (i#112411)
* use &quot;Enter Password&quot; in all dialogs (fdo#31075)
* add display properties to control shapes (i#112597)
* disable user migration when SAL_DISABLE_USERMIGRATION is
  set
* libs-gui:
* disable KDE's crash handler
* refresh of OLE object previews
* adding font aliases (i#114706)
* comparison of key events for IM
* show Java error just once by default
* underlining problem with Graphite fonts (i#114765)
* saving tempfiles when locking is not supported.
* better selection of localized font names (i#114703)
* MetricFields SetUnit conversions (fdo#30899, bnc#610921)
* make Presenter Screen default to the projector (i#112421)
* Qt event loop integration (when Glib is used) for KDE4
  vclplug
* writer:
* title pages (i#i66619)
* more RTF import/export fixes
* tables in page styles (i#114366)
* round-trip of DOC unhandled fields
* double-click behavior on enhanced fields
* leaky pStream after RTF import (fdo#31362)
* crash when choosing starmath from start screen
* OLE Links round-trip fixed for links as pictures
* setup XML namespaces also for footers and headers
  (bnc#581954)
- switched to the LibreOffice code base,
  http://www.documentfoundation.org/
- renamed packages from OpenOffice_org* to libreoffice*
- updated to libreoffice-3.2.99.2 (3.3-beta2):
* common:
* show menus in icons fixup
* show all appropriate formats by default on save as
  (i#113141)
* RenderBadPicture on multihead setups and Cairo (i#94007,
  i#111758)
* base:
* use correct table name (i#114246)
* calc:
* better performance on Excel doc import
* components:
* bound image controls (i#112659)
* Appearance config dialog crasher (i#108246)
* Euro converter didn't work with ODS (i#100686)
* ImageURL and Graphic properties handling (i#113991)
* extensions:
* some reportbuilder fixes (i#114111, i#112652)
* extras:
* fix malformed XML file (i#111741)
* add Croatian autocorrection (i#96706)
* updated Hungarian standard.bau (i#112387)
* eensgezinswoning replaces eensgezinswoning
* add 1/2, 3/4 and 1/4 symbols to af-ZA, de, en-ZA, mn and
  pl
* filters:
* adjust for table::BorderLine2
* table DOCX import crasher (rh#632236)
* misc improvements for DOCX VML import
* text position bug in DOC import (bnc#532920)
* implement import of alpha channel for RGBA .tiffs
  (fdo#30472)
* impress:
* improve randomisation in 'dissolve' transition
* libs-core:
* add in MonoSpace setting
* print the formula itself by default
* extension can contain compiled help (i#114008)
* no update menu entry for bundled extensions (i#113524)
* prevent online update for bundled extensions (i#113524)
* make search/replace of colour names with translations
  safer (i#110142)
* libs-gui:
* maths brackets misformed in presentation mode (i#113400)
* better font-name localization, i.e. en fallback (i#114703)
* default to UTF-8 for HTML unless we know differently
  (i#76649)
* writer:
* color problem in RTF export (fdo#30604)
* crash on export of TOC to .doc (i#112384)
* prevent document modification while printing (i#112518)
* dotted and dashed border types (fate#307731, fate#307730)
- changes from libreoffice-3.2.99.1 (3.3-beta1):
* features:
* renamed to LibreOffice
* based on ooo330-m7
* changed default branding
* started to support the LibreOffice code base [all]
* ordinal suffixes autocorrection improvements
* updated Numbertext extension to version 0.9.3
* support new distros Raw, LibreOfficeLinux,
  LibreOfficeMacOSX, LibreOfficeWin32
* performance bits:
* memory footprint during PPT import (bnc#637925)
* performance bug on row height adjustments (bnc#640112)
* common bits:
* don't set header in DDE tables (bnc#634517)
* Calc bits:
* cell content rendering [bnc#640128]
* Excel's cell border thickness mapping (bnc#636691)
* relative and absolute references toggling (bnc#634260)
* more on the Flat MSO XML file type detection (bnc#631993)
* Writer bits:
* SwXTextRange DOC import (i#112564)
* table formulas DOC import (bnc#631912)
* input field fixes (bnc#628098, bnc#623944)
* OLE Links with image DOC import (bnc#628098)
* nested SET/FILLIN fields DOC import (bnc#634478)
* broken floating tables formatting in DOC import
  (bnc#617593)
* double-clicking on field gives &quot;read only&quot; message
  (bnc#639288)
* OOXML bits:
* text paragraph autofit PPTX import
* VBA bits:
* implicit indexes handling
* logical operator precedence
* column para for Range.Cells (bnc#639297)
* build bits:
* update internal ICU to version 4.2.1
* fetch 185d60944ea767075d27247c3162b3bc-unowinreg.dll
- updated to version 3.2.98.1 (3.3-alpha1):
* features:
* RTF export rewrite
* writer navigation
* remove obsolete Industrial icon theme
* common bits:
* gray read-only styles (i#85003)
* Accelerators for OK/Cancel buttons in GTK (bnc#608572)
* Calc bits:
* cell borders not saved (bnc#612263)
* external reference rework (bnc#628876)
* Flat MSO XML file type detection (bnc#631993)
* disable custom tab colors in high contrast mode
* display correct field in data pilot (bnc#629920)
* Watch Window extension doesn't show sheet name
  (bnc#604638)
* Draw bits:
* associate application/x-wpg with oodraw (bnc#589624)
* Impress bits:
* More on avmedia soundhandler (i#83753, bnc#515553)
* Writer bits:
* ww8 styles import (i#21939)
* hairline table borders export
* saving new document comparison data
* Ruby in MS Word format (i#79246)
* OOXML:
* better internal hlinks XLSX export (bnc#594248)
* numbering roundtripping issues in DOCX (bnc#569266)
* untis translation from EMU in PPTX import (bnc#621739)
* group shapes geometry calculation in PPTX import
  (bnc#621739)
* many other import/export fixes and improvements
* VBA bits:
* changes in event handling
* more container control fixes
* more on invalid code name import for sheet (bnc#507768)
* build bits:
* update prebuilt cli dlls for OOo-3.3
* moving ooo-build patches to ooo git sources
* use --without-junit on Win32 and openSUSE &lt; 11.2
- used the prepatched OOo sources from ooo-build git
- used mozilla-xulrunner192 for openSUSE &gt; 11.3
  MaintenanceTracker-35044, CVE-2010-2935, CVE-2010-2936):
* Calc bits:
* custom field names handling in Data Pilot (bnc#634974)
* remember &quot;sort by&quot; selection in Data Pilot (bnc#634974)
* more on the Flat MSO XML file type detection (bnc#631993)
* Impress bits:
* cairocanvas border treatment (bnc#629546, rh#557317)
  MaintenanceTracker-35044, CVE-2010-2935, CVE-2010-2936):
* security fixes:
* two impress vulnerabilities (CVE-2010-2935,
  CVE-2010-2936, bnc#629085)
* common bits:
* honour ure-link in SDK configure.pl
* macro recording crasher (i#113084) [upstream, Rene]
* Calc bits:
* DataPilot sort by ID (bnc#622920)
* Flat MSO XML file type detection (bnc#527738)
* DDE linkage upon loading documents (bnc#618846,
  bnc#618864)
* file name as sheet name in Excel 2.1 docs import
  (bnc#612902)
* Draw bits:
* random extra arrows around the custom shape (i#105654)
* Impress bits:
* slideshow clipping (i#112422)
* cairocanvas border treatment (bnc#629546, rh#557317)
* Writer bits:
* input field fixes (bnc#628098, bnc#623944)
* non-breaking space erasing freeze (i#i113461) [upstream,
  Rene]
* broken floating tables formatting in DOC import
  (bnc#617593)
* Netbooks bits:
* decorate help window (bnc#621116)
* more restrictive top level document window check
  (bnc#607735)
* reduce height of PDF export and recovery dialogs
  (bnc#623352)
* Win32 bits:
* allow view &quot;details&quot; in File Open dialog on XP
  (bnc#620924)
* l10n bits:
* non-localized Tools/Options/OOo Writer/Comparison
  (bnc#615000)
</description>
  <pkglist>
    <collection>
        <package name="OpenOffice_org" arch="i586" version="3.3.1.2.1" release="0.3.1">
          <filename>OpenOffice_org-3.3.1.2.1-0.3.1.i586.rpm</filename>
        </package>
        <package name="OpenOffice_org" arch="x86_64" version="3.3.1.2.1" release="0.3.1">
          <filename>OpenOffice_org-3.3.1.2.1-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="aspell-de" arch="i586" version="20091006" release="2.3.1">
          <filename>aspell-de-20091006-2.3.1.i586.rpm</filename>
        </package>
        <package name="aspell-de" arch="x86_64" version="20091006" release="2.3.1">
          <filename>aspell-de-20091006-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="igerman98-doc" arch="noarch" version="20091006" release="2.3.1">
          <filename>igerman98-doc-20091006-2.3.1.noarch.rpm</filename>
        </package>
        <package name="ispell-naustrian" arch="i586" version="20091006" release="2.3.1">
          <filename>ispell-naustrian-20091006-2.3.1.i586.rpm</filename>
        </package>
        <package name="ispell-naustrian" arch="x86_64" version="20091006" release="2.3.1">
          <filename>ispell-naustrian-20091006-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="ispell-ngerman" arch="i586" version="20091006" release="2.3.1">
          <filename>ispell-ngerman-20091006-2.3.1.i586.rpm</filename>
        </package>
        <package name="ispell-ngerman" arch="x86_64" version="20091006" release="2.3.1">
          <filename>ispell-ngerman-20091006-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="ispell-nswiss" arch="i586" version="20091006" release="2.3.1">
          <filename>ispell-nswiss-20091006-2.3.1.i586.rpm</filename>
        </package>
        <package name="ispell-nswiss" arch="x86_64" version="20091006" release="2.3.1">
          <filename>ispell-nswiss-20091006-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libreoffice" arch="i586" version="3.3.1.2" release="2.4.2">
          <filename>libreoffice-3.3.1.2-2.4.2.i586.rpm</filename>
        </package>
        <package name="libreoffice" arch="x86_64" version="3.3.1.2" release="2.4.2">
          <filename>libreoffice-3.3.1.2-2.4.2.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-artwork-devel" arch="noarch" version="3.3.1.2" release="2.2.1">
          <filename>libreoffice-artwork-devel-3.3.1.2-2.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-base" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-base" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-base-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-base-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-base-drivers-mysql" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-drivers-mysql-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-base-drivers-mysql" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-drivers-mysql-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-base-drivers-postgresql" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-drivers-postgresql-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-base-drivers-postgresql" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-drivers-postgresql-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-base-extensions" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-extensions-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-base-extensions" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-extensions-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-base-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-base-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-base-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-bootstrap" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-bootstrap-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-bootstrap" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-bootstrap-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-branding-openSUSE" arch="noarch" version="3.3.1" release="1.2.1">
          <filename>libreoffice-branding-openSUSE-3.3.1-1.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-branding-upstream" arch="noarch" version="3.3.1.2" release="2.2.1">
          <filename>libreoffice-branding-upstream-3.3.1.2-2.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-calc" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-calc" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-calc-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-calc-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-calc-extensions" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-extensions-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-calc-extensions" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-extensions-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-calc-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-calc-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-calc-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-components" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-components-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-components" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-components-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-components-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-components-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-components-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-components-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-components-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-components-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-components-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-components-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-converter" arch="noarch" version="3.3" release="2.2.1">
          <filename>libreoffice-converter-3.3-2.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-draw" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-draw-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-draw" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-draw-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-draw-extensions" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-draw-extensions-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-draw-extensions" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-draw-extensions-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-filters" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-filters" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-filters-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-filters-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-filters-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-filters-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-filters-optional" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-optional-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-filters-optional" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-filters-optional-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-gnome" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-gnome-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-gnome" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-gnome-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-help-ar" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-ar-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-cs" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-cs-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-da" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-da-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-de" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-de-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-en-GB" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-en-GB-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-en-US" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-en-US-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-en-US-devel" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-en-US-devel-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-en-ZA" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-en-ZA-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-es" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-es-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-et" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-et-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-fr" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-fr-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-gl" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-gl-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-gu-IN" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-gu-IN-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-hi-IN" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-hi-IN-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-hu" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-hu-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-it" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-it-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-ja" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-ja-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-km" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-km-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-ko" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-ko-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-nl" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-nl-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-pa-IN" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-pa-IN-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-pl" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-pl-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-pt" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-pt-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-pt-BR" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-pt-BR-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-ru" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-ru-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-sl" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-sl-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-sv" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-sv-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-zh-CN" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-zh-CN-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-help-zh-TW" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-help-zh-TW-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-hyphen" arch="noarch" version="20110203.1" release="0.3.1">
          <filename>libreoffice-hyphen-20110203.1-0.3.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-icon-theme-crystal" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-icon-theme-crystal-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-icon-theme-galaxy" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-icon-theme-galaxy-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-icon-theme-hicontrast" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-icon-theme-hicontrast-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-icon-theme-oxygen" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-icon-theme-oxygen-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-icon-theme-tango" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-icon-theme-tango-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-icon-themes-prebuilt" arch="i586" version="3.3.1.2" release="2.4.2">
          <filename>libreoffice-icon-themes-prebuilt-3.3.1.2-2.4.2.i586.rpm</filename>
        </package>
        <package name="libreoffice-icon-themes-prebuilt" arch="x86_64" version="3.3.1.2" release="2.4.2">
          <filename>libreoffice-icon-themes-prebuilt-3.3.1.2-2.4.2.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-impress" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-impress" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-impress-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-impress-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-impress-extensions" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-extensions-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-impress-extensions" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-extensions-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-impress-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-impress-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-impress-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-kde" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-kde-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-kde" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-kde-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-kde4" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-kde4-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-kde4" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-kde4-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-l10n-af" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-af-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ar" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ar-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-be-BY" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-be-BY-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-bg" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-bg-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-br" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-br-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ca" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ca-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-cs" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-cs-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-cy" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-cy-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-da" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-da-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-de" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-de-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-el" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-el-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-en-GB" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-en-GB-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-en-ZA" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-en-ZA-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-es" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-es-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-et" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-et-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-extras" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-l10n-extras-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-extras-devel" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-l10n-extras-devel-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-extras-prebuilt" arch="noarch" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-l10n-extras-prebuilt-3.3.1.2-2.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-fi" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-fi-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-fr" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-fr-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ga" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ga-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-gl" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-gl-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-gu-IN" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-gu-IN-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-he" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-he-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-hi-IN" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-hi-IN-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-hr" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-hr-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-hu" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-hu-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-it" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-it-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ja" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ja-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ka" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ka-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-km" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-km-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ko" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ko-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-lt" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-lt-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-mk" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-mk-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-nb" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-nb-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-nl" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-nl-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-nn" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-nn-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-nr" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-nr-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-pa-IN" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-pa-IN-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-pl" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-pl-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.4.2">
          <filename>libreoffice-l10n-prebuilt-3.3.1.2-2.4.2.i586.rpm</filename>
        </package>
        <package name="libreoffice-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.4.2">
          <filename>libreoffice-l10n-prebuilt-3.3.1.2-2.4.2.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-l10n-pt" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-pt-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-pt-BR" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-pt-BR-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ru" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ru-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-rw" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-rw-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-sh" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-sh-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-sk" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-sk-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-sl" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-sl-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-sr" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-sr-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ss" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ss-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-st" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-st-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-sv" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-sv-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-tg" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-tg-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-th" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-th-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-tr" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-tr-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ts" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ts-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-uk" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-uk-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-ve" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-ve-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-vi" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-vi-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-xh" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-xh-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-zh-CN" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-zh-CN-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-zh-TW" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-zh-TW-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-l10n-zu" arch="noarch" version="3.3.1.2" release="2.2.4">
          <filename>libreoffice-l10n-zu-3.3.1.2-2.2.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-ca" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-ca-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-de" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-de-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-en" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-en-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-es" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-es-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-fr" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-fr-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-gl" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-gl-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-it" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-it-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-nl" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-nl-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-pl" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-pl-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-ro" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-ro-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-ru" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-ru-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-sk" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-sk-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-languagetool-sv" arch="noarch" version="1.2" release="7.2.3">
          <filename>libreoffice-languagetool-sv-1.2-7.2.3.noarch.rpm</filename>
        </package>
        <package name="libreoffice-libs-core" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-core-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-core" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-core-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-core-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-core-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-core-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-core-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-core-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-core-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-core-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-core-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-extern" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-extern-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-extern" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-extern-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-extern-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-extern-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-extern-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-extern-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-extern-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-extern-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-extern-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-extern-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-gui" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-gui-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-gui" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-gui-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-gui-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-gui-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-gui-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-gui-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-libs-gui-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-gui-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-libs-gui-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-libs-gui-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-mailmerge" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-mailmerge-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-mailmerge" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-mailmerge-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-math" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-math-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-math" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-math-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-mono" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-mono-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-mono" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-mono-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-officebean" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-officebean-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-officebean" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-officebean-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-openclipart" arch="noarch" version="3.3" release="1.12.4">
          <filename>libreoffice-openclipart-3.3-1.12.4.noarch.rpm</filename>
        </package>
        <package name="libreoffice-pyuno" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-pyuno-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-pyuno" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-pyuno-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-templates-de" arch="noarch" version="3.3" release="1.2.1">
          <filename>libreoffice-templates-de-3.3-1.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-templates-en" arch="noarch" version="3.3" release="1.2.1">
          <filename>libreoffice-templates-en-3.3-1.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-templates-labels-a4" arch="noarch" version="1.0.1" release="1.4.1">
          <filename>libreoffice-templates-labels-a4-1.0.1-1.4.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-templates-labels-letter" arch="noarch" version="1.0.1" release="1.4.1">
          <filename>libreoffice-templates-labels-letter-1.0.1-1.4.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-templates-presentation-layouts" arch="noarch" version="3.3" release="1.2.1">
          <filename>libreoffice-templates-presentation-layouts-3.3-1.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-templates-ru" arch="noarch" version="3.3" release="1.2.1">
          <filename>libreoffice-templates-ru-3.3-1.2.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-testing" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-testing-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-testing" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-testing-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-testtool" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-testtool-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-testtool" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-testtool-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-bg" arch="noarch" version="20071210.1" release="0.7.1">
          <filename>libreoffice-thesaurus-bg-20071210.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-ca" arch="noarch" version="1.5.0.1" release="0.7.1">
          <filename>libreoffice-thesaurus-ca-1.5.0.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-cs" arch="noarch" version="20070913.1" release="0.7.1">
          <filename>libreoffice-thesaurus-cs-20070913.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-da" arch="noarch" version="20100126.1" release="0.7.1">
          <filename>libreoffice-thesaurus-da-20100126.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-de" arch="noarch" version="20100307.1" release="0.7.1">
          <filename>libreoffice-thesaurus-de-20100307.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-de-AT" arch="noarch" version="20100307.1" release="0.7.1">
          <filename>libreoffice-thesaurus-de-AT-20100307.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-de-CH" arch="noarch" version="20100307.1" release="0.7.1">
          <filename>libreoffice-thesaurus-de-CH-20100307.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-el" arch="noarch" version="20061203.1" release="0.7.1">
          <filename>libreoffice-thesaurus-el-20061203.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-en-AU" arch="noarch" version="20081215.1" release="0.7.1">
          <filename>libreoffice-thesaurus-en-AU-20081215.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-en-GB" arch="noarch" version="20051128.1" release="0.7.1">
          <filename>libreoffice-thesaurus-en-GB-20051128.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-en-US" arch="noarch" version="20060111.1" release="0.7.1">
          <filename>libreoffice-thesaurus-en-US-20060111.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-es" arch="noarch" version="20050720.1" release="0.7.1">
          <filename>libreoffice-thesaurus-es-20050720.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-es-AR" arch="noarch" version="0.1.1" release="0.7.1">
          <filename>libreoffice-thesaurus-es-AR-0.1.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-es-VE" arch="noarch" version="1.0.1.1" release="0.7.1">
          <filename>libreoffice-thesaurus-es-VE-1.0.1.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-fr" arch="noarch" version="20100125.1" release="0.7.1">
          <filename>libreoffice-thesaurus-fr-20100125.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-ga" arch="noarch" version="20071002.1" release="0.7.1">
          <filename>libreoffice-thesaurus-ga-20071002.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-hu" arch="noarch" version="20080319.1" release="0.7.1">
          <filename>libreoffice-thesaurus-hu-20080319.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-it" arch="noarch" version="20081129.1" release="0.7.1">
          <filename>libreoffice-thesaurus-it-20081129.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-nb" arch="noarch" version="20080310.1" release="0.7.1">
          <filename>libreoffice-thesaurus-nb-20080310.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-ne" arch="noarch" version="1.1.1" release="0.7.1">
          <filename>libreoffice-thesaurus-ne-1.1.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-pl" arch="noarch" version="20081206.1" release="0.7.1">
          <filename>libreoffice-thesaurus-pl-20081206.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-pt" arch="noarch" version="20091015.1" release="0.7.1">
          <filename>libreoffice-thesaurus-pt-20091015.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-ro" arch="noarch" version="20091130.1" release="0.7.1">
          <filename>libreoffice-thesaurus-ro-20091130.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-ru" arch="noarch" version="20081013.1" release="0.7.1">
          <filename>libreoffice-thesaurus-ru-20081013.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-sk" arch="noarch" version="20100208.1" release="0.7.1">
          <filename>libreoffice-thesaurus-sk-20100208.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-sl" arch="noarch" version="20080601.1" release="0.7.1">
          <filename>libreoffice-thesaurus-sl-20080601.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-thesaurus-sv" arch="noarch" version="20090624.1" release="0.7.1">
          <filename>libreoffice-thesaurus-sv-20090624.1-0.7.1.noarch.rpm</filename>
        </package>
        <package name="libreoffice-ure" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-ure-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-ure" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-ure-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-ure-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-ure-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-ure-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-ure-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-ure-devel-doc" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-ure-devel-doc-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-ure-devel-doc" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-ure-devel-doc-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-voikko" arch="i586" version="3.1.2" release="8.5.1">
          <filename>libreoffice-voikko-3.1.2-8.5.1.i586.rpm</filename>
        </package>
        <package name="libreoffice-voikko" arch="x86_64" version="3.1.2" release="8.5.1">
          <filename>libreoffice-voikko-3.1.2-8.5.1.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-writer" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-writer" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-writer-devel" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-devel-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-writer-devel" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-devel-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-writer-extensions" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-extensions-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-writer-extensions" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-extensions-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="libreoffice-writer-l10n-prebuilt" arch="i586" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-l10n-prebuilt-3.3.1.2-2.2.3.i586.rpm</filename>
        </package>
        <package name="libreoffice-writer-l10n-prebuilt" arch="x86_64" version="3.3.1.2" release="2.2.3">
          <filename>libreoffice-writer-l10n-prebuilt-3.3.1.2-2.2.3.x86_64.rpm</filename>
        </package>
        <package name="myspell-african" arch="noarch" version="20080701" release="10.3.1">
          <filename>myspell-african-20080701-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-albanian" arch="noarch" version="1.6.1" release="10.3.1">
          <filename>myspell-albanian-1.6.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-american" arch="noarch" version="20100316" release="10.3.1">
          <filename>myspell-american-20100316-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-arabic" arch="noarch" version="20080110" release="10.3.1">
          <filename>myspell-arabic-20080110-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-assamese" arch="noarch" version="1.0.3" release="10.3.1">
          <filename>myspell-assamese-1.0.3-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-asturian" arch="noarch" version="0.0.1" release="10.3.1">
          <filename>myspell-asturian-0.0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-australian" arch="noarch" version="20100316" release="10.3.1">
          <filename>myspell-australian-20100316-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-austrian" arch="noarch" version="20091006" release="2.3.1">
          <filename>myspell-austrian-20091006-2.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-belarusian" arch="noarch" version="1.1" release="10.3.1">
          <filename>myspell-belarusian-1.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-bengali" arch="noarch" version="20080201" release="10.3.1">
          <filename>myspell-bengali-20080201-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-brazilian" arch="noarch" version="20100111" release="10.3.1">
          <filename>myspell-brazilian-20100111-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-breton" arch="noarch" version="0.3" release="10.3.1">
          <filename>myspell-breton-0.3-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-british" arch="noarch" version="20100316" release="10.3.1">
          <filename>myspell-british-20100316-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-bulgarian" arch="noarch" version="4.1.5" release="10.3.1">
          <filename>myspell-bulgarian-4.1.5-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-canadian" arch="noarch" version="20100316" release="10.3.1">
          <filename>myspell-canadian-20100316-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-catalan" arch="noarch" version="2.1.5" release="10.3.1">
          <filename>myspell-catalan-2.1.5-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-chichewa" arch="noarch" version="0.01" release="10.3.1">
          <filename>myspell-chichewa-0.01-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-croatian" arch="noarch" version="20080813" release="10.3.1">
          <filename>myspell-croatian-20080813-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-czech" arch="noarch" version="20080822" release="10.3.1">
          <filename>myspell-czech-20080822-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-danish" arch="noarch" version="20090925" release="10.3.1">
          <filename>myspell-danish-20090925-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-dutch" arch="noarch" version="20091002" release="10.3.1">
          <filename>myspell-dutch-20091002-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-esperanto" arch="noarch" version="1.0" release="10.3.1">
          <filename>myspell-esperanto-1.0-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-estonian" arch="noarch" version="1.0" release="10.3.1">
          <filename>myspell-estonian-1.0-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-faroese" arch="noarch" version="20070816" release="10.3.1">
          <filename>myspell-faroese-20070816-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-french" arch="noarch" version="20100125" release="10.3.1">
          <filename>myspell-french-20100125-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-gaelic-scots" arch="noarch" version="1.0" release="10.3.1">
          <filename>myspell-gaelic-scots-1.0-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-galician" arch="noarch" version="20080515" release="10.3.1">
          <filename>myspell-galician-20080515-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-german" arch="noarch" version="20091006" release="2.3.1">
          <filename>myspell-german-20091006-2.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-greek" arch="noarch" version="20041220" release="10.3.1">
          <filename>myspell-greek-20041220-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-gujarati" arch="noarch" version="20061015" release="10.3.1">
          <filename>myspell-gujarati-20061015-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-haitian" arch="noarch" version="0.06" release="10.3.1">
          <filename>myspell-haitian-0.06-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-hebrew" arch="noarch" version="20080914" release="10.3.1">
          <filename>myspell-hebrew-20080914-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-hindi" arch="noarch" version="20090617" release="10.3.1">
          <filename>myspell-hindi-20090617-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-hungarian" arch="noarch" version="20100329" release="10.3.1">
          <filename>myspell-hungarian-20100329-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-icelandic" arch="noarch" version="20090823" release="10.3.1">
          <filename>myspell-icelandic-20090823-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-indonese" arch="noarch" version="1.2" release="10.3.1">
          <filename>myspell-indonese-1.2-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-irish" arch="noarch" version="20080805" release="10.3.1">
          <filename>myspell-irish-20080805-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-italian" arch="noarch" version="20081129" release="10.3.1">
          <filename>myspell-italian-20081129-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-khmer" arch="noarch" version="1.1" release="10.3.1">
          <filename>myspell-khmer-1.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-kichwa" arch="noarch" version="0.4" release="10.3.1">
          <filename>myspell-kichwa-0.4-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-kikuyu" arch="noarch" version="20091010" release="10.3.1">
          <filename>myspell-kikuyu-20091010-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-kinyarwanda" arch="noarch" version="20090218" release="10.3.1">
          <filename>myspell-kinyarwanda-20090218-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-kiswahili" arch="noarch" version="20040516" release="10.3.1">
          <filename>myspell-kiswahili-20040516-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-kurdish" arch="noarch" version="0.96.0" release="10.3.1">
          <filename>myspell-kurdish-0.96.0-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-latvian" arch="noarch" version="20100419" release="10.3.1">
          <filename>myspell-latvian-20100419-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-lithuanian" arch="noarch" version="20081204" release="10.3.1">
          <filename>myspell-lithuanian-20081204-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-macedonian" arch="noarch" version="20051126" release="10.3.1">
          <filename>myspell-macedonian-20051126-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-maithili" arch="noarch" version="20100107" release="10.3.1">
          <filename>myspell-maithili-20100107-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-malagasy" arch="noarch" version="0.03" release="10.3.1">
          <filename>myspell-malagasy-0.03-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-malay" arch="noarch" version="20090808" release="10.3.1">
          <filename>myspell-malay-20090808-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-malayalam" arch="noarch" version="1.1.0" release="10.3.1">
          <filename>myspell-malayalam-1.1.0-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-maory" arch="noarch" version="20080630" release="10.3.1">
          <filename>myspell-maory-20080630-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-marathi" arch="noarch" version="20091210" release="10.3.1">
          <filename>myspell-marathi-20091210-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-mexican" arch="noarch" version="20091103" release="10.3.1">
          <filename>myspell-mexican-20091103-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-ndebele" arch="noarch" version="20091030" release="10.3.1">
          <filename>myspell-ndebele-20091030-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-new-zealand" arch="noarch" version="20081204" release="10.3.1">
          <filename>myspell-new-zealand-20081204-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-norsk-bokmaal" arch="noarch" version="20080310" release="10.3.1">
          <filename>myspell-norsk-bokmaal-20080310-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-norsk-nynorsk" arch="noarch" version="20080310" release="10.3.1">
          <filename>myspell-norsk-nynorsk-20080310-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-nswiss" arch="noarch" version="20091006" release="2.3.1">
          <filename>myspell-nswiss-20091006-2.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-occitan-lengadocian" arch="noarch" version="0.6.1" release="10.3.1">
          <filename>myspell-occitan-lengadocian-0.6.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-persian" arch="noarch" version="20070815" release="10.3.1">
          <filename>myspell-persian-20070815-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-polish" arch="noarch" version="20081206" release="10.3.1">
          <filename>myspell-polish-20081206-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-portuguese" arch="noarch" version="20091015" release="10.3.1">
          <filename>myspell-portuguese-20091015-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-romanian" arch="noarch" version="20091130" release="10.3.1">
          <filename>myspell-romanian-20091130-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-russian" arch="noarch" version="20081013" release="10.3.1">
          <filename>myspell-russian-20081013-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-setswana" arch="noarch" version="20061023" release="10.3.1">
          <filename>myspell-setswana-20061023-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-slovak" arch="noarch" version="20100208" release="10.3.1">
          <filename>myspell-slovak-20100208-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-slovene" arch="noarch" version="20091130" release="10.3.1">
          <filename>myspell-slovene-20091130-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-sotho-northern" arch="noarch" version="20060123" release="10.3.1">
          <filename>myspell-sotho-northern-20060123-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-south-african-english" arch="noarch" version="20100316" release="10.3.1">
          <filename>myspell-south-african-english-20100316-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish" arch="noarch" version="20051029" release="10.3.1">
          <filename>myspell-spanish-20051029-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-argentine" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-argentine-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-bolivian" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-bolivian-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-chilean" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-chilean-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-colombian" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-colombian-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-costa-rican" arch="noarch" version="0.4" release="10.3.1">
          <filename>myspell-spanish-costa-rican-0.4-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-dominican" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-dominican-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-ecuadorian" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-ecuadorian-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-guatemalan" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-guatemalan-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-honduran" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-honduran-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-nicaraguan" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-nicaraguan-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-panamanian" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-panamanian-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-paraguayan" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-paraguayan-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-peruvian" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-peruvian-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-puerto-rican" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-puerto-rican-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-salvadorean" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-salvadorean-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-uruguayan" arch="noarch" version="0.1" release="10.3.1">
          <filename>myspell-spanish-uruguayan-0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-spanish-venezuelan" arch="noarch" version="1.0.1" release="10.3.1">
          <filename>myspell-spanish-venezuelan-1.0.1-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-swati" arch="noarch" version="20091030" release="10.3.1">
          <filename>myspell-swati-20091030-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-swedish" arch="noarch" version="20100130" release="10.3.1">
          <filename>myspell-swedish-20100130-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-swedish-finland" arch="noarch" version="20100131" release="10.3.1">
          <filename>myspell-swedish-finland-20100131-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-tagalog" arch="noarch" version="0.02" release="10.3.1">
          <filename>myspell-tagalog-0.02-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-thai" arch="noarch" version="0.3" release="10.3.1">
          <filename>myspell-thai-0.3-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-tsonga" arch="noarch" version="20060123" release="10.3.1">
          <filename>myspell-tsonga-20060123-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-ukrainian" arch="noarch" version="20090818" release="10.3.1">
          <filename>myspell-ukrainian-20090818-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-venda" arch="noarch" version="20091030" release="10.3.1">
          <filename>myspell-venda-20091030-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-vietnamese" arch="noarch" version="20091031" release="10.3.1">
          <filename>myspell-vietnamese-20091031-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-welsh" arch="noarch" version="20040425" release="10.3.1">
          <filename>myspell-welsh-20040425-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-xhosa" arch="noarch" version="20091030" release="10.3.1">
          <filename>myspell-xhosa-20091030-10.3.1.noarch.rpm</filename>
        </package>
        <package name="myspell-zulu" arch="noarch" version="20091210" release="10.3.1">
          <filename>myspell-zulu-20091210-10.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7aa8628e4c44ab9cb2d628abeb410c30"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4080">
  <id>freetype2</id>
  <title>freetype2 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299164919"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647375" id="647375" title="bug number 647375" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3814" id="CVE-2010-3814" title="CVE-2010-3814" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3855" id="CVE-2010-3855" title="CVE-2010-3855" type="cve"/>
  </references>
  <description>Specially crafted font files could crash applications that
use freetype2 to render the fonts (CVE-2010-3814,
CVE-2010-3855).
</description>
  <pkglist>
    <collection>
        <package name="freetype2-devel" arch="i586" version="2.3.12" release="7.4.1">
          <filename>freetype2-devel-2.3.12-7.4.1.i586.rpm</filename>
        </package>
        <package name="freetype2-devel" arch="x86_64" version="2.3.12" release="7.4.1">
          <filename>freetype2-devel-2.3.12-7.4.1.x86_64.rpm</filename>
        </package>
        <package name="freetype2-devel-32bit" arch="x86_64" version="2.3.12" release="7.4.1">
          <filename>freetype2-devel-32bit-2.3.12-7.4.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" arch="i586" version="2.3.12" release="7.4.1">
          <filename>libfreetype6-2.3.12-7.4.1.i586.rpm</filename>
        </package>
        <package name="libfreetype6" arch="x86_64" version="2.3.12" release="7.4.1">
          <filename>libfreetype6-2.3.12-7.4.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-32bit" arch="x86_64" version="2.3.12" release="7.4.1">
          <filename>libfreetype6-32bit-2.3.12-7.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="94dd37ae4da6c55a55a96c2c142660e5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="3914">
  <id>kbd</id>
  <title>kbd security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1296754752"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=663898" id="663898" title="bug number 663898" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0460" id="CVE-2011-0460" title="CVE-2011-0460" type="cve"/>
  </references>
  <description>The kbd init scripted wrote a file to /dev/shm during
shut-down. Since local users may create symlinks there a
malicious user could cause corruption of arbitrary files
(CVE-2011-0460).
</description>
  <pkglist>
    <collection>
        <package name="kbd" arch="i586" version="1.14.1" release="31.3.1">
          <filename>kbd-1.14.1-31.3.1.i586.rpm</filename>
        </package>
        <package name="kbd" arch="x86_64" version="1.14.1" release="31.3.1">
          <filename>kbd-1.14.1-31.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="46731df57afec27b0333a3a544c844dd"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4084">
  <id>openldap2</id>
  <title>openldap2 security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299147001"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674985" id="674985" title="bug number 674985" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620389" id="620389" title="bug number 620389" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=624980" id="624980" title="bug number 624980" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1024" id="CVE-2011-1024" title="CVE-2011-1024" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1081" id="CVE-2011-1081" title="CVE-2011-1081" type="cve"/>
  </references>
  <description>Master/slave configurations with enabled
&quot;ppolicy_forward_updates&quot; option potentially allowed users
to log in with an invalid password (CVE-2011-1024).

unauthenticated users could crash the ldap server
(CVE-2011-1081).
</description>
  <pkglist>
    <collection>
        <package name="openldap2" arch="i586" version="2.4.21" release="10.3.1">
          <filename>openldap2-2.4.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="openldap2" arch="x86_64" version="2.4.21" release="10.3.1">
          <filename>openldap2-2.4.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2-back-meta" arch="i586" version="2.4.21" release="10.3.1">
          <filename>openldap2-back-meta-2.4.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="openldap2-back-meta" arch="x86_64" version="2.4.21" release="10.3.1">
          <filename>openldap2-back-meta-2.4.21-10.3.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2-back-perl" arch="i586" version="2.4.21" release="10.3.1">
          <filename>openldap2-back-perl-2.4.21-10.3.1.i586.rpm</filename>
        </package>
        <package name="openldap2-back-perl" arch="x86_64" version="2.4.21" release="10.3.1">
          <filename>openldap2-back-perl-2.4.21-10.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e10665d4c8a3201533909053f2ba6831"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4399">
  <id>flash-player</id>
  <title>flash-player security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302905747"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=686818" id="686818" title="bug number 686818" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0611" id="CVE-2011-0611" title="CVE-2011-0611" type="cve"/>
  </references>
  <description>Specially crafted Flash files could be exploited to execute
arbitrary code (CVE-2011-0611).
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.2.159.1" release="0.2.1">
          <filename>flash-player-10.2.159.1-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0fb1e5d8347d7b70ba9b973b4ddab59a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4411">
  <id>dhcpcd</id>
  <title>dhcpcd security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1303201807"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675052" id="675052" title="bug number 675052" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=687850" id="687850" title="bug number 687850" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0996" id="CVE-2011-0996" title="CVE-2011-0996" type="cve"/>
  </references>
  <description>A rogue dhcp server could instruct clients to use a host
name that contains shell meta characters. Since many
scripts in the system do not expect unusal characters in
the system's host name the dhcp client needs to sanitize
the host name offered by the server (CVE-2011-0996).

Note this update is actually just a re-release of the
previous one. The security fix made dhcpcd crash if the
DHCP server sent a SIP option that was not decodable.
</description>
  <pkglist>
    <collection>
        <package name="dhcpcd" arch="i586" version="3.2.3" release="61.66.1">
          <filename>dhcpcd-3.2.3-61.66.1.i586.rpm</filename>
        </package>
        <package name="dhcpcd" arch="x86_64" version="3.2.3" release="61.66.1">
          <filename>dhcpcd-3.2.3-61.66.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="23e332ce25553e0d0b25952f64974883"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4251">
  <id>postfix</id>
  <title>postfix security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300457071"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677792" id="677792" title="bug number 677792" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411" id="CVE-2011-0411" title="CVE-2011-0411" type="cve"/>
  </references>
  <description>postfix did not clear the receive buffer after the STARTTLS
command. A man-in-the middle could therefore inject
commands in the unencrypted stream that get interpreted in
the encrypted phase after STARTTLS (CVE-2011-0411).
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.4.1">
          <filename>postfix-2.7.1-2.4.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.4.1">
          <filename>postfix-2.7.1-2.4.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.4.1">
          <filename>postfix-devel-2.7.1-2.4.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.4.1">
          <filename>postfix-devel-2.7.1-2.4.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.4.1">
          <filename>postfix-doc-2.7.1-2.4.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.4.1">
          <filename>postfix-mysql-2.7.1-2.4.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.4.1">
          <filename>postfix-mysql-2.7.1-2.4.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.4.1">
          <filename>postfix-postgresql-2.7.1-2.4.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.4.1">
          <filename>postfix-postgresql-2.7.1-2.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a71a4cc98e009c5ea01213da8d66ecfa"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4421">
  <id>mutt</id>
  <title>mutt: This update prevents mutt to break with mbox files &gt; 2 GB</title>
  <release>openSUSE 11.3</release>
  <issued date="1303337259"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=676388" id="676388" title="bug number 676388" type="bugzilla"/>
  </references>
  <description>This update fixes a crash that occurs when the mbox file is
bigger than 2GB on a 32bit architecture.
</description>
  <pkglist>
    <collection>
        <package name="mutt" arch="i586" version="1.5.20" release="13.3.1">
          <filename>mutt-1.5.20-13.3.1.i586.rpm</filename>
        </package>
        <package name="mutt" arch="x86_64" version="1.5.20" release="13.3.1">
          <filename>mutt-1.5.20-13.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f01566cf081c054148f1ca4c3bd88ebf"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4374">
  <id>kernel</id>
  <title>kernel: security and bugfix update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1302803748"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681175" id="681175" title="bug number 681175" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681826" id="681826" title="bug number 681826" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=676202" id="676202" title="bug number 676202" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=682965" id="682965" title="bug number 682965" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674254" id="674254" title="bug number 674254" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673929" id="673929" title="bug number 673929" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679812" id="679812" title="bug number 679812" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=669889" id="669889" title="bug number 669889" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=558740" id="558740" title="bug number 558740" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679588" id="679588" title="bug number 679588" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681999" id="681999" title="bug number 681999" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672505" id="672505" title="bug number 672505" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=554081" id="554081" title="bug number 554081" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681540" id="681540" title="bug number 681540" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677286" id="677286" title="bug number 677286" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651599" id="651599" title="bug number 651599" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673992" id="673992" title="bug number 673992" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678472" id="678472" title="bug number 678472" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677738" id="677738" title="bug number 677738" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678970" id="678970" title="bug number 678970" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678497" id="678497" title="bug number 678497" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=644807" id="644807" title="bug number 644807" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607239" id="607239" title="bug number 607239" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=666842" id="666842" title="bug number 666842" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=668101" id="668101" title="bug number 668101" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=666836" id="666836" title="bug number 666836" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=674735" id="674735" title="bug number 674735" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650897" id="650897" title="bug number 650897" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=643513" id="643513" title="bug number 643513" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672524" id="672524" title="bug number 672524" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672499" id="672499" title="bug number 672499" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653547" id="653547" title="bug number 653547" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=671256" id="671256" title="bug number 671256" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=575873" id="575873" title="bug number 575873" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661429" id="661429" title="bug number 661429" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=639143" id="639143" title="bug number 639143" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661624" id="661624" title="bug number 661624" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623393" id="623393" title="bug number 623393" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=668929" id="668929" title="bug number 668929" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662663" id="662663" title="bug number 662663" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=651596" id="651596" title="bug number 651596" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=642309" id="642309" title="bug number 642309" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655468" id="655468" title="bug number 655468" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662931" id="662931" title="bug number 662931" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655220" id="655220" title="bug number 655220" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655973" id="655973" title="bug number 655973" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662951" id="662951" title="bug number 662951" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=661945" id="661945" title="bug number 661945" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662202" id="662202" title="bug number 662202" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662945" id="662945" title="bug number 662945" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662953" id="662953" title="bug number 662953" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655693" id="655693" title="bug number 655693" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658720" id="658720" title="bug number 658720" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662031" id="662031" title="bug number 662031" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=647632" id="647632" title="bug number 647632" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658461" id="658461" title="bug number 658461" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=658178" id="658178" title="bug number 658178" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=564423" id="564423" title="bug number 564423" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=641105" id="641105" title="bug number 641105" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617437" id="617437" title="bug number 617437" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617764" id="617764" title="bug number 617764" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=625965" id="625965" title="bug number 625965" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655964" id="655964" title="bug number 655964" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=662722" id="662722" title="bug number 662722" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1493" id="CVE-2011-1493" title="CVE-2011-1493" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182" id="CVE-2011-1182" title="CVE-2011-1182" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1082" id="CVE-2011-1082" title="CVE-2011-1082" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478" id="CVE-2011-1478" title="CVE-2011-1478" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163" id="CVE-2011-1163" title="CVE-2011-1163" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1012" id="CVE-2011-1012" title="CVE-2011-1012" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010" id="CVE-2011-1010" title="CVE-2011-1010" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1476" id="CVE-2011-1476" title="CVE-2011-1476" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1477" id="CVE-2011-1477" title="CVE-2011-1477" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0191" id="CVE-2011-0191" title="CVE-2011-0191" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090" id="CVE-2011-1090" title="CVE-2011-1090" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3880" id="CVE-2010-3880" title="CVE-2010-3880" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4656" id="CVE-2010-4656" title="CVE-2010-4656" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0521" id="CVE-2011-0521" title="CVE-2011-0521" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3875" id="CVE-2010-3875" title="CVE-2010-3875" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3876" id="CVE-2010-3876" title="CVE-2010-3876" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3877" id="CVE-2010-3877" title="CVE-2010-3877" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3705" id="CVE-2010-3705" title="CVE-2010-3705" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711" id="CVE-2011-0711" title="CVE-2011-0711" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712" id="CVE-2011-0712" title="CVE-2011-0712" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4525" id="CVE-2010-4525" title="CVE-2010-4525" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3881" id="CVE-2010-3881" title="CVE-2010-3881" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4075" id="CVE-2010-4075" title="CVE-2010-4075" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4076" id="CVE-2010-4076" title="CVE-2010-4076" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4077" id="CVE-2010-4077" title="CVE-2010-4077" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4248" id="CVE-2010-4248" title="CVE-2010-4248" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4243" id="CVE-2010-4243" title="CVE-2010-4243" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251" id="CVE-2010-4251" title="CVE-2010-4251" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4648" id="CVE-2010-4648" title="CVE-2010-4648" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4527" id="CVE-2010-4527" title="CVE-2010-4527" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4668" id="CVE-2010-4668" title="CVE-2010-4668" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4650" id="CVE-2010-4650" title="CVE-2010-4650" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4649" id="CVE-2010-4649" title="CVE-2010-4649" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4250" id="CVE-2010-4250" title="CVE-2010-4250" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4346" id="CVE-2010-4346" title="CVE-2010-4346" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4529" id="CVE-2010-4529" title="CVE-2010-4529" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4342" id="CVE-2010-4342" title="CVE-2010-4342" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3849" id="CVE-2010-3849" title="CVE-2010-3849" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3848" id="CVE-2010-3848" title="CVE-2010-3848" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3850" id="CVE-2010-3850" title="CVE-2010-3850" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4343" id="CVE-2010-4343" title="CVE-2010-4343" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3699" id="CVE-2010-3699" title="CVE-2010-3699" type="cve"/>
  </references>
  <description>The openSUSE 11.3 kernel was updated to 2.6.34.8 to fix
various bugs and security issues.

Following security issues have been fixed: CVE-2011-1493:
In the rose networking stack, when parsing the
FAC_NATIONAL_DIGIS facilities field, it was possible for a
remote host to provide more digipeaters than expected,
resulting in heap corruption. Check against ROSE_MAX_DIGIS
to prevent overflows, and abort facilities parsing on
failure.

CVE-2011-1182: Local attackers could send signals to their
programs that looked like coming from the kernel,
potentially gaining privileges in the context of setuid
programs.

CVE-2011-1082: The epoll subsystem in Linux did not prevent
users from creating circular epoll file structures,
potentially leading to a denial of service (kernel
deadlock).

CVE-2011-1478: An issue in the core GRO code where an skb
belonging to an  unknown VLAN is reused could result in a
NULL pointer dereference.

CVE-2011-1163: The code for evaluating OSF partitions (in
fs/partitions/osf.c) contained a bug that leaks data from
kernel heap memory to userspace for certain corrupted OSF
partitions.

CVE-2011-1012: The code for evaluating LDM partitions (in
fs/partitions/ldm.c) contained a bug that could crash the
kernel for certain corrupted LDM partitions.

CVE-2011-1010: The code for evaluating Mac partitions (in
fs/partitions/mac.c) contained a bug that could crash the
kernel for certain corrupted Mac partitions.

CVE-2011-1476: Specially crafted requests may be written to
/dev/sequencer resulting in an underflow when calculating a
size for a copy_from_user() operation in the driver for
MIDI interfaces. On x86, this just returns an error, but it
could have caused memory corruption on other architectures.
Other malformed requests could have resulted in the use of
uninitialized variables.

CVE-2011-1477: Due to a failure to validate user-supplied
indexes in the driver for Yamaha YM3812 and OPL-3 chips, a
specially crafted ioctl request could have been sent to
/dev/sequencer, resulting in reading and writing beyond the
bounds of heap buffers, and potentially allowing privilege
escalation.

CVE-2011-0191: A information leak in the XFS geometry calls
could be used by local attackers to gain access to kernel
information.

CVE-2011-1090: A page allocator issue in NFS v4 ACL
handling that could lead to a denial of service (crash) was
fixed.

CVE-2010-3880: net/ipv4/inet_diag.c in the Linux kernel did
not properly audit INET_DIAG bytecode, which allowed local
users to cause a denial of service (kernel infinite loop)
via crafted INET_DIAG_REQ_BYTECODE instructions in a
netlink message that contains multiple attribute elements,
as demonstrated by INET_DIAG_BC_JMP instructions.

CVE-2010-4656: Fixed a buffer size issue in &quot;usb iowarrior&quot;
module, where a malicious device could overflow a kernel
buffer.

CVE-2011-0521: The dvb_ca_ioctl function in
drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel did
not check the sign of a certain integer field, which
allowed local users to cause a denial of service (memory
corruption) or possibly have unspecified other impact via a
negative value.

CVE-2010-3875: The ax25_getname function in
net/ax25/af_ax25.c in the Linux kernel did not initialize a
certain structure, which allowed local users to obtain
potentially sensitive information from kernel stack memory
by reading a copy of this structure.

CVE-2010-3876: net/packet/af_packet.c in the Linux kernel
did not properly initialize certain structure members,
which allowed local users to obtain potentially sensitive
information from kernel stack memory by leveraging the
CAP_NET_RAW capability to read copies of the applicable
structures.

CVE-2010-3877: The get_name function in net/tipc/socket.c
in the Linux kernel did not initialize a certain structure,
which allowed local users to obtain potentially sensitive
information from kernel stack memory by reading a copy of
this structure.

CVE-2010-3705: The sctp_auth_asoc_get_hmac function in
net/sctp/auth.c in the Linux kernel did not properly
validate the hmac_ids array of an SCTP peer, which allowed
remote attackers to cause a denial of service (memory
corruption and panic) via a crafted value in the last
element of this array.

CVE-2011-0711: A stack memory information leak in the xfs
FSGEOMETRY_V1 ioctl was fixed.

CVE-2011-0712: Multiple buffer overflows in the caiaq
Native Instruments USB audio functionality in the Linux
kernel might have allowed attackers to cause a denial of
service or possibly have unspecified other impact via a
long USB device name, related to (1) the
snd_usb_caiaq_audio_init function in
sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init
function in sound/usb/caiaq/midi.c.

CVE-2010-4525: Linux kernel did not initialize the
kvm_vcpu_events-&gt;interrupt.pad structure member, which
allowed local users to obtain potentially sensitive
information from kernel stack memory via unspecified
vectors.

CVE-2010-3881: arch/x86/kvm/x86.c in the Linux kernel did
not initialize certain structure members, which allowed
local users to obtain potentially sensitive information
from kernel stack memory via read operations on the
/dev/kvm device.

CVE-2010-4075: The uart_get_count function in
drivers/serial/serial_core.c in the Linux kernel did not
properly initialize a certain structure member, which
allowed local users to obtain potentially sensitive
information from kernel stack memory via a TIOCGICOUNT
ioctl call.

CVE-2010-4076: The rs_ioctl function in
drivers/char/amiserial.c in the Linux kernel did not
properly initialize a certain structure member, which
allowed local users to obtain potentially sensitive
information from kernel stack memory via a TIOCGICOUNT
ioctl call.

CVE-2010-4077: The ntty_ioctl_tiocgicount function in
drivers/char/nozomi.c in the Linux kernel did not properly
initialize a certain structure member, which allowed local
users to obtain potentially sensitive information from
kernel stack memory via a TIOCGICOUNT ioctl call.

CVE-2010-4248: Race condition in the __exit_signal function
in kernel/exit.c in the Linux kernel allowed local users to
cause a denial of service via vectors related to
multithreaded exec, the use of a thread group leader in
kernel/posix-cpu-timers.c, and the selection of a new
thread group leader in the de_thread function in fs/exec.c.

CVE-2010-4243: fs/exec.c in the Linux kernel did not enable
the OOM Killer to assess use of stack memory by arrays
representing the (1) arguments and (2) environment, which
allows local users to cause a denial of service (memory
consumption) via a crafted exec system call, aka an &quot;OOM
dodging issue,&quot; a related issue to CVE-2010-3858.

CVE-2010-4251: A system out of memory condition (denial of
service) could be triggered with a large socket backlog,
exploitable by local users. This has been addressed by
backlog limiting.

CVE-2010-4648: Fixed cryptographic weakness potentially
leaking information to remote (but physically nearby) users
in the orinoco wireless driver.

CVE-2010-4527: The load_mixer_volumes function in
sound/oss/soundcard.c in the OSS sound subsystem in the
Linux kernel incorrectly expected that a certain name field
ends with a '\0' character, which allowed local users to
conduct buffer overflow attacks and gain privileges, or
possibly obtain sensitive information from kernel memory,
via a SOUND_MIXER_SETLEVELS ioctl call.

CVE-2010-4668: The blk_rq_map_user_iov function in
block/blk-map.c in the Linux kernel allowed local users to
cause a denial of service (panic) via a zero-length I/O
request in a device ioctl to a SCSI device, related to an
unaligned map. NOTE: this vulnerability exists because of
an incomplete fix for CVE-2010-4163.

CVE-2010-4650: A kernel buffer overflow in the cuse server
module was fixed, which might have allowed local privilege
escalation. However only CUSE servers could exploit it and
/dev/cuse is normally restricted to root.

CVE-2010-4649: Integer overflow in the ib_uverbs_poll_cq
function in drivers/infiniband/core/uverbs_cmd.c in the
Linux kernel allowed local users to cause a denial of
service (memory corruption) or possibly have unspecified
other impact via a large value of a certain structure
member.

CVE-2010-4250: A memory leak within inotify could be used
by local attackers to cause the machine to run out of
memory (denial of service).

CVE-2010-4346: The install_special_mapping function in
mm/mmap.c in the Linux kernel did not make an expected
security_file_mmap function call, which allowed local users
to bypass intended mmap_min_addr restrictions and possibly
conduct NULL pointer dereference attacks via a crafted
assembly-language application.

CVE-2010-4529: Integer underflow in the irda_getsockopt
function in net/irda/af_irda.c in the Linux kernel on
platforms other than x86 allowed local users to obtain
potentially sensitive information from kernel heap memory
via an IRLMP_ENUMDEVICES getsockopt call.

CVE-2010-4342: The aun_incoming function in
net/econet/af_econet.c in the Linux kernel, when Econet is
enabled, allowed remote attackers to cause a denial of
service (NULL pointer dereference and OOPS) by sending an
Acorn Universal Networking (AUN) packet over UDP.

CVE-2010-3849: The econet_sendmsg function in
net/econet/af_econet.c in the Linux kernel, when an econet
address is configured, allowed local users to cause a
denial of service (NULL pointer dereference and OOPS) via a
sendmsg call that specifies a NULL value for the remote
address field.

CVE-2010-3848: Stack-based buffer overflow in the
econet_sendmsg function in net/econet/af_econet.c in the
Linux kernel when an econet address is configured, allowed
local users to gain privileges by providing a large number
of iovec structures.

CVE-2010-3850: The ec_dev_ioctl function in
net/econet/af_econet.c in the Linux kernel did not require
the CAP_NET_ADMIN capability, which allowed local users to
bypass intended access restrictions and configure econet
addresses via an SIOCSIFADDR ioctl call.

CVE-2010-4343: drivers/scsi/bfa/bfa_core.c in the Linux
kernel did not initialize a certain port data structure,
which allows local users to cause a denial of service
(system crash) via read operations on an fc_host statistics
file.

CVE-2010-3699: The backend driver in Xen 3.x allows guest
OS users to cause a denial of service via a kernel thread
leak, which prevents the device and guest OS from being
shut down or create a zombie domain, causes a hang in
zenwatch, or prevents unspecified xm commands from working
properly, related to (1) netback, (2) blkback, or (3)
blktap.
</description>
  <pkglist>
    <collection>
        <package name="kernel-debug" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-debug-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-debug-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-debug-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-debug-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-debug-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-debug-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-debug-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-default-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-default-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-default-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-default-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-default-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-default-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-default-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-desktop-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-desktop-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-desktop-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-desktop-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-desktop-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-desktop-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-desktop-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-devel" arch="noarch" version="2.6.34.8" release="0.2.1">
          <filename>kernel-devel-2.6.34.8-0.2.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-extra-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-ec2-extra" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-ec2-extra-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-pae-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-pae-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-pae-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-pae-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source" arch="noarch" version="2.6.34.8" release="0.2.1">
          <filename>kernel-source-2.6.34.8-0.2.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-source-vanilla" arch="noarch" version="2.6.34.8" release="0.2.1">
          <filename>kernel-source-vanilla-2.6.34.8-0.2.1.noarch.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-syms-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-syms" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-syms-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-trace-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-trace-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-trace-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-trace-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-trace-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-trace-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-trace-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vanilla-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vanilla-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vanilla-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vanilla-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vanilla-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vanilla-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vanilla-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vmi-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vmi-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-vmi-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-vmi-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-xen-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-xen-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-xen-base-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-base" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-xen-base-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="i586" version="2.6.34.8" release="0.2.1">
          <filename>kernel-xen-devel-2.6.34.8-0.2.1.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="kernel-xen-devel" arch="x86_64" version="2.6.34.8" release="0.2.1">
          <filename>kernel-xen-devel-2.6.34.8-0.2.1.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="i586" version="1.1_k2.6.34.8_0.2" release="19.1.19">
          <filename>preload-kmp-default-1.1_k2.6.34.8_0.2-19.1.19.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-default" arch="x86_64" version="1.1_k2.6.34.8_0.2" release="19.1.19">
          <filename>preload-kmp-default-1.1_k2.6.34.8_0.2-19.1.19.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="i586" version="1.1_k2.6.34.8_0.2" release="19.1.19">
          <filename>preload-kmp-desktop-1.1_k2.6.34.8_0.2-19.1.19.i586.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
        <package name="preload-kmp-desktop" arch="x86_64" version="1.1_k2.6.34.8_0.2" release="19.1.19">
          <filename>preload-kmp-desktop-1.1_k2.6.34.8_0.2-19.1.19.x86_64.rpm</filename>
          <reboot_suggested>1</reboot_suggested>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0c7983b4e3b5303a5d0b54a8caa941b7"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4431">
  <id>dbus-1</id>
  <title>dbus-1 security update (CVE-2010-4352)</title>
  <release>openSUSE 11.3</release>
  <issued date="1303821418"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=659934" id="659934" title="bug number 659934" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352" id="CVE-2010-4352" title="CVE-2010-4352" type="cve"/>
  </references>
  <description>Local users could crash the D-Bus daemon by sending a
specially crafted message (CVE-2010-4352).
</description>
  <pkglist>
    <collection>
        <package name="dbus-1" arch="i586" version="1.2.24" release="2.3.1">
          <filename>dbus-1-1.2.24-2.3.1.i586.rpm</filename>
        </package>
        <package name="dbus-1" arch="x86_64" version="1.2.24" release="2.3.1">
          <filename>dbus-1-1.2.24-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-32bit" arch="x86_64" version="1.2.24" release="2.3.1">
          <filename>dbus-1-32bit-1.2.24-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-devel" arch="i586" version="1.2.24" release="2.3.1">
          <filename>dbus-1-devel-1.2.24-2.3.1.i586.rpm</filename>
        </package>
        <package name="dbus-1-devel" arch="x86_64" version="1.2.24" release="2.3.1">
          <filename>dbus-1-devel-1.2.24-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-devel-32bit" arch="x86_64" version="1.2.24" release="2.3.1">
          <filename>dbus-1-devel-32bit-1.2.24-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-devel-doc" arch="noarch" version="1.2.24" release="2.3.1">
          <filename>dbus-1-devel-doc-1.2.24-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="ecaa46248db2007ccc9934afefdef3f7"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4396">
  <id>libtiff-devel</id>
  <title>tiff security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1302880204"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=682871" id="682871" title="bug number 682871" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=599475" id="599475" title="bug number 599475" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=687442" id="687442" title="bug number 687442" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=687441" id="687441" title="bug number 687441" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167" id="CVE-2011-1167" title="CVE-2011-1167" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4665" id="CVE-2010-4665" title="CVE-2010-4665" type="cve"/>
  </references>
  <description>Specially crafted tiff files could cause a heap-based
buffer overflow in the thunder- and ojpeg-decoders
(CVE-2011-1167, CVE-2009-5022).

Directories with a large number of files could cause an
integer overflow in the tiffdump tool (CVE-2010-4665)
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.10.1">
          <filename>libtiff-devel-3.9.2-5.10.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.10.1">
          <filename>libtiff-devel-3.9.2-5.10.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.10.1">
          <filename>libtiff-devel-32bit-3.9.2-5.10.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.10.1">
          <filename>libtiff3-3.9.2-5.10.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.10.1">
          <filename>libtiff3-3.9.2-5.10.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.10.1">
          <filename>libtiff3-32bit-3.9.2-5.10.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.10.1">
          <filename>tiff-3.9.2-5.10.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.10.1">
          <filename>tiff-3.9.2-5.10.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7ee8f45280e85aeb3a84c77a0926680a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4110">
  <id>cifs-mount</id>
  <title>samba: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299518687"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=670431" id="670431" title="bug number 670431" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0719" id="CVE-2011-0719" title="CVE-2011-0719" type="cve"/>
  </references>
  <description>With this update samba is not prone to a remote denial of
service attack anymore. (CVE-2011-0719)
</description>
  <pkglist>
    <collection>
        <package name="ldapsmb" arch="i586" version="1.34b" release="5.9.1">
          <filename>ldapsmb-1.34b-5.9.1.i586.rpm</filename>
        </package>
        <package name="ldapsmb" arch="x86_64" version="1.34b" release="5.9.1">
          <filename>ldapsmb-1.34b-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libldb-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libldb-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libldb-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libldb-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libldb0" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libldb0-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libldb0" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libldb0-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libnetapi-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libnetapi-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libnetapi-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libnetapi0" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libnetapi0-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libnetapi0" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libnetapi0-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libsmbclient-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libsmbclient-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libsmbclient-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libsmbclient0-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libsmbclient0" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libsmbclient0-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbclient0-32bit" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libsmbclient0-32bit-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libsmbsharemodes-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libsmbsharemodes-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libsmbsharemodes0-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libsmbsharemodes0" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libsmbsharemodes0-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libtalloc-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libtalloc-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtalloc-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtalloc2" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libtalloc2-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libtalloc2" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtalloc2-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libtdb-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libtdb-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtdb-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtdb1" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libtdb1-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libtdb1" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtdb1-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtdb1-32bit" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtdb1-32bit-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libtevent-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libtevent-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtevent-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtevent0" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libtevent0-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libtevent0" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libtevent0-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libwbclient-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libwbclient-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libwbclient-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0" arch="i586" version="3.5.4" release="5.9.1">
          <filename>libwbclient0-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="libwbclient0" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libwbclient0-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libwbclient0-32bit" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>libwbclient0-32bit-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba" arch="i586" version="3.5.4" release="5.9.1">
          <filename>samba-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="samba" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-32bit" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-32bit-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client" arch="i586" version="3.5.4" release="5.9.1">
          <filename>samba-client-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="samba-client" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-client-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-32bit" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-client-32bit-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-devel" arch="i586" version="3.5.4" release="5.9.1">
          <filename>samba-devel-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="samba-devel" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-devel-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-doc" arch="noarch" version="3.5.4" release="5.9.1">
          <filename>samba-doc-3.5.4-5.9.1.noarch.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="i586" version="3.5.4" release="5.9.1">
          <filename>samba-krb-printing-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="samba-krb-printing" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-krb-printing-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind" arch="i586" version="3.5.4" release="5.9.1">
          <filename>samba-winbind-3.5.4-5.9.1.i586.rpm</filename>
        </package>
        <package name="samba-winbind" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-winbind-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
        <package name="samba-winbind-32bit" arch="x86_64" version="3.5.4" release="5.9.1">
          <filename>samba-winbind-32bit-3.5.4-5.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b92fe4f408bc7d2c3f8042ce39713ccb"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4445">
  <id>udisks</id>
  <title>udisks DBUS root service allows to load arbitrary LKMs (CVE-2010-4661)</title>
  <release>openSUSE 11.3</release>
  <issued date="1303919538"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=653900" id="653900" title="bug number 653900" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4661" id="CVE-2010-4661" title="CVE-2010-4661" type="cve"/>
  </references>
  <description>This update of udisks improves input validation. Before it
was possible to load arbitrary LKMs. (CVE-2010-4661: CVSS
v2 Base Score: 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P): unknown
(unknown) )
</description>
  <pkglist>
    <collection>
        <package name="udisks" arch="i586" version="1.0.1" release="2.3.1">
          <filename>udisks-1.0.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="udisks" arch="x86_64" version="1.0.1" release="2.3.1">
          <filename>udisks-1.0.1-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="udisks-devel" arch="i586" version="1.0.1" release="2.3.1">
          <filename>udisks-devel-1.0.1-2.3.1.i586.rpm</filename>
        </package>
        <package name="udisks-devel" arch="x86_64" version="1.0.1" release="2.3.1">
          <filename>udisks-devel-1.0.1-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="93f7b436f7aaaf0817cdaf1f5aea09a2"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4440">
  <id>libpolkit0</id>
  <title>polkit: fixing stat race condition (CVE-2011-1485)</title>
  <release>openSUSE 11.3</release>
  <issued date="1303891543"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=688788" id="688788" title="bug number 688788" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1485" id="CVE-2011-1485" title="CVE-2011-1485" type="cve"/>
  </references>
  <description>A race condition exists in pkexec while trying to determine
its caller which could lead to privilege escalation.
CVE-2011-1485 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="libpolkit0" arch="i586" version="0.96" release="5.3.1">
          <filename>libpolkit0-0.96-5.3.1.i586.rpm</filename>
        </package>
        <package name="libpolkit0" arch="x86_64" version="0.96" release="5.3.1">
          <filename>libpolkit0-0.96-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit0-32bit" arch="x86_64" version="0.96" release="5.3.1">
          <filename>libpolkit0-32bit-0.96-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit" arch="i586" version="0.96" release="5.3.1">
          <filename>polkit-0.96-5.3.1.i586.rpm</filename>
        </package>
        <package name="polkit" arch="x86_64" version="0.96" release="5.3.1">
          <filename>polkit-0.96-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit-devel" arch="i586" version="0.96" release="5.3.1">
          <filename>polkit-devel-0.96-5.3.1.i586.rpm</filename>
        </package>
        <package name="polkit-devel" arch="x86_64" version="0.96" release="5.3.1">
          <filename>polkit-devel-0.96-5.3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit-doc" arch="noarch" version="0.96" release="5.3.1">
          <filename>polkit-doc-0.96-5.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a2f12b0e8566f8839245423279be1479"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4474">
  <id>timezone-2011g</id>
  <title>timezone: Update to 2011g</title>
  <release>openSUSE 11.3</release>
  <issued date="1304428439"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=691414" id="691414" title="bug number 691414" type="bugzilla"/>
  </references>
  <description>This update provides 2011g which provides the following
important changes:

* Remove Daylight savings time observation for Egypt
* Falkland islands on a trial basis do not observe DST
  anymore
* Southamerica/Chile: Delay DST until May 7th
* Southafrica/Morocco: Updates
</description>
  <pkglist>
    <collection>
        <package name="timezone" arch="i586" version="2011g" release="0.2.1">
          <filename>timezone-2011g-0.2.1.i586.rpm</filename>
        </package>
        <package name="timezone" arch="x86_64" version="2011g" release="0.2.1">
          <filename>timezone-2011g-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-java" arch="noarch" version="2011g" release="0.2.1">
          <filename>timezone-java-2011g-0.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="91261decc838a409e40eb3b194bfaa92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4459">
  <id>MozillaFirefox</id>
  <title>MozillaFirefox: Update to 3.6.17 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1304095659"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689281" id="689281" title="bug number 689281" type="bugzilla"/>
  </references>
  <description>Mozilla Firefox was updated to the 3.6.17 security release.

MFSA 2011-12: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Credits

Mozilla developer Scoobidiver reported a memory safety
issue which affected Firefox 4 and Firefox 3.6
(CVE-2011-0081)

The web development team of Alcidion reported a crash that
affected Firefox 4, Firefox 3.6 and Firefox 3.5.
(CVE-2011-0069)

Ian Beer reported a crash that affected Firefox 4, Firefox
3.6 and Firefox 3.5. (CVE-2011-0070)

Mozilla developers Bob Clary, Henri Sivonen, Marco Bonardo,
Mats Palmgren and Jesse Ruderman reported memory safety
issues which affected Firefox 3.6 and Firefox 3.5.
(CVE-2011-0080)

Aki Helin reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0074 , CVE-2011-0075)

Ian Beer reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0077 , CVE-2011-0078)

Martin Barbella reported a memory safety issue which
affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0072)


MFSA 2011-13 / CVE-2011-0065 / CVE-2011-0066 /
CVE-2011-0073: Security researcher regenrecht reported
several dangling pointer vulnerabilities via TippingPoint's
Zero Day Initiative.

MFSA 2011-14 / CVE-2011-0067: Security researcher Paul
Stone reported that a Java applet could be used to mimic
interaction with form autocomplete controls and steal
entries from the form history.

MFSA 2011-15 / CVE-2011-0076: David Remahl of Apple Product
Security reported that the Java Embedding Plugin (JEP)
shipped with the Mac OS X versions of Firefox could be
exploited to obtain elevated access to resources on a
user's system.

MFSA 2011-16 / CVE-2011-0071: Security researcher Soroush
Dalili reported that the resource: protocol could be
exploited to allow directory traversal on Windows and the
potential loading of resources from non-permitted
locations. The impact would depend on whether interesting
files existed in predictable locations in a useful format.
For example, the existence or non-existence of particular
images might indicate whether certain software was
installed.    

MFSA 2011-18 / CVE-2011-1202: Chris Evans of the Chrome
Security Team reported that the XSLT generate-id() function
returned a string that revealed a specific valid address of
an object on the memory heap. It is possible that in some
cases this address would be valuable information that could
be used by an attacker while exploiting a different memory
corruption but, in order to make an exploit more reliable
or work around mitigation features in the browser or
operating system.
</description>
  <pkglist>
    <collection>
        <package name="MozillaFirefox" arch="i586" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-3.6.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox" arch="x86_64" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-3.6.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="i586" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-branding-upstream" arch="x86_64" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-branding-upstream-3.6.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="i586" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-common" arch="x86_64" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-translations-common-3.6.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="i586" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="MozillaFirefox-translations-other" arch="x86_64" version="3.6.17" release="0.2.1">
          <filename>MozillaFirefox-translations-other-3.6.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-js192-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-js192" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-js192-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-js192-32bit" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-js192-32bit-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-32bit" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-32bit-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-buildsymbols" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-devel" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-devel-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-gnome-32bit" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-gnome-32bit-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-common-32bit-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="i586" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.17-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64" version="1.9.2.17" release="0.2.1">
          <filename>mozilla-xulrunner192-translations-other-32bit-1.9.2.17-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d1a23fda51026bc482ad48c722d76c45"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4458">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Update to 3.1.10 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1304093834"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689281" id="689281" title="bug number 689281" type="bugzilla"/>
  </references>
  <description>Mozilla Thunderbird was updated to the 3.1.10 security
release.

MFSA 2011-12: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Credits

Mozilla developer Scoobidiver reported a memory safety
issue which affected Firefox 4 and Firefox 3.6
(CVE-2011-0081)

The web development team of Alcidion reported a crash that
affected Firefox 4, Firefox 3.6 and Firefox 3.5.
(CVE-2011-0069)

Ian Beer reported a crash that affected Firefox 4, Firefox
3.6 and Firefox 3.5. (CVE-2011-0070)

Mozilla developers Bob Clary, Henri Sivonen, Marco Bonardo,
Mats Palmgren and Jesse Ruderman reported memory safety
issues which affected Firefox 3.6 and Firefox 3.5.
(CVE-2011-0080)

Aki Helin reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0074 , CVE-2011-0075)

Ian Beer reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0077 , CVE-2011-0078)

Martin Barbella reported a memory safety issue which
affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0072)
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-3.1.10-0.9.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-3.1.10-0.9.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-devel-3.1.10-0.9.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-devel-3.1.10-0.9.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-translations-common-3.1.10-0.9.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-translations-common-3.1.10-0.9.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-translations-other-3.1.10-0.9.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.1.10" release="0.9.1">
          <filename>MozillaThunderbird-translations-other-3.1.10-0.9.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.1.2" release="9.9.1">
          <filename>enigmail-1.1.2-9.9.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.1.2" release="9.9.1">
          <filename>enigmail-1.1.2-9.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5a5d9947a0c2941da924f9dc58ef5195"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4462">
  <id>seamonkey</id>
  <title>seamonkey: Update to 2.0.14 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1304092840"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689281" id="689281" title="bug number 689281" type="bugzilla"/>
  </references>
  <description>Mozilla Seamonkey was updated to the 2.0.14 security
release.

MFSA 2011-12: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Credits

Mozilla developer Scoobidiver reported a memory safety
issue which affected Firefox 4 and Firefox 3.6
(CVE-2011-0081)

The web development team of Alcidion reported a crash that
affected Firefox 4, Firefox 3.6 and Firefox 3.5.
(CVE-2011-0069)

Ian Beer reported a crash that affected Firefox 4, Firefox
3.6 and Firefox 3.5. (CVE-2011-0070)

Mozilla developers Bob Clary, Henri Sivonen, Marco Bonardo,
Mats Palmgren and Jesse Ruderman reported memory safety
issues which affected Firefox 3.6 and Firefox 3.5.
(CVE-2011-0080)

Aki Helin reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0074 , CVE-2011-0075)

Ian Beer reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0077 , CVE-2011-0078)

Martin Barbella reported a memory safety issue which
affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0072)

MFSA 2011-13 / CVE-2011-0065 / CVE-2011-0066 /
CVE-2011-0073: Security researcher regenrecht reported
several dangling pointer vulnerabilities via TippingPoint's
Zero Day Initiative.

MFSA 2011-14 / CVE-2011-0067: Security researcher Paul
Stone reported that a Java applet could be used to mimic
interaction with form autocomplete controls and steal
entries from the form history.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.14" release="0.2.1">
          <filename>seamonkey-2.0.14-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.14" release="0.2.1">
          <filename>seamonkey-2.0.14-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.14" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.14-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.14" release="0.2.1">
          <filename>seamonkey-dom-inspector-2.0.14-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.14" release="0.2.1">
          <filename>seamonkey-irc-2.0.14-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.14" release="0.2.1">
          <filename>seamonkey-irc-2.0.14-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.14" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.14-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.14" release="0.2.1">
          <filename>seamonkey-translations-common-2.0.14-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.14" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.14-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.14" release="0.2.1">
          <filename>seamonkey-translations-other-2.0.14-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.14" release="0.2.1">
          <filename>seamonkey-venkman-2.0.14-0.2.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.14" release="0.2.1">
          <filename>seamonkey-venkman-2.0.14-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="181274ab98ea436eb39c7d8325905839"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4456">
  <id>mozilla-xulrunner191</id>
  <title>mozilla-xulrunner191: Update to 1.9.1.19 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1304093067"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689281" id="689281" title="bug number 689281" type="bugzilla"/>
  </references>
  <description>Mozilla XULRunner 1.9.1 was updated to the 1.9.1.19
security release.

MFSA 2011-12: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Credits

Mozilla developer Scoobidiver reported a memory safety
issue which affected Firefox 4 and Firefox 3.6
(CVE-2011-0081)

The web development team of Alcidion reported a crash that
affected Firefox 4, Firefox 3.6 and Firefox 3.5.
(CVE-2011-0069)

Ian Beer reported a crash that affected Firefox 4, Firefox
3.6 and Firefox 3.5. (CVE-2011-0070)

Mozilla developers Bob Clary, Henri Sivonen, Marco Bonardo,
Mats Palmgren and Jesse Ruderman reported memory safety
issues which affected Firefox 3.6 and Firefox 3.5.
(CVE-2011-0080)

Aki Helin reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0074 , CVE-2011-0075)

Ian Beer reported memory safety issues which affected
Firefox 3.6 and Firefox 3.5. (CVE-2011-0077 , CVE-2011-0078)

Martin Barbella reported a memory safety issue which
affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0072)

MFSA 2011-13 / CVE-2011-0065 / CVE-2011-0066 /
CVE-2011-0073: Security researcher regenrecht reported
several dangling pointer vulnerabilities via TippingPoint's
Zero Day Initiative.

MFSA 2011-14 / CVE-2011-0067: Security researcher Paul
Stone reported that a Java applet could be used to mimic
interaction with form autocomplete controls and steal
entries from the form history.

MFSA 2011-18 / CVE-2011-1202: Chris Evans of the Chrome
Security Team reported that the XSLT generate-id() function
returned a string that revealed a specific valid address of
an object on the memory heap. It is possible that in some
cases this address would be valuable information that could
be used by an attacker while exploiting a different memory
corruption but, in order to make an exploit more reliable
or work around mitigation features in the browser or
operating system.
</description>
  <pkglist>
    <collection>
        <package name="mozilla-xulrunner191" arch="i586" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.19-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-32bit" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-32bit-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="i586" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.19-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-devel" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-devel-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="i586" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.19-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-gnomevfs-32bit" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-gnomevfs-32bit-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="i586" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.19-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-common" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-common-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="i586" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.19-0.2.1.i586.rpm</filename>
        </package>
        <package name="mozilla-xulrunner191-translations-other" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>mozilla-xulrunner191-translations-other-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="i586" version="1.9.1.19" release="0.2.1">
          <filename>python-xpcom191-1.9.1.19-0.2.1.i586.rpm</filename>
        </package>
        <package name="python-xpcom191" arch="x86_64" version="1.9.1.19" release="0.2.1">
          <filename>python-xpcom191-1.9.1.19-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7a0e0db2f77f8ae08f6e2dbe347c8e4e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4447">
  <id>xorg-x11-Xvnc</id>
  <title>xorg-x11-Xvnc: This update makes Xvnc working with non-US keyboard layouts</title>
  <release>openSUSE 11.3</release>
  <issued date="1303947263"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=400520" id="400520" title="bug number 400520" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605015" id="605015" title="bug number 605015" type="bugzilla"/>
  </references>
  <description>Enable the use of all local keyboard layouts, independent
of remotely set layout. Also improve support when switching
the remote layout by enabling layouts that use AltGr for
certain characters.
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11-Xvnc" arch="i586" version="7.5_1.8.0" release="10.11.1">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.11.1.i586.rpm</filename>
        </package>
        <package name="xorg-x11-Xvnc" arch="x86_64" version="7.5_1.8.0" release="10.11.1">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.11.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="131e99a51a80de64d7a3ced60ae3e5f5"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4444">
  <id>python-feedparser</id>
  <title>python-feedparser: This update fixes an issue introduced by the last security update for this package.</title>
  <release>openSUSE 11.3</release>
  <issued date="1303919485"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=688878" id="688878" title="bug number 688878" type="bugzilla"/>
  </references>
  <description>This update fixes a crash in python-feedparser when it is
parsing some feeds.
</description>
  <pkglist>
    <collection>
        <package name="python-feedparser" arch="noarch" version="4.1" release="6.5.1">
          <filename>python-feedparser-4.1-6.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="55d6263e576e9ea2af03121190256007"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4449">
  <id>doxygen</id>
  <title>doxygen: This update fixes a segfault when building documentation</title>
  <release>openSUSE 11.3</release>
  <issued date="1304005270"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=650330" id="650330" title="bug number 650330" type="bugzilla"/>
  </references>
  <description>Doxygen-1.6.3-3.2 segfaults when building blender
documentation. The pure virtual method parent() was changed
to method returning 0. Therefore the result should be
checked before dereferencing. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="doxygen" arch="i586" version="1.6.3" release="4.5.1">
          <filename>doxygen-1.6.3-4.5.1.i586.rpm</filename>
        </package>
        <package name="doxygen" arch="x86_64" version="1.6.3" release="4.5.1">
          <filename>doxygen-1.6.3-4.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3824cb953df18095ae5267cbf4ca950d"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4292">
  <id>rsync</id>
  <title>VUL-0: rsync heap corruption</title>
  <release>openSUSE 11.3</release>
  <issued date="1301929446"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=684387" id="684387" title="bug number 684387" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1097" id="CVE-2011-1097" title="CVE-2011-1097" type="cve"/>
  </references>
  <description>Specially crafted requests could cause a memory corruption
on the receiving side of an rsync transfer (client side or
server that allows to push) (CVE-2011-1097).
</description>
  <pkglist>
    <collection>
        <package name="rsync" arch="i586" version="3.0.7" release="4.3.1">
          <filename>rsync-3.0.7-4.3.1.i586.rpm</filename>
        </package>
        <package name="rsync" arch="x86_64" version="3.0.7" release="4.3.1">
          <filename>rsync-3.0.7-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="184109d11f07ad7d7c6f3cfb4c5d67b5"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4115">
  <id>vsftpd</id>
  <title>vsftp security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1299588807"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=676259" id="676259" title="bug number 676259" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0762" id="CVE-2011-0762" title="CVE-2011-0762" type="cve"/>
  </references>
  <description>Certain file patterns could cause vsftpd to consume
excessive CPU resulting in denial of service
(CVE-2011-0762).
</description>
  <pkglist>
    <collection>
        <package name="vsftpd" arch="i586" version="2.2.2" release="3.3.1">
          <filename>vsftpd-2.2.2-3.3.1.i586.rpm</filename>
        </package>
        <package name="vsftpd" arch="x86_64" version="2.2.2" release="3.3.1">
          <filename>vsftpd-2.2.2-3.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5131b3e23ea7ff4fc456ecf345a4a61c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4188">
  <id>libzip-devel</id>
  <title>libzip security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1300748677"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681193" id="681193" title="bug number 681193" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421" id="CVE-2011-0421" title="CVE-2011-0421" type="cve"/>
  </references>
  <description>empty zip archives could crash programs using libzip
(CVE-2011-0421).
</description>
  <pkglist>
    <collection>
        <package name="libzip-devel" arch="i586" version="0.9" release="27.3.1">
          <filename>libzip-devel-0.9-27.3.1.i586.rpm</filename>
        </package>
        <package name="libzip-devel" arch="x86_64" version="0.9" release="27.3.1">
          <filename>libzip-devel-0.9-27.3.1.x86_64.rpm</filename>
        </package>
        <package name="libzip-util" arch="i586" version="0.9" release="27.3.1">
          <filename>libzip-util-0.9-27.3.1.i586.rpm</filename>
        </package>
        <package name="libzip-util" arch="x86_64" version="0.9" release="27.3.1">
          <filename>libzip-util-0.9-27.3.1.x86_64.rpm</filename>
        </package>
        <package name="libzip1" arch="i586" version="0.9" release="27.3.1">
          <filename>libzip1-0.9-27.3.1.i586.rpm</filename>
        </package>
        <package name="libzip1" arch="x86_64" version="0.9" release="27.3.1">
          <filename>libzip1-0.9-27.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="953b34df70584f53ab237ff9af03e270"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4507">
  <id>exim</id>
  <title>exim: Fixed improper format string handling in DKIM signatures</title>
  <release>openSUSE 11.3</release>
  <issued date="1304721870"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=692227" id="692227" title="bug number 692227" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1764" id="CVE-2011-1764" title="CVE-2011-1764" type="cve"/>
  </references>
  <description>This exim security update fixes importer string handling in
DKIM signatures. (CVE-2011-1764)
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.7.1">
          <filename>exim-4.71-4.7.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.7.1">
          <filename>exim-4.71-4.7.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.7.1">
          <filename>eximon-4.71-4.7.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.7.1">
          <filename>eximon-4.71-4.7.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.7.1">
          <filename>eximstats-html-4.71-4.7.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.7.1">
          <filename>eximstats-html-4.71-4.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1abf6e1816d7647de9f1176364086439"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4493">
  <id>java-1_6_0-sun</id>
  <title>java-1_6_0_sun: Update to Oracle Java 6 update 25</title>
  <release>openSUSE 11.3</release>
  <issued date="1304615756"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=691672" id="691672" title="bug number 691672" type="bugzilla"/>
  </references>
  <description>Oracle Java SE 6 update 25 has been released. This release
brings:

  * New generation of Java HotSpot VM 20 with experimental
    tiered compilation in Server VM reduces a start time
  * Support for various software including Firefox 4,
    Chrome 10 and VirtualBox 4
  * Improved BigDecimal performance up to 30%
  * Olson Data 2011b includes recent North Dakota changes

This update does not provide any documented security
enhancements.
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u25-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u25-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u25-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u25-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u25-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u25-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u25-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u25-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u25-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u25-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u25-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u25" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u25-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3bbf93f3c252317e27ce98c517a8ec3b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4509">
  <id>otrs</id>
  <title>otrs: Fixed a XSS issues</title>
  <release>openSUSE 11.3</release>
  <issued date="1304897355"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=692384" id="692384" title="bug number 692384" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1518" id="CVE-2011-1518" title="CVE-2011-1518" type="cve"/>
  </references>
  <description>This updated fixes a cross site scripting (XSS) issue in
otrs. (CVE-2011-1518)

Upstream advisory: http://otrs.org/advisory/OSA-2011-01-en/
</description>
  <pkglist>
    <collection>
        <package name="otrs" arch="noarch" version="2.4.9" release="0.5.1">
          <filename>otrs-2.4.9-0.5.1.noarch.rpm</filename>
        </package>
        <package name="otrs-doc" arch="noarch" version="2.4.9" release="0.5.1">
          <filename>otrs-doc-2.4.9-0.5.1.noarch.rpm</filename>
        </package>
        <package name="otrs-itsm" arch="noarch" version="2.1.1" release="0.5.1">
          <filename>otrs-itsm-2.1.1-0.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b36ccdf79b4de96f1d83521a6f0cc481"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4524">
  <id>postfix</id>
  <title>postfix: Security update to fix remote code execution</title>
  <release>openSUSE 11.3</release>
  <issued date="1305019398"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689021" id="689021" title="bug number 689021" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1720" id="CVE-2011-1720" title="CVE-2011-1720" type="cve"/>
  </references>
  <description>Remote attackers could potentially exploit a memory
corruption issue in postfix' SASL implementation to execute
arbitrary code (CVE-2011-1720).
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.6.1">
          <filename>postfix-2.7.1-2.6.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.6.1">
          <filename>postfix-2.7.1-2.6.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.6.1">
          <filename>postfix-devel-2.7.1-2.6.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.6.1">
          <filename>postfix-devel-2.7.1-2.6.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.6.1">
          <filename>postfix-doc-2.7.1-2.6.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.6.1">
          <filename>postfix-mysql-2.7.1-2.6.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.6.1">
          <filename>postfix-mysql-2.7.1-2.6.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.6.1">
          <filename>postfix-postgresql-2.7.1-2.6.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.6.1">
          <filename>postfix-postgresql-2.7.1-2.6.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2cf658f7441dc8449cec268519371ea0"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4498">
  <id>perl</id>
  <title>perl security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1304690222"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=676086" id="676086" title="bug number 676086" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657625" id="657625" title="bug number 657625" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=684799" id="684799" title="bug number 684799" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678877" id="678877" title="bug number 678877" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4777" id="CVE-2010-4777" title="CVE-2010-4777" type="cve"/>
  </references>
  <description>This update fixes a bug in perl that makes spamassassin
crash and does not allow bypassing taint mode by using lc()
or uc() anymore.
- CVE-2010-4777: CVSS v2 Base Score: 5.0
  (AV:N/AC:L/Au:N/C:N/I:N/A:P)
- CVE-2011-1487: CVSS v2 Base Score: 2.6
  (AV:N/AC:H/Au:N/C:N/I:P/A:N): Permissions, Privileges,
  and Access Control (CWE-264)
</description>
  <pkglist>
    <collection>
        <package name="perl" arch="i586" version="5.12.1" release="2.5.1">
          <filename>perl-5.12.1-2.5.1.i586.rpm</filename>
        </package>
        <package name="perl" arch="x86_64" version="5.12.1" release="2.5.1">
          <filename>perl-5.12.1-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="perl-32bit" arch="x86_64" version="5.12.1" release="2.5.1">
          <filename>perl-32bit-5.12.1-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" arch="i586" version="5.12.1" release="2.5.1">
          <filename>perl-base-5.12.1-2.5.1.i586.rpm</filename>
        </package>
        <package name="perl-base" arch="x86_64" version="5.12.1" release="2.5.1">
          <filename>perl-base-5.12.1-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base-32bit" arch="x86_64" version="5.12.1" release="2.5.1">
          <filename>perl-base-32bit-5.12.1-2.5.1.x86_64.rpm</filename>
        </package>
        <package name="perl-doc" arch="noarch" version="5.12.1" release="2.5.1">
          <filename>perl-doc-5.12.1-2.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="30b39a83dbb36ff2cc8542600c268763"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4112">
  <id>libwebkit</id>
  <title>webkit: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1298470796"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617401" id="617401" title="bug number 617401" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2441" id="CVE-2010-2441" title="CVE-2010-2441" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4578" id="CVE-2010-4578" title="CVE-2010-4578" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2901" id="CVE-2010-2901" title="CVE-2010-2901" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4492" id="CVE-2010-4492" title="CVE-2010-4492" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0778" id="CVE-2011-0778" title="CVE-2011-0778" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4493" id="CVE-2010-4493" title="CVE-2010-4493" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4042" id="CVE-2010-4042" title="CVE-2010-4042" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0482" id="CVE-2011-0482" title="CVE-2011-0482" type="cve"/>
  </references>
  <description>This version upgrade of webkit  to 1.2.7 fixes the
following bugs:
- CVE-2010-2441: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:P/I:N/A:N): Permissions, Privileges,
  and Access Control (CWE-264)
- CVE-2010-2901: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)
- CVE-2010-4042: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Input Validation (CWE-20)
- CVE-2010-4492: CVSS v2 Base Score: 7.5
  (AV:N/AC:L/Au:N/C:P/I:P/A:P): Resource Management Errors
  (CWE-399)
- CVE-2010-4493: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Resource Management Errors
  (CWE-399)
- CVE-2010-4578: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Input Validation (CWE-20)
- CVE-2011-0482: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Numeric Errors (CWE-189)
- CVE-2011-0778: CVSS v2 Base Score: 3.7
  (AV:L/AC:H/Au:N/C:P/I:P/A:P): Permissions, Privileges,
  and Access Control (CWE-264)
</description>
  <pkglist>
    <collection>
        <package name="libwebkit-1_0-2" arch="i586" version="1.2.7" release="0.2.1">
          <filename>libwebkit-1_0-2-1.2.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2" arch="x86_64" version="1.2.7" release="0.2.1">
          <filename>libwebkit-1_0-2-1.2.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-1_0-2-32bit" arch="x86_64" version="1.2.7" release="0.2.1">
          <filename>libwebkit-1_0-2-32bit-1.2.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="i586" version="1.2.7" release="0.2.1">
          <filename>libwebkit-devel-1.2.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="libwebkit-devel" arch="x86_64" version="1.2.7" release="0.2.1">
          <filename>libwebkit-devel-1.2.7-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="libwebkit-lang" arch="noarch" version="1.2.7" release="0.2.1">
          <filename>libwebkit-lang-1.2.7-0.2.1.noarch.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="i586" version="1.2.7" release="0.2.1">
          <filename>webkit-jsc-1.2.7-0.2.1.i586.rpm</filename>
        </package>
        <package name="webkit-jsc" arch="x86_64" version="1.2.7" release="0.2.1">
          <filename>webkit-jsc-1.2.7-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="171693795d25077ba77fcc1ca170cc06"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4508">
  <id>libpython2_6-1_0</id>
  <title>python security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1304699399"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=682554" id="682554" title="bug number 682554" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1521" id="CVE-2011-1521" title="CVE-2011-1521" type="cve"/>
  </references>
  <description>This update of python fixes a possible denial of service
bug or information leakage vulnerability while using
user-crafted ftp:// or file:// URLs with urllib(2).
CVE-2011-1521: CVSS v2 Base Score: 6.4
(AV:N/AC:L/Au:N/C:P/I:N/A:P)
</description>
  <pkglist>
    <collection>
        <package name="libpython2_6-1_0" arch="i586" version="2.6.5" release="3.5.2">
          <filename>libpython2_6-1_0-2.6.5-3.5.2.i586.rpm</filename>
        </package>
        <package name="libpython2_6-1_0" arch="x86_64" version="2.6.5" release="3.5.2">
          <filename>libpython2_6-1_0-2.6.5-3.5.2.x86_64.rpm</filename>
        </package>
        <package name="libpython2_6-1_0-32bit" arch="x86_64" version="2.6.5" release="3.5.2">
          <filename>libpython2_6-1_0-32bit-2.6.5-3.5.2.x86_64.rpm</filename>
        </package>
        <package name="python" arch="i586" version="2.6.5" release="3.5.1">
          <filename>python-2.6.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="python" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-32bit" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-32bit-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-base" arch="i586" version="2.6.5" release="3.5.2">
          <filename>python-base-2.6.5-3.5.2.i586.rpm</filename>
        </package>
        <package name="python-base" arch="x86_64" version="2.6.5" release="3.5.2">
          <filename>python-base-2.6.5-3.5.2.x86_64.rpm</filename>
        </package>
        <package name="python-base-32bit" arch="x86_64" version="2.6.5" release="3.5.2">
          <filename>python-base-32bit-2.6.5-3.5.2.x86_64.rpm</filename>
        </package>
        <package name="python-curses" arch="i586" version="2.6.5" release="3.5.1">
          <filename>python-curses-2.6.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="python-curses" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-curses-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-demo" arch="i586" version="2.6.5" release="3.5.1">
          <filename>python-demo-2.6.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="python-demo" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-demo-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-devel" arch="i586" version="2.6.5" release="3.5.2">
          <filename>python-devel-2.6.5-3.5.2.i586.rpm</filename>
        </package>
        <package name="python-devel" arch="x86_64" version="2.6.5" release="3.5.2">
          <filename>python-devel-2.6.5-3.5.2.x86_64.rpm</filename>
        </package>
        <package name="python-gdbm" arch="i586" version="2.6.5" release="3.5.1">
          <filename>python-gdbm-2.6.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="python-gdbm" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-gdbm-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-idle" arch="i586" version="2.6.5" release="3.5.1">
          <filename>python-idle-2.6.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="python-idle" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-idle-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-tk" arch="i586" version="2.6.5" release="3.5.1">
          <filename>python-tk-2.6.5-3.5.1.i586.rpm</filename>
        </package>
        <package name="python-tk" arch="x86_64" version="2.6.5" release="3.5.1">
          <filename>python-tk-2.6.5-3.5.1.x86_64.rpm</filename>
        </package>
        <package name="python-xml" arch="i586" version="2.6.5" release="3.5.2">
          <filename>python-xml-2.6.5-3.5.2.i586.rpm</filename>
        </package>
        <package name="python-xml" arch="x86_64" version="2.6.5" release="3.5.2">
          <filename>python-xml-2.6.5-3.5.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d896a6edc77aa94396701cbe542e63e3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4522">
  <id>vino</id>
  <title>vino: fixed libvncservers CVE-2011-0904 and CVE-2011-0905</title>
  <release>openSUSE 11.3</release>
  <issued date="1304953501"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=691207" id="691207" title="bug number 691207" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0904" id="CVE-2011-0904" title="CVE-2011-0904" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0905" id="CVE-2011-0905" title="CVE-2011-0905" type="cve"/>
  </references>
  <description>Two out of bounds memory access vulnerabilities in vinos'
libvncserver have been fixed. CVE-2011-0904 and
CVE-2011-0905 have been assigned.
</description>
  <pkglist>
    <collection>
        <package name="vino" arch="i586" version="2.28.2" release="2.3.1">
          <filename>vino-2.28.2-2.3.1.i586.rpm</filename>
        </package>
        <package name="vino" arch="x86_64" version="2.28.2" release="2.3.1">
          <filename>vino-2.28.2-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="vino-lang" arch="noarch" version="2.28.2" release="2.3.1">
          <filename>vino-lang-2.28.2-2.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="6ce89e5d50d91911ef32744eb80138d9"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4353">
  <id>pure-ftpd</id>
  <title>New pure-ftpd version fix STARTTLS issues (CVE-2011-1575).</title>
  <release>openSUSE 11.3</release>
  <issued date="1302597718"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=686590" id="686590" title="bug number 686590" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1575" id="CVE-2011-1575" title="CVE-2011-1575" type="cve"/>
  </references>
  <description>Pure-ftpd is vulnerable to the STARTTLS command injection
issue similar to CVE-2011-0411 of postfix. CVE-2011-1575
has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="pure-ftpd" arch="i586" version="1.0.29" release="2.3.1">
          <filename>pure-ftpd-1.0.29-2.3.1.i586.rpm</filename>
        </package>
        <package name="pure-ftpd" arch="x86_64" version="1.0.29" release="2.3.1">
          <filename>pure-ftpd-1.0.29-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="129775a27c3f8e6ca9ecb255fb6f598a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4406">
  <id>kdelibs4</id>
  <title>kdelibs4: fixing XSS vulnerability in KHTML error pages (CVE-2011-1168)</title>
  <release>openSUSE 11.3</release>
  <issued date="1303147167"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=686652" id="686652" title="bug number 686652" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1168" id="CVE-2011-1168" title="CVE-2011-1168" type="cve"/>
  </references>
  <description>A XSS vulnerability in the way KHTML handles error pages
has been fixed. CVE-2011-1168 has been assigned to this
issue.
</description>
  <pkglist>
    <collection>
        <package name="kdelibs4" arch="i586" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="i586" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-branding-upstream" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-branding-upstream-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="i586" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-core-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-core" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-core-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="i586" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-doc-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="kdelibs4-doc" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>kdelibs4-doc-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4" arch="i586" version="4.4.4" release="3.6.1">
          <filename>libkde4-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="libkde4" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libkde4-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-32bit" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libkde4-32bit-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="i586" version="4.4.4" release="3.6.1">
          <filename>libkde4-devel-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="libkde4-devel" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libkde4-devel-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4" arch="i586" version="4.4.4" release="3.6.1">
          <filename>libkdecore4-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libkdecore4-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-32bit" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libkdecore4-32bit-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="i586" version="4.4.4" release="3.6.1">
          <filename>libkdecore4-devel-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="libkdecore4-devel" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libkdecore4-devel-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="i586" version="4.4.4" release="3.6.1">
          <filename>libksuseinstall-devel-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall-devel" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libksuseinstall-devel-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="i586" version="4.4.4" release="3.6.1">
          <filename>libksuseinstall1-4.4.4-3.6.1.i586.rpm</filename>
        </package>
        <package name="libksuseinstall1" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libksuseinstall1-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libksuseinstall1-32bit" arch="x86_64" version="4.4.4" release="3.6.1">
          <filename>libksuseinstall1-32bit-4.4.4-3.6.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="09dccba364ff2be6f4837c463bd2e92e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4551">
  <id>flash-player</id>
  <title>flash-player: Security update to 10.3</title>
  <release>openSUSE 11.3</release>
  <issued date="1305275964"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=693573" id="693573" title="bug number 693573" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0589" id="CVE-2011-0589" title="CVE-2011-0589" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0618" id="CVE-2011-0618" title="CVE-2011-0618" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0619" id="CVE-2011-0619" title="CVE-2011-0619" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0620" id="CVE-2011-0620" title="CVE-2011-0620" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0621" id="CVE-2011-0621" title="CVE-2011-0621" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0622" id="CVE-2011-0622" title="CVE-2011-0622" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0623" id="CVE-2011-0623" title="CVE-2011-0623" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0624" id="CVE-2011-0624" title="CVE-2011-0624" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0625" id="CVE-2011-0625" title="CVE-2011-0625" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0626" id="CVE-2011-0626" title="CVE-2011-0626" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0627" id="CVE-2011-0627" title="CVE-2011-0627" type="cve"/>
  </references>
  <description>Flash Player has been updated to version 10.3, fixing bugs
and security issues.

More information can be found on:
http://www.adobe.com/support/security/bulletins/apsb11-12.ht
ml
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.3.181.14" release="0.2.1">
          <filename>flash-player-10.3.181.14-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e962dfdd0100b37d8b76781ba1196656"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4356">
  <id>apparmor-utils</id>
  <title>apparmor-utils: Fix parsing of learning (null-XX) profiles</title>
  <release>openSUSE 11.3</release>
  <issued date="1302611827"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=546618" id="546618" title="bug number 546618" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=668311" id="668311" title="bug number 668311" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=685833" id="685833" title="bug number 685833" type="bugzilla"/>
  </references>
  <description>This updated fixes the parsing of learning (null-XX)
profiles with genprof and logprof (bnc#546618 bnc#668311
bnc#685833)
</description>
  <pkglist>
    <collection>
        <package name="apparmor-utils" arch="noarch" version="2.3.1" release="19.3.1">
          <filename>apparmor-utils-2.3.1-19.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e06aacb1a0423c63476787c7abd415aa"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4355">
  <id>apparmor-profiles</id>
  <title>apparmor-profiles: Fixed ntpd profile</title>
  <release>openSUSE 11.3</release>
  <issued date="1302611857"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=657054" id="657054" title="bug number 657054" type="bugzilla"/>
  </references>
  <description>This update fixes the ntpd profile to include sys_nice
capability.
</description>
  <pkglist>
    <collection>
        <package name="apparmor-profiles" arch="noarch" version="2.3" release="57.5.1">
          <filename>apparmor-profiles-2.3-57.5.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="15172042f72acc8c208df610623b9707"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4531">
  <id>hylafax</id>
  <title>hylafax: This update fixes a startup failure with the message &quot;No support for old protocol&quot;</title>
  <release>openSUSE 11.3</release>
  <issued date="1305020031"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=686487" id="686487" title="bug number 686487" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=632586" id="632586" title="bug number 632586" type="bugzilla"/>
  </references>
  <description>Hylafax failed to start with the message &quot; No support for
old protocol&quot; because the init script passed a parameter
that wasn't supported anymore. Fixed by this update.
</description>
  <pkglist>
    <collection>
        <package name="hylafax" arch="i586" version="6.0.4" release="4.3.2">
          <filename>hylafax-6.0.4-4.3.2.i586.rpm</filename>
        </package>
        <package name="hylafax" arch="x86_64" version="6.0.4" release="4.3.2">
          <filename>hylafax-6.0.4-4.3.2.x86_64.rpm</filename>
        </package>
        <package name="hylafax-client" arch="i586" version="6.0.4" release="4.3.2">
          <filename>hylafax-client-6.0.4-4.3.2.i586.rpm</filename>
        </package>
        <package name="hylafax-client" arch="x86_64" version="6.0.4" release="4.3.2">
          <filename>hylafax-client-6.0.4-4.3.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="e10f83998b21ed81ba6b59e3e96cb37d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4530">
  <id>culmus</id>
  <title>culmus: This update fixes missing TTF fonts</title>
  <release>openSUSE 11.3</release>
  <issued date="1305041480"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=691278" id="691278" title="bug number 691278" type="bugzilla"/>
  </references>
  <description>This update adds the missing TTF fonts from the culmus
package.
</description>
  <pkglist>
    <collection>
        <package name="culmus" arch="noarch" version="0.104" release="4.3.1">
          <filename>culmus-0.104-4.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a32451ea315607031b17b0568c6e7bde"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4582">
  <id>kvm</id>
  <title>kvm security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1305760448"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=690781" id="690781" title="bug number 690781" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689895" id="689895" title="bug number 689895" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1751" id="CVE-2011-1751" title="CVE-2011-1751" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1750" id="CVE-2011-1750" title="CVE-2011-1750" type="cve"/>
  </references>
  <description>By causing a hot-unplug of the pci-isa bridge from within
guests the qemu process could access already freed memory.
A privileged user inside the guest could exploit that to
crash the guest instance or potentially execute arbitrary
code on the host (CVE-2011-1751).

The virtio-blk driver did not properly validate read and
write request. A privileged user inside the guest could
exploit that to cause a heap corruption and crash the guest
instance or potentially execute arbitrary code on the host
(CVE-2011-1750).
</description>
  <pkglist>
    <collection>
        <package name="kvm" arch="i586" version="0.12.5" release="1.4.1">
          <filename>kvm-0.12.5-1.4.1.i586.rpm</filename>
        </package>
        <package name="kvm" arch="x86_64" version="0.12.5" release="1.4.1">
          <filename>kvm-0.12.5-1.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3208406b9acc4473cb38c0746b229816"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4588">
  <id>opera</id>
  <title>opera security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1305816995"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=694567" id="694567" title="bug number 694567" type="bugzilla"/>
  </references>
  <description>opera 11.11 fixes a security vulnerability. Citing
http://www.opera.com/support/kb/view/992/:

Framesets allow web pages to hold other pages inside them.
Certain frameset constructs are not handled correctly when
the page is unloaded, causing a memory corruption. To
inject code, additional techniques will have to be employed.
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="11.11" release="1.2.1">
          <filename>opera-11.11-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="11.11" release="1.2.1">
          <filename>opera-11.11-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="opera-gtk" arch="i586" version="11.11" release="1.2.1">
          <filename>opera-gtk-11.11-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera-gtk" arch="x86_64" version="11.11" release="1.2.1">
          <filename>opera-gtk-11.11-1.2.1.x86_64.rpm</filename>
        </package>
        <package name="opera-kde4" arch="i586" version="11.11" release="1.2.1">
          <filename>opera-kde4-11.11-1.2.1.i586.rpm</filename>
        </package>
        <package name="opera-kde4" arch="x86_64" version="11.11" release="1.2.1">
          <filename>opera-kde4-11.11-1.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="32e34ac457960c07b371eb7ae2043fdf"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4544">
  <id>rdesktop</id>
  <title>rdesktop security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1305226494"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=689029" id="689029" title="bug number 689029" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1595" id="CVE-2011-1595" title="CVE-2011-1595" type="cve"/>
  </references>
  <description>A malicious server could access any file on clients
connecting to it if the client shared some ressource
(CVE-2011-1595).
</description>
  <pkglist>
    <collection>
        <package name="rdesktop" arch="i586" version="1.6.0" release="43.2.1">
          <filename>rdesktop-1.6.0-43.2.1.i586.rpm</filename>
        </package>
        <package name="rdesktop" arch="x86_64" version="1.6.0" release="43.2.1">
          <filename>rdesktop-1.6.0-43.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="65e89e5e59969db3315995463ea1b354"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4599">
  <id>viewvc</id>
  <title>viewvc security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1305908248"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=694785" id="694785" title="bug number 694785" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5024" id="CVE-2009-5024" title="CVE-2009-5024" type="cve"/>
  </references>
  <description>cvsdb.py in viewvc did not honor an admin defined row limit
which could cause high load on the database server. viewvc
was updated to version 1.1.11 which fixes the issue
(CVE-2009-5024).
</description>
  <pkglist>
    <collection>
        <package name="viewvc" arch="noarch" version="1.1.11" release="1.3.1">
          <filename>viewvc-1.1.11-1.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1c753c345cd29a9cd0930b0dd29a81bc"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4604">
  <id>exim</id>
  <title>exim: Fixed a remote security issues</title>
  <release>openSUSE 11.3</release>
  <issued date="1306255490"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=694798" id="694798" title="bug number 694798" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=695144" id="695144" title="bug number 695144" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1407" id="CVE-2011-1407" title="CVE-2011-1407" type="cve"/>
  </references>
  <description>This update fixes a security issues:
- exim remote code exection (CVE-2011-1407) also some
  safety improvements regarding STARTTLS.
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.9.1">
          <filename>exim-4.71-4.9.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.9.1">
          <filename>exim-4.71-4.9.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.9.1">
          <filename>eximon-4.71-4.9.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.9.1">
          <filename>eximon-4.71-4.9.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.9.1">
          <filename>eximstats-html-4.71-4.9.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.9.1">
          <filename>eximstats-html-4.71-4.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2be20fbe6719d806168795d0d93999f9"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4580">
  <id>logrotate</id>
  <title>logrotate: Multiple security fixes</title>
  <release>openSUSE 11.3</release>
  <issued date="1305735908"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677336" id="677336" title="bug number 677336" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679661" id="679661" title="bug number 679661" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679662" id="679662" title="bug number 679662" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1154" id="CVE-2011-1154" title="CVE-2011-1154" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1155" id="CVE-2011-1155" title="CVE-2011-1155" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1098" id="CVE-2011-1098" title="CVE-2011-1098" type="cve"/>
  </references>
  <description>This update for logrotate provides the following fixes:

* The shred_file function in logrotate might allow
  context-dependent attackers to execute arbitrary commands
  via shell metacharacters in a log filename, as
  demonstrated by a filename that is automatically
  constructed on the basis of a hostname or virtual machine
  name (CVE-2011-1154) (bnc#679661)

* Race condition in the createOutputFile function in
  logrotate  allows local users to read log data by opening
  a file before the intended permissions are in place
  (CVE-2011-1098) (bnc#677336)

* The writeState function in logrotate might allow
  context-dependent attackers to cause a denial of service
  (rotation outage) via a (1) \n (newline) or (2) \
  (backslash) character in a log filename, as demonstrated
  by a filename that is automatically constructed on the
  basis of a hostname or virtual machine name
  (CVE-2011-1155) (bnc#679662)
</description>
  <pkglist>
    <collection>
        <package name="logrotate" arch="i586" version="3.7.8" release="7.3.1">
          <filename>logrotate-3.7.8-7.3.1.i586.rpm</filename>
        </package>
        <package name="logrotate" arch="x86_64" version="3.7.8" release="7.3.1">
          <filename>logrotate-3.7.8-7.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="80cdf13c34a49451e6a6bcf6d16a658b"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4609">
  <id>dovecot12</id>
  <title>dovecot security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1306321772"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=694778" id="694778" title="bug number 694778" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1929" id="CVE-2011-1929" title="CVE-2011-1929" type="cve"/>
  </references>
  <description>dovecot crash when parsing mail headers that contain NUL
characters (CVE-2011-1929)
</description>
  <pkglist>
    <collection>
        <package name="dovecot12" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-backend-mysql-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-mysql" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-backend-mysql-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-backend-pgsql-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-pgsql" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-backend-pgsql-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-backend-sqlite-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-backend-sqlite" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-backend-sqlite-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-devel-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-devel" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-devel-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-fts-lucene-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-lucene" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-fts-lucene-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="i586" version="1.2.17" release="2.2.1">
          <filename>dovecot12-fts-solr-1.2.17-2.2.1.i586.rpm</filename>
        </package>
        <package name="dovecot12-fts-solr" arch="x86_64" version="1.2.17" release="2.2.1">
          <filename>dovecot12-fts-solr-1.2.17-2.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="97c115667bf784eb2a969281a338f56a"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4614">
  <id>libmodplug</id>
  <title>libmodplug security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1306491067"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=691137" id="691137" title="bug number 691137" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1761" id="CVE-2011-1761" title="CVE-2011-1761" type="cve"/>
  </references>
  <description>specially crafted files could cause a stack overflow in
libmodplug (CVE-2011-1761). libmodplug version 0.8.8.3
fixes the problem.
</description>
  <pkglist>
    <collection>
        <package name="libmodplug-devel" arch="i586" version="0.8.8.3" release="2.3.1">
          <filename>libmodplug-devel-0.8.8.3-2.3.1.i586.rpm</filename>
        </package>
        <package name="libmodplug-devel" arch="x86_64" version="0.8.8.3" release="2.3.1">
          <filename>libmodplug-devel-0.8.8.3-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmodplug0" arch="i586" version="0.8.8.3" release="2.3.1">
          <filename>libmodplug0-0.8.8.3-2.3.1.i586.rpm</filename>
        </package>
        <package name="libmodplug0" arch="x86_64" version="0.8.8.3" release="2.3.1">
          <filename>libmodplug0-0.8.8.3-2.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmodplug0-32bit" arch="x86_64" version="0.8.8.3" release="2.3.1">
          <filename>libmodplug0-32bit-0.8.8.3-2.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f055e48d182b6f7f608cb8ff6aeb2fde"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4587">
  <id>ruby</id>
  <title>ruby security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1305653012"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=600752" id="600752" title="bug number 600752" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673740" id="673740" title="bug number 673740" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673750" id="673750" title="bug number 673750" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=655136" id="655136" title="bug number 655136" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=682287" id="682287" title="bug number 682287" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0541" id="CVE-2010-0541" title="CVE-2010-0541" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1004" id="CVE-2011-1004" title="CVE-2011-1004" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1005" id="CVE-2011-1005" title="CVE-2011-1005" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0188" id="CVE-2011-0188" title="CVE-2011-0188" type="cve"/>
  </references>
  <description>Ruby was prone to several security issues:
- a race condition allowed local users to delete arbitrary
  files (CVE-2011-1004)
- exception methods could bypass safe mode (CVE-2011-1005)
- webrick cross site scripting issue (CVE-2010-0541)
- memory corruption in the BigDecimal class (CVE-2011-0188)
</description>
  <pkglist>
    <collection>
        <package name="ruby" arch="i586" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-1.8.7.p249-8.9.1.i586.rpm</filename>
        </package>
        <package name="ruby" arch="x86_64" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-1.8.7.p249-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="ruby-devel" arch="i586" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-devel-1.8.7.p249-8.9.1.i586.rpm</filename>
        </package>
        <package name="ruby-devel" arch="x86_64" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-devel-1.8.7.p249-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="ruby-doc-html" arch="noarch" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-doc-html-1.8.7.p249-8.9.1.noarch.rpm</filename>
        </package>
        <package name="ruby-doc-ri" arch="noarch" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-doc-ri-1.8.7.p249-8.9.1.noarch.rpm</filename>
        </package>
        <package name="ruby-examples" arch="i586" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-examples-1.8.7.p249-8.9.1.i586.rpm</filename>
        </package>
        <package name="ruby-examples" arch="x86_64" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-examples-1.8.7.p249-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="ruby-test-suite" arch="i586" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-test-suite-1.8.7.p249-8.9.1.i586.rpm</filename>
        </package>
        <package name="ruby-test-suite" arch="x86_64" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-test-suite-1.8.7.p249-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="ruby-tk" arch="i586" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-tk-1.8.7.p249-8.9.1.i586.rpm</filename>
        </package>
        <package name="ruby-tk" arch="x86_64" version="1.8.7.p249" release="8.9.1">
          <filename>ruby-tk-1.8.7.p249-8.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="737a748b1a1ab17def20b4b5bbcff826"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4525">
  <id>xen-201105</id>
  <title>xen: Collective update</title>
  <release>openSUSE 11.3</release>
  <issued date="1305019222"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=691238" id="691238" title="bug number 691238" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623680" id="623680" title="bug number 623680" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=680824" id="680824" title="bug number 680824" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=688473" id="688473" title="bug number 688473" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679344" id="679344" title="bug number 679344" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=687981" id="687981" title="bug number 687981" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675817" id="675817" title="bug number 675817" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678871" id="678871" title="bug number 678871" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=675363" id="675363" title="bug number 675363" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678229" id="678229" title="bug number 678229" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=672833" id="672833" title="bug number 672833" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=665610" id="665610" title="bug number 665610" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=688757" id="688757" title="bug number 688757" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=678152" id="678152" title="bug number 678152" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1146" id="CVE-2011-1146" title="CVE-2011-1146" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1486" id="CVE-2011-1486" title="CVE-2011-1486" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1166" id="CVE-2011-1166" title="CVE-2011-1166" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1583" id="CVE-2011-1583" title="CVE-2011-1583" type="cve"/>
  </references>
  <description>Collective May/2011 update for Xen

Xen:

- 691238 - L3: question on behaviour change xm list
- 623680 - xen kernel freezes during boot when processor
  module is loaded
- 680824 - dom0 can't recognize boot disk when IOMMU is
  enabled
- 688473 - VUL-0: potential buffer overflow in tools
- 679344 - VUL-0: Xen: multi-vCPU pv guest may crash host
- 687981 - L3: mistyping model type when defining VIF
  crashes
- 675817 - Kernel panic when creating HVM guests on AMD
  platforms with XSAVE
- 678871 - dom0 hangs long time when starting hvm guests
  with memory &gt;= 64GB
- 675363 - Random lockups with kernel-xen. Possibly
  graphics related
- 678229 - restore of sles HVM fails
- 672833 - xen-tools bug causing problems with Ubuntu 10.10
  under Xen 4.
- 665610 - xm console &gt; 1 to same VM messes up both consoles

vm-install:

- 688757 - SLED10SP4 fully virtualized in SLES10SP4 XEN -
  kernel panic
- 678152 - Xen: virt-manager: harmless block device admin
  actions on FV guests mess up network (VIF) device type
  ==&gt; network lost.
</description>
  <pkglist>
    <collection>
        <package name="vm-install" arch="i586" version="0.4.30" release="0.4.1">
          <filename>vm-install-0.4.30-0.4.1.i586.rpm</filename>
        </package>
        <package name="vm-install" arch="x86_64" version="0.4.30" release="0.4.1">
          <filename>vm-install-0.4.30-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="xen" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-devel-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-devel" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-devel-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-doc-html-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-html" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-doc-html-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-doc-pdf-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-doc-pdf" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-doc-pdf-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="i586" version="4.0.1_21326_08_k2.6.34.8_0.2" release="0.7.1">
          <filename>xen-kmp-default-4.0.1_21326_08_k2.6.34.8_0.2-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-default" arch="x86_64" version="4.0.1_21326_08_k2.6.34.8_0.2" release="0.7.1">
          <filename>xen-kmp-default-4.0.1_21326_08_k2.6.34.8_0.2-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="i586" version="4.0.1_21326_08_k2.6.34.8_0.2" release="0.7.1">
          <filename>xen-kmp-desktop-4.0.1_21326_08_k2.6.34.8_0.2-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-kmp-desktop" arch="x86_64" version="4.0.1_21326_08_k2.6.34.8_0.2" release="0.7.1">
          <filename>xen-kmp-desktop-4.0.1_21326_08_k2.6.34.8_0.2-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-kmp-pae" arch="i586" version="4.0.1_21326_08_k2.6.34.8_0.2" release="0.7.1">
          <filename>xen-kmp-pae-4.0.1_21326_08_k2.6.34.8_0.2-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-libs-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-libs" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-libs-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-tools-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-tools" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-tools-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="i586" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-tools-domU-4.0.1_21326_08-0.7.1.i586.rpm</filename>
        </package>
        <package name="xen-tools-domU" arch="x86_64" version="4.0.1_21326_08" release="0.7.1">
          <filename>xen-tools-domU-4.0.1_21326_08-0.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="2450923ba6c0103e7d65e87165249a34"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4637">
  <id>gimp</id>
  <title>gimp: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1306851742"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=692877" id="692877" title="bug number 692877" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1178" id="CVE-2011-1178" title="CVE-2011-1178" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1782" id="CVE-2011-1782" title="CVE-2011-1782" type="cve"/>
  </references>
  <description>This update fixes various overflows:
+ CVE-2011-1178: CVSS v2 Base Score: 6.8
  (AV:N/AC:M/Au:N/C:P/I:P/A:P)
+ CVE-2011-1782: CVSS v2 Base Score: 6.8
  (AV:N/AC:M/Au:N/C:P/I:P/A:P)
</description>
  <pkglist>
    <collection>
        <package name="gimp" arch="i586" version="2.6.8" release="7.5.1">
          <filename>gimp-2.6.8-7.5.1.i586.rpm</filename>
        </package>
        <package name="gimp" arch="x86_64" version="2.6.8" release="7.5.1">
          <filename>gimp-2.6.8-7.5.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-branding-upstream" arch="i586" version="2.6.8" release="7.5.1">
          <filename>gimp-branding-upstream-2.6.8-7.5.1.i586.rpm</filename>
        </package>
        <package name="gimp-branding-upstream" arch="x86_64" version="2.6.8" release="7.5.1">
          <filename>gimp-branding-upstream-2.6.8-7.5.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-devel" arch="i586" version="2.6.8" release="7.5.1">
          <filename>gimp-devel-2.6.8-7.5.1.i586.rpm</filename>
        </package>
        <package name="gimp-devel" arch="x86_64" version="2.6.8" release="7.5.1">
          <filename>gimp-devel-2.6.8-7.5.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-help-browser" arch="i586" version="2.6.8" release="7.5.1">
          <filename>gimp-help-browser-2.6.8-7.5.1.i586.rpm</filename>
        </package>
        <package name="gimp-help-browser" arch="x86_64" version="2.6.8" release="7.5.1">
          <filename>gimp-help-browser-2.6.8-7.5.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-lang" arch="noarch" version="2.6.8" release="7.5.1">
          <filename>gimp-lang-2.6.8-7.5.1.noarch.rpm</filename>
        </package>
        <package name="gimp-module-hal" arch="i586" version="2.6.8" release="7.5.1">
          <filename>gimp-module-hal-2.6.8-7.5.1.i586.rpm</filename>
        </package>
        <package name="gimp-module-hal" arch="x86_64" version="2.6.8" release="7.5.1">
          <filename>gimp-module-hal-2.6.8-7.5.1.x86_64.rpm</filename>
        </package>
        <package name="gimp-plugins-python" arch="i586" version="2.6.8" release="7.5.1">
          <filename>gimp-plugins-python-2.6.8-7.5.1.i586.rpm</filename>
        </package>
        <package name="gimp-plugins-python" arch="x86_64" version="2.6.8" release="7.5.1">
          <filename>gimp-plugins-python-2.6.8-7.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f168786374ac03901e5a6d87f04e7399"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4629">
  <id>python-feedparser</id>
  <title>python-feedparser: This update fixes empty feeds</title>
  <release>openSUSE 11.3</release>
  <issued date="1306850292"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=696287" id="696287" title="bug number 696287" type="bugzilla"/>
  </references>
  <description>Feeds with embedded html style attributes were parsed
incorrectly, which resulted in missing feed data. Fixed by
this update.
</description>
  <pkglist>
    <collection>
        <package name="python-feedparser" arch="noarch" version="4.1" release="6.7.1">
          <filename>python-feedparser-4.1-6.7.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a3403f71f0ba1ec9e3cff8a3166e9980"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4632">
  <id>NetworkManager</id>
  <title>NetworkManager: It doesn't register host in the network via DHCP</title>
  <release>openSUSE 11.3</release>
  <issued date="1306857852"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=557720" id="557720" title="bug number 557720" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=404663" id="404663" title="bug number 404663" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update:
- #557720: NetworkManager doesn't registers host in the
  network via DHCP
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager" arch="i586" version="0.8" release="8.9.1">
          <filename>NetworkManager-0.8-8.9.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager" arch="x86_64" version="0.8" release="8.9.1">
          <filename>NetworkManager-0.8-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="i586" version="0.8" release="8.9.1">
          <filename>NetworkManager-devel-0.8-8.9.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-devel" arch="x86_64" version="0.8" release="8.9.1">
          <filename>NetworkManager-devel-0.8-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="i586" version="0.8" release="8.9.1">
          <filename>NetworkManager-doc-0.8-8.9.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-doc" arch="x86_64" version="0.8" release="8.9.1">
          <filename>NetworkManager-doc-0.8-8.9.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="i586" version="0.8" release="8.9.1">
          <filename>NetworkManager-glib-0.8-8.9.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-glib" arch="x86_64" version="0.8" release="8.9.1">
          <filename>NetworkManager-glib-0.8-8.9.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8cb4e30ac42e1bc801622b5ddb64785f"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4643">
  <id>kvm</id>
  <title>kvm: This update fixes problems with e1000 for solaris guests</title>
  <release>openSUSE 11.3</release>
  <issued date="1306857858"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=626654" id="626654" title="bug number 626654" type="bugzilla"/>
  </references>
  <description>This update provides fixes for e1000 problems with solaris
guest (bnc#626654).
</description>
  <pkglist>
    <collection>
        <package name="kvm" arch="i586" version="0.12.5" release="1.6.1">
          <filename>kvm-0.12.5-1.6.1.i586.rpm</filename>
        </package>
        <package name="kvm" arch="x86_64" version="0.12.5" release="1.6.1">
          <filename>kvm-0.12.5-1.6.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="455ede84cb7cf61a907f0e553b9d4222"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4538">
  <id>wireshark</id>
  <title>New wireshark updates fix some issues.</title>
  <release>openSUSE 11.3</release>
  <issued date="1305120225"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=688109" id="688109" title="bug number 688109" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1590" id="CVE-2011-1590" title="CVE-2011-1590" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1591" id="CVE-2011-1591" title="CVE-2011-1591" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1592" id="CVE-2011-1592" title="CVE-2011-1592" type="cve"/>
  </references>
  <description>This wireshark update fixes:
- Use of un-initialized variables (CVE-2011-1590)
- Buffer overflow in DECT dissector (CVE-2011-1591)
- Crash in NFS dissector on Windows (CVE-2011-1592)
</description>
  <pkglist>
    <collection>
        <package name="wireshark" arch="i586" version="1.4.4" release="0.4.1">
          <filename>wireshark-1.4.4-0.4.1.i586.rpm</filename>
        </package>
        <package name="wireshark" arch="x86_64" version="1.4.4" release="0.4.1">
          <filename>wireshark-1.4.4-0.4.1.x86_64.rpm</filename>
        </package>
        <package name="wireshark-devel" arch="i586" version="1.4.4" release="0.4.1">
          <filename>wireshark-devel-1.4.4-0.4.1.i586.rpm</filename>
        </package>
        <package name="wireshark-devel" arch="x86_64" version="1.4.4" release="0.4.1">
          <filename>wireshark-devel-1.4.4-0.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="9008a569a9cbe21f1675331a14dba65d"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4680">
  <id>xorg-x11-Xvnc</id>
  <title>xorg-x11-server: This update fixes the keyboard handling in VNC</title>
  <release>openSUSE 11.3</release>
  <issued date="1307415094"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=400520" id="400520" title="bug number 400520" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605015" id="605015" title="bug number 605015" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=660797" id="660797" title="bug number 660797" type="bugzilla"/>
  </references>
  <description>This update contains fixes for the following bugs:
- #400520: Keyboard handling was not XKB aware, which leads
  to a multitude of issues (e.g. no umlauts, Shift-PgUp not
  detected, etc.)
- A *major* memory leak was introduced by original xserver
  1.9 enabling patch
</description>
  <pkglist>
    <collection>
        <package name="xorg-x11-Xvnc" arch="i586" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.13.2.i586.rpm</filename>
        </package>
        <package name="xorg-x11-Xvnc" arch="x86_64" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-Xvnc-7.5_1.8.0-10.13.2.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server" arch="i586" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-server-7.5_1.8.0-10.13.2.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server" arch="x86_64" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-server-7.5_1.8.0-10.13.2.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server-extra" arch="i586" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-server-extra-7.5_1.8.0-10.13.2.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server-extra" arch="x86_64" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-server-extra-7.5_1.8.0-10.13.2.x86_64.rpm</filename>
        </package>
        <package name="xorg-x11-server-sdk" arch="i586" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-server-sdk-7.5_1.8.0-10.13.2.i586.rpm</filename>
        </package>
        <package name="xorg-x11-server-sdk" arch="x86_64" version="7.5_1.8.0" release="10.13.2">
          <filename>xorg-x11-server-sdk-7.5_1.8.0-10.13.2.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b7a0af84d16e7b147e02ebe810c9dcf8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4633">
  <id>bind</id>
  <title>bind:  Security update to 9.7.3P1</title>
  <release>openSUSE 11.3</release>
  <issued date="1306857760"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=696585" id="696585" title="bug number 696585" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910" id="CVE-2011-1910" title="CVE-2011-1910" type="cve"/>
  </references>
  <description>This update provides bind 9.7.3P1 which fixes a denial of
service issue in RRsig RRSET  handling. (CVE-2011-1910)
</description>
  <pkglist>
    <collection>
        <package name="bind" arch="i586" version="9.7.3P1" release="0.3.1">
          <filename>bind-9.7.3P1-0.3.1.i586.rpm</filename>
        </package>
        <package name="bind" arch="x86_64" version="9.7.3P1" release="0.3.1">
          <filename>bind-9.7.3P1-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="i586" version="9.7.3P1" release="0.3.1">
          <filename>bind-chrootenv-9.7.3P1-0.3.1.i586.rpm</filename>
        </package>
        <package name="bind-chrootenv" arch="x86_64" version="9.7.3P1" release="0.3.1">
          <filename>bind-chrootenv-9.7.3P1-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="bind-devel" arch="i586" version="9.7.3P1" release="0.3.1">
          <filename>bind-devel-9.7.3P1-0.3.1.i586.rpm</filename>
        </package>
        <package name="bind-devel" arch="x86_64" version="9.7.3P1" release="0.3.1">
          <filename>bind-devel-9.7.3P1-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" arch="noarch" version="9.7.3P1" release="0.3.1">
          <filename>bind-doc-9.7.3P1-0.3.1.noarch.rpm</filename>
        </package>
        <package name="bind-libs" arch="i586" version="9.7.3P1" release="0.3.1">
          <filename>bind-libs-9.7.3P1-0.3.1.i586.rpm</filename>
        </package>
        <package name="bind-libs" arch="x86_64" version="9.7.3P1" release="0.3.1">
          <filename>bind-libs-9.7.3P1-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="bind-libs-32bit" arch="x86_64" version="9.7.3P1" release="0.3.1">
          <filename>bind-libs-32bit-9.7.3P1-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="bind-utils" arch="i586" version="9.7.3P1" release="0.3.1">
          <filename>bind-utils-9.7.3P1-0.3.1.i586.rpm</filename>
        </package>
        <package name="bind-utils" arch="x86_64" version="9.7.3P1" release="0.3.1">
          <filename>bind-utils-9.7.3P1-0.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3b2ff8f121bcd9b261de946bdd7b28a1"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4556">
  <id>dhcp</id>
  <title>dhcp: Fix typo in dhclient-script</title>
  <release>openSUSE 11.3</release>
  <issued date="1305293826"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=690859" id="690859" title="bug number 690859" type="bugzilla"/>
  </references>
  <description>- Fixed dhclient-script typo causing ISC DHCPv6 client to
  execute ifup pre-down scripts also while renew, when the
  ipv6 address did not changed (bnc#690859).
</description>
  <pkglist>
    <collection>
        <package name="dhcp" arch="i586" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-4.1.2.ESV.1-0.8.1.i586.rpm</filename>
        </package>
        <package name="dhcp" arch="x86_64" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-4.1.2.ESV.1-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-client" arch="i586" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-client-4.1.2.ESV.1-0.8.1.i586.rpm</filename>
        </package>
        <package name="dhcp-client" arch="x86_64" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-client-4.1.2.ESV.1-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="i586" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-devel-4.1.2.ESV.1-0.8.1.i586.rpm</filename>
        </package>
        <package name="dhcp-devel" arch="x86_64" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-devel-4.1.2.ESV.1-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="i586" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-doc-4.1.2.ESV.1-0.8.1.i586.rpm</filename>
        </package>
        <package name="dhcp-doc" arch="x86_64" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-doc-4.1.2.ESV.1-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="i586" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-relay-4.1.2.ESV.1-0.8.1.i586.rpm</filename>
        </package>
        <package name="dhcp-relay" arch="x86_64" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-relay-4.1.2.ESV.1-0.8.1.x86_64.rpm</filename>
        </package>
        <package name="dhcp-server" arch="i586" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-server-4.1.2.ESV.1-0.8.1.i586.rpm</filename>
        </package>
        <package name="dhcp-server" arch="x86_64" version="4.1.2.ESV.1" release="0.8.1">
          <filename>dhcp-server-4.1.2.ESV.1-0.8.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="931c185c734406ba968974da48456a5e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4665">
  <id>flash-player</id>
  <title>flash-player: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1307396307"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=698261" id="698261" title="bug number 698261" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2107" id="CVE-2011-2107" title="CVE-2011-2107" type="cve"/>
  </references>
  <description>This update fixes a cross-site scripting vulnerability.
CVE-2011-2107: CVSS v2 Base Score: 5.8
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.3.181.22" release="0.2.1">
          <filename>flash-player-10.3.181.22-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="c4e28e547afb00402ad9f9c0f5fc2ae0"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4693">
  <id>libvmtools-devel</id>
  <title>open-vm-tools: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1307438183"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=673267" id="673267" title="bug number 673267" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=690491" id="690491" title="bug number 690491" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1681" id="CVE-2011-1681" title="CVE-2011-1681" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2146" id="CVE-2011-2146" title="CVE-2011-2146" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1787" id="CVE-2011-1787" title="CVE-2011-1787" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2145" id="CVE-2011-2145" title="CVE-2011-2145" type="cve"/>
  </references>
  <description>This update of open-vm-tools fixes the following
vulnerabilities which allowed an attacker to gain root
privileges within the guest system:
- CVE-2011-1681
- CVE-2011-2146
- CVE-2011-1787
- CVE-2011-2145
</description>
  <pkglist>
    <collection>
        <package name="libvmtools-devel" arch="i586" version="2011.05.27" release="0.3.1">
          <filename>libvmtools-devel-2011.05.27-0.3.1.i586.rpm</filename>
        </package>
        <package name="libvmtools-devel" arch="x86_64" version="2011.05.27" release="0.3.1">
          <filename>libvmtools-devel-2011.05.27-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0" arch="i586" version="2011.05.27" release="0.3.1">
          <filename>libvmtools0-2011.05.27-0.3.1.i586.rpm</filename>
        </package>
        <package name="libvmtools0" arch="x86_64" version="2011.05.27" release="0.3.1">
          <filename>libvmtools0-2011.05.27-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" arch="i586" version="2011.05.27" release="0.3.1">
          <filename>open-vm-tools-2011.05.27-0.3.1.i586.rpm</filename>
        </package>
        <package name="open-vm-tools" arch="x86_64" version="2011.05.27" release="0.3.1">
          <filename>open-vm-tools-2011.05.27-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-gui" arch="i586" version="2011.05.27" release="0.3.1">
          <filename>open-vm-tools-gui-2011.05.27-0.3.1.i586.rpm</filename>
        </package>
        <package name="open-vm-tools-gui" arch="x86_64" version="2011.05.27" release="0.3.1">
          <filename>open-vm-tools-gui-2011.05.27-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="vmware-guest-kmp-default" arch="i586" version="2011.05.27_k2.6.34.8_0.2" release="0.3.1">
          <filename>vmware-guest-kmp-default-2011.05.27_k2.6.34.8_0.2-0.3.1.i586.rpm</filename>
        </package>
        <package name="vmware-guest-kmp-default" arch="x86_64" version="2011.05.27_k2.6.34.8_0.2" release="0.3.1">
          <filename>vmware-guest-kmp-default-2011.05.27_k2.6.34.8_0.2-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="vmware-guest-kmp-desktop" arch="i586" version="2011.05.27_k2.6.34.8_0.2" release="0.3.1">
          <filename>vmware-guest-kmp-desktop-2011.05.27_k2.6.34.8_0.2-0.3.1.i586.rpm</filename>
        </package>
        <package name="vmware-guest-kmp-desktop" arch="x86_64" version="2011.05.27_k2.6.34.8_0.2" release="0.3.1">
          <filename>vmware-guest-kmp-desktop-2011.05.27_k2.6.34.8_0.2-0.3.1.x86_64.rpm</filename>
        </package>
        <package name="vmware-guest-kmp-pae" arch="i586" version="2011.05.27_k2.6.34.8_0.2" release="0.3.1">
          <filename>vmware-guest-kmp-pae-2011.05.27_k2.6.34.8_0.2-0.3.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="28a360be6a58179b99de3b22a480a93b"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4656">
  <id>gnome-bluetooth</id>
  <title>gnome-bluetooth: Unable to send files via OBEX. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1306857877"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=557678" id="557678" title="bug number 557678" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622946" id="622946" title="bug number 622946" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=680770" id="680770" title="bug number 680770" type="bugzilla"/>
  </references>
  <description>Sending files over Bluetooth using OBEX in GNOME was not
working properly. This updates fixes the issue by using the
right package dependencies.
</description>
  <pkglist>
    <collection>
        <package name="gnome-bluetooth" arch="i586" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-2.30.0-4.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-bluetooth" arch="x86_64" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-2.30.0-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-bluetooth-devel" arch="i586" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-devel-2.30.0-4.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-bluetooth-devel" arch="x86_64" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-devel-2.30.0-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-bluetooth-lang" arch="noarch" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-lang-2.30.0-4.3.1.noarch.rpm</filename>
        </package>
        <package name="gnome-bluetooth-plugins-geoclue" arch="i586" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-plugins-geoclue-2.30.0-4.3.1.i586.rpm</filename>
        </package>
        <package name="gnome-bluetooth-plugins-geoclue" arch="x86_64" version="2.30.0" release="4.3.1">
          <filename>gnome-bluetooth-plugins-geoclue-2.30.0-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnome-bluetooth7" arch="i586" version="2.30.0" release="4.3.1">
          <filename>libgnome-bluetooth7-2.30.0-4.3.1.i586.rpm</filename>
        </package>
        <package name="libgnome-bluetooth7" arch="x86_64" version="2.30.0" release="4.3.1">
          <filename>libgnome-bluetooth7-2.30.0-4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nautilus-sendto-plugin-bluetooth" arch="i586" version="2.30.0" release="4.3.1">
          <filename>nautilus-sendto-plugin-bluetooth-2.30.0-4.3.1.i586.rpm</filename>
        </package>
        <package name="nautilus-sendto-plugin-bluetooth" arch="x86_64" version="2.30.0" release="4.3.1">
          <filename>nautilus-sendto-plugin-bluetooth-2.30.0-4.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="818ff4344541b27b0bebd9a04ac9030c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4694">
  <id>java-1_6_0-sun</id>
  <title>Oracle Java 6 Update 26</title>
  <release>openSUSE 11.3</release>
  <issued date="1307546826"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=698754" id="698754" title="bug number 698754" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862" id="CVE-2011-0862" title="CVE-2011-0862" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873" id="CVE-2011-0873" title="CVE-2011-0873" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815" id="CVE-2011-0815" title="CVE-2011-0815" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0817" id="CVE-2011-0817" title="CVE-2011-0817" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863" id="CVE-2011-0863" title="CVE-2011-0863" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864" id="CVE-2011-0864" title="CVE-2011-0864" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802" id="CVE-2011-0802" title="CVE-2011-0802" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814" id="CVE-2011-0814" title="CVE-2011-0814" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871" id="CVE-2011-0871" title="CVE-2011-0871" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0786" id="CVE-2011-0786" title="CVE-2011-0786" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0788" id="CVE-2011-0788" title="CVE-2011-0788" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866" id="CVE-2011-0866" title="CVE-2011-0866" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868" id="CVE-2011-0868" title="CVE-2011-0868" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872" id="CVE-2011-0872" title="CVE-2011-0872" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867" id="CVE-2011-0867" title="CVE-2011-0867" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869" id="CVE-2011-0869" title="CVE-2011-0869" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865" id="CVE-2011-0865" title="CVE-2011-0865" type="cve"/>
  </references>
  <description>Oracle Java 6 Update 26 fixes several security
vulnerabilities.

Please refer to Oracle's site for further information:
http://www.oracle.com/technetwork/topics/security/javacpujun
e2011-313339.html

(CVE-2011-0862, CVE-2011-0873, CVE-2011-0815,
CVE-2011-0817, CVE-2011-0863, CVE-2011-0864, CVE-2011-0802,
CVE-2011-0814, CVE-2011-0871, CVE-2011-0786, CVE-2011-0788,
CVE-2011-0866, CVE-2011-0868, CVE-2011-0872, CVE-2011-0867,
CVE-2011-0869, CVE-2011-0865)
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-sun" arch="i586" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u26-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun" arch="x86_64" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-1.6.0.u26-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="i586" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u26-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-alsa" arch="x86_64" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-alsa-1.6.0.u26-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="i586" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u26-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-devel" arch="x86_64" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-devel-1.6.0.u26-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="i586" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u26-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-jdbc" arch="x86_64" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-jdbc-1.6.0.u26-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="i586" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u26-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-plugin" arch="x86_64" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-plugin-1.6.0.u26-0.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="i586" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u26-0.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-sun-src" arch="x86_64" version="1.6.0.u26" release="0.2.1">
          <filename>java-1_6_0-sun-src-1.6.0.u26-0.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d62fbcbc3965e1b60765d4f4fe4811d2"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="4678">
  <id>g3utils</id>
  <title>getty: faxspool does not work any more with pdf files</title>
  <release>openSUSE 11.3</release>
  <issued date="1307413881"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=646280" id="646280" title="bug number 646280" type="bugzilla"/>
  </references>
  <description>The following bug is fixed by this update: faxspool does
not work any more with pdf files (package mgetty+sendfax).
After the update gs is used directly, without acroreader.
</description>
  <pkglist>
    <collection>
        <package name="g3utils" arch="i586" version="1.1.36" release="31.3.1">
          <filename>g3utils-1.1.36-31.3.1.i586.rpm</filename>
        </package>
        <package name="g3utils" arch="x86_64" version="1.1.36" release="31.3.1">
          <filename>g3utils-1.1.36-31.3.1.x86_64.rpm</filename>
        </package>
        <package name="mgetty" arch="i586" version="1.1.36" release="31.3.1">
          <filename>mgetty-1.1.36-31.3.1.i586.rpm</filename>
        </package>
        <package name="mgetty" arch="x86_64" version="1.1.36" release="31.3.1">
          <filename>mgetty-1.1.36-31.3.1.x86_64.rpm</filename>
        </package>
        <package name="sendfax" arch="i586" version="1.1.36" release="31.3.1">
          <filename>sendfax-1.1.36-31.3.1.i586.rpm</filename>
        </package>
        <package name="sendfax" arch="x86_64" version="1.1.36" release="31.3.1">
          <filename>sendfax-1.1.36-31.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1e74836471c6894ff95148b3678bed51"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4669">
  <id>libopenssl-devel</id>
  <title>openssl: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1307380591"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=693027" id="693027" title="bug number 693027" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1945" id="CVE-2011-1945" title="CVE-2011-1945" type="cve"/>
  </references>
  <description>This update of openssl fixes a timing attack. This attack
can be used to obtain the private key of a TLS server
whenever ECDSA signatures are used. CVE-2011-1945: CVSS v2
Base Score: 4.3 (important) (AV:N/AC:M/Au:N/C:P/I:N/A:N):
Cryptographic Issues (CWE-310)
</description>
  <pkglist>
    <collection>
        <package name="libopenssl-devel" arch="i586" version="1.0.0" release="6.9.1">
          <filename>libopenssl-devel-1.0.0-6.9.1.i586.rpm</filename>
        </package>
        <package name="libopenssl-devel" arch="x86_64" version="1.0.0" release="6.9.1">
          <filename>libopenssl-devel-1.0.0-6.9.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="i586" version="1.0.0" release="6.9.1">
          <filename>libopenssl1_0_0-1.0.0-6.9.1.i586.rpm</filename>
        </package>
        <package name="libopenssl1_0_0" arch="x86_64" version="1.0.0" release="6.9.1">
          <filename>libopenssl1_0_0-1.0.0-6.9.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_0_0-32bit" arch="x86_64" version="1.0.0" release="6.9.1">
          <filename>libopenssl1_0_0-32bit-1.0.0-6.9.1.x86_64.rpm</filename>
        </package>
        <package name="openssl" arch="i586" version="1.0.0" release="6.9.1">
          <filename>openssl-1.0.0-6.9.1.i586.rpm</filename>
        </package>
        <package name="openssl" arch="x86_64" version="1.0.0" release="6.9.1">
          <filename>openssl-1.0.0-6.9.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-doc" arch="noarch" version="1.0.0" release="6.9.1">
          <filename>openssl-doc-1.0.0-6.9.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="7b7bf5e7e0fb34e3ce6adf21e867d660"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4687">
  <id>ConsoleKit</id>
  <title>ConsoleKit security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1307449430"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=686150" id="686150" title="bug number 686150" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4664" id="CVE-2010-4664" title="CVE-2010-4664" type="cve"/>
  </references>
  <description>Remote users logged in via e.g. ssh could open a consolekit
session that is considered local and therefore gain
additional privileges, e.g. via policykit (CVE-2010-4664).
</description>
  <pkglist>
    <collection>
        <package name="ConsoleKit" arch="i586" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-0.4.1-7.3.1.i586.rpm</filename>
        </package>
        <package name="ConsoleKit" arch="x86_64" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-0.4.1-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="ConsoleKit-32bit" arch="x86_64" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-32bit-0.4.1-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="ConsoleKit-devel" arch="i586" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-devel-0.4.1-7.3.1.i586.rpm</filename>
        </package>
        <package name="ConsoleKit-devel" arch="x86_64" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-devel-0.4.1-7.3.1.x86_64.rpm</filename>
        </package>
        <package name="ConsoleKit-x11" arch="i586" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-x11-0.4.1-7.3.1.i586.rpm</filename>
        </package>
        <package name="ConsoleKit-x11" arch="x86_64" version="0.4.1" release="7.3.1">
          <filename>ConsoleKit-x11-0.4.1-7.3.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="93a53abff8eee51575c6753b4d8fd245"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4716">
  <id>flash-player</id>
  <title>flash-player: Update to  10.3.181.26</title>
  <release>openSUSE 11.3</release>
  <issued date="1308093561"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=699942" id="699942" title="bug number 699942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2110" id="CVE-2011-2110" title="CVE-2011-2110" type="cve"/>
  </references>
  <description>A critical vulnerability has been identified in Adobe Flash
Player 10.3.181.23 and earlier versions for Windows,
Macintosh, Linux and Solaris, and Adobe Flash Player
10.3.185.23 and earlier versions for Android. This memory
corruption vulnerability (CVE-2011-2110) could cause a
crash and potentially allow an attacker to take control of
the affected system. There are reports that this
vulnerability is being exploited in the wild in targeted
attacks via malicious Web pages.
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.3.181.26" release="0.2.1">
          <filename>flash-player-10.3.181.26-0.2.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="37c8ea0c799c88fd6f13a46be975221c"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="4647">
  <id>apache2-mod_php5</id>
  <title>php5: security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1306925043"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=677782" id="677782" title="bug number 677782" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681214" id="681214" title="bug number 681214" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681194" id="681194" title="bug number 681194" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681197" id="681197" title="bug number 681197" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681195" id="681195" title="bug number 681195" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681291" id="681291" title="bug number 681291" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=681210" id="681210" title="bug number 681210" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=679278" id="679278" title="bug number 679278" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=695689" id="695689" title="bug number 695689" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1470" id="CVE-2011-1470" title="CVE-2011-1470" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1471" id="CVE-2011-1471" title="CVE-2011-1471" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1092" id="CVE-2011-1092" title="CVE-2011-1092" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1464" id="CVE-2011-1464" title="CVE-2011-1464" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1468" id="CVE-2011-1468" title="CVE-2011-1468" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1467" id="CVE-2011-1467" title="CVE-2011-1467" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421" id="CVE-2011-0421" title="CVE-2011-0421" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1469" id="CVE-2011-1469" title="CVE-2011-1469" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1148" id="CVE-2011-1148" title="CVE-2011-1148" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938" id="CVE-2011-1938" title="CVE-2011-1938" type="cve"/>
  </references>
  <description>This php5 update fixes:
- CVE-2011-0421: CVSS v2 Base Score: 2.6
  (AV:N/AC:H/Au:N/C:N/I:N/A:P): Input Validation (CWE-20)
- CVE-2011-1092: CVSS v2 Base Score: 5.1
  (AV:N/AC:H/Au:N/C:P/I:P/A:P): Numeric Errors (CWE-189)
- CVE-2011-1148: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Resource Management Errors
  (CWE-399)
- CVE-2011-1464: CVSS v2 Base Score: 2.1
  (AV:L/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)
- CVE-2011-1467: CVSS v2 Base Score: 5.0
  (AV:N/AC:L/Au:N/C:N/I:N/A:P)
- CVE-2011-1468: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Resource Management Errors
  (CWE-399)
- CVE-2011-1469: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P)
- CVE-2011-1470: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20)
- CVE-2011-1471: CVSS v2 Base Score: 4.3
  (AV:N/AC:M/Au:N/C:N/I:N/A:P): Numeric Errors (CWE-189)
- CVE-2011-1938: CVSS v2 Base Score: 2.6
  (AV:N/AC:H/Au:N/C:N/I:N/A:P)
</description>
  <pkglist>
    <collection>
        <package name="apache2-mod_php5" arch="i586" version="5.3.3" release="0.19.1">
          <filename>apache2-mod_php5-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="apache2-mod_php5" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>apache2-mod_php5-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-bcmath-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-bcmath" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-bcmath-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-bz2" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-bz2-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-bz2" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-bz2-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-calendar" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-calendar-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-calendar" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-calendar-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ctype" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-ctype-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-ctype" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-ctype-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-curl" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-curl-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-curl" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-curl-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-dba" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-dba-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-dba" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-dba-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-devel" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-devel-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-devel" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-devel-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-dom" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-dom-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-dom" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-dom-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-enchant" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-enchant-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-enchant" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-enchant-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-exif" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-exif-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-exif" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-exif-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-fastcgi-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-fastcgi" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-fastcgi-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-fileinfo-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-fileinfo" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-fileinfo-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ftp" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-ftp-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-ftp" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-ftp-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gd" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-gd-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-gd" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-gd-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gettext" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-gettext-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-gettext" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-gettext-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-gmp" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-gmp-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-gmp" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-gmp-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-hash" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-hash-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-hash" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-hash-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-iconv" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-iconv-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-iconv" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-iconv-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-imap" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-imap-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-imap" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-imap-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-intl" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-intl-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-intl" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-intl-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-json" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-json-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-json" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-json-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-ldap" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-ldap-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-ldap" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-ldap-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-mbstring-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-mbstring" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-mbstring-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-mcrypt-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-mcrypt" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-mcrypt-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-mysql" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-mysql-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-mysql" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-mysql-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-odbc" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-odbc-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-odbc" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-odbc-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-openssl" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-openssl-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-openssl" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-openssl-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-pcntl-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-pcntl" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-pcntl-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pdo" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-pdo-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-pdo" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-pdo-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pear" arch="noarch" version="5.3.3" release="0.19.1">
          <filename>php5-pear-5.3.3-0.19.1.noarch.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-pgsql-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-pgsql" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-pgsql-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-phar" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-phar-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-phar" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-phar-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-posix" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-posix-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-posix" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-posix-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-pspell" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-pspell-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-pspell" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-pspell-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-readline" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-readline-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-readline" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-readline-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-shmop" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-shmop-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-shmop" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-shmop-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-snmp" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-snmp-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-snmp" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-snmp-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-soap" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-soap-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-soap" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-soap-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sockets" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-sockets-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-sockets" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-sockets-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-sqlite-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-sqlite" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-sqlite-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-suhosin-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-suhosin" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-suhosin-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-sysvmsg-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvmsg" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-sysvmsg-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-sysvsem-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvsem" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-sysvsem-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-sysvshm-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-sysvshm" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-sysvshm-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-tidy" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-tidy-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-tidy" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-tidy-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-tokenizer-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-tokenizer" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-tokenizer-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-wddx" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-wddx-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-wddx" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-wddx-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-xmlreader-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlreader" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-xmlreader-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-xmlrpc-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlrpc" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-xmlrpc-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-xmlwriter-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-xmlwriter" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-xmlwriter-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-xsl" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-xsl-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-xsl" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-xsl-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-zip" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-zip-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-zip" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-zip-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
        <package name="php5-zlib" arch="i586" version="5.3.3" release="0.19.1">
          <filename>php5-zlib-5.3.3-0.19.1.i586.rpm</filename>
        </package>
        <package name="php5-zlib" arch="x86_64" version="5.3.3" release="0.19.1">
          <filename>php5-zlib-5.3.3-0.19.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
</updates>
