<?xml version="1.0" encoding="UTF-8"?>
<updates xmlns="http://novell.com/package/metadata/suse/updateinfo">
<!--PATCHINFO id="42b3db326472414935574b1ad1aef580"!-->
<update status="stable" from="maint-coord@suse.de" type="optional" version="2713">
  <id>flash-player</id>
  <title>flash-player: openSUSE maintained Flash Player 10.1</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088737"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>This patch adds an openSUSE maintained Adobe Flash Player
to openSUSE 11.3.
</description>
  <pkglist>
    <collection>
        <package name="flash-player" arch="i586" version="10.1.53.64" release="2.1.1">
          <filename>flash-player-10.1.53.64-2.1.1.i586.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="55bf85f01cfa819337a5ac07ceb6416e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2681">
  <id>opera</id>
  <title>opera: cross-origin loading of CSS stylesheets</title>
  <release>openSUSE 11.3</release>
  <issued date="1278633364"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=583620" id="583620" title="bug number 583620" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607823" id="607823" title="bug number 607823" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615942" id="615942" title="bug number 615942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0653" id="CVE-2010-0653" title="CVE-2010-0653" type="cve"/>
  </references>
  <description>Opera was upgraded to the 10.60 release.

It brings lots of new features, bugfixes and security fixes.

Security fixes include: CVE-2010-0653: Opera permits
cross-origin loading of CSS style sheets even when the
style sheet download has an incorrect MIME type and the
style sheet document is malformed, which allows remote HTTP
servers to obtain sensitive information via a crafted
document.

CVE-2010-1993: Opera 9.52 does not properly handle an
IFRAME element with a mailto: URL in its SRC attribute,
which allows remote attackers to cause a denial of service
(resource consumption) via an HTML document with many
IFRAME elements.
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="1c21e9336034276032f4738a37f59d08"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2714">
  <id>smolt</id>
  <title>smolt: Trigger smolt run</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088729"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will trigger the updater applets to
ask about submitting the hardware information to smolts.org.
</description>
  <pkglist>
    <collection>
        <package name="smolt" arch="noarch" version="1.4.2.2" release="3.1.1">
          <filename>smolt-1.4.2.2-3.1.1.noarch.rpm</filename>
        </package>
        <package name="smolt-gui" arch="noarch" version="1.4.2.2" release="3.1.1">
          <filename>smolt-gui-1.4.2.2-3.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="4981f7ab9d6828615efbdfd7087f67f3"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2715">
  <id>pullin-flash-player</id>
  <title>pullin-flash-player: Trigger installation of openSUSE flash player</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088806"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will pull in the openSUSE Maintained
Adobe Flash Player plugin.
</description>
  <pkglist>
    <collection>
        <package name="pullin-flash-player" arch="i586" version="11.3.1" release="2.1.1">
          <filename>pullin-flash-player-11.3.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="pullin-flash-player" arch="x86_64" version="11.3.1" release="2.1.1">
          <filename>pullin-flash-player-11.3.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b67863636c9875e1e4996d5ec06d9d66"!-->
<update status="stable" from="maint-coord@suse.de" type="optional" version="2712">
  <id>pullin-msttf-fonts</id>
  <title>Download and Install Microsoft(r) TrueType Core Fonts</title>
  <release>openSUSE 11.3</release>
  <issued date="1279088536"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621540" id="621540" title="bug number 621540" type="bugzilla"/>
  </references>
  <description>Installing this update will download install the Core
TrueType fonts to your system.

For legal reasons we can't include the Microsoft(R)
TrueType Core Fonts in our product. This patch downloads
these fonts and installs them on your system. Please note
that about 4 MByte data are downloaded additionality to
this patch.

The License for the fonts will be installed as
/usr/share/doc/corefonts/EULA.html
</description>
  <pkglist>
    <collection>
        <package name="fetchmsttfonts" arch="noarch" version="11.3" release="1.1.5">
          <filename>fetchmsttfonts-11.3-1.1.5.noarch.rpm</filename>
        </package>
        <package name="pullin-msttf-fonts" arch="noarch" version="11.3.1" release="1.3.1">
          <filename>pullin-msttf-fonts-11.3.1-1.3.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="b8d97752d94c9efd7f2ab6f6b3e9acb3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2728">
  <id>python-mako</id>
  <title>python-mako security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279188036"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619134" id="619134" title="bug number 619134" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2480" id="CVE-2010-2480" title="CVE-2010-2480" type="cve"/>
  </references>
  <description>Python-mako was prone to a Cross-Site Scripting flaw due to
improperly escaped single quotes (CVE-2010-2480).
</description>
  <pkglist>
    <collection>
        <package name="python-mako" arch="noarch" version="0.2.5" release="4.2.1">
          <filename>python-mako-0.2.5-4.2.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="784acf5959d8a40e9401844d4480d29e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2776">
  <id>lxsession</id>
  <title>lxsession security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279720438"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622083" id="622083" title="bug number 622083" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623192" id="623192" title="bug number 623192" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2532" id="CVE-2010-2532" title="CVE-2010-2532" type="cve"/>
  </references>
  <description>lxsession-logout did not properly lock the screen before
suspending, hibernating and switching between users which
could allow attackers with physical access to take control
of the system to obtain sensitive information and / or
execute arbitrary code in the context of the user who is
currently logged in  (CVE-2010-2532).
</description>
  <pkglist>
    <collection>
        <package name="lxsession" arch="i586" version="0.4.4" release="3.1.1">
          <filename>lxsession-0.4.4-3.1.1.i586.rpm</filename>
        </package>
        <package name="lxsession" arch="x86_64" version="0.4.4" release="3.1.1">
          <filename>lxsession-0.4.4-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5d5248496e8a8829d8dd091dd0f40f14"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2744">
  <id>glibc</id>
  <title>glibc: initgroups leaves out NIS groups on the second invocation</title>
  <release>openSUSE 11.3</release>
  <issued date="1279532355"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623098" id="623098" title="bug number 623098" type="bugzilla"/>
  </references>
  <description>This update fixes a bug in glibc:
- bnc#607064: glibc initgroups leaves out NIS groups on the
  second invocation
</description>
  <pkglist>
    <collection>
        <package name="glibc" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc" arch="i686" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.i686.rpm</filename>
        </package>
        <package name="glibc" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-devel" arch="i686" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.i686.rpm</filename>
        </package>
        <package name="glibc-devel" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-devel-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-html" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-html-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-html" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-html-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-i18ndata-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-i18ndata" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-i18ndata-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-info" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-info-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-info" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-info-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-locale" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-locale-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-obsolete-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-obsolete" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-obsolete-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile" arch="i586" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="glibc-profile" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-profile-32bit" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>glibc-profile-32bit-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
        <package name="nscd" arch="i586" version="2.11.2" release="3.1.1">
          <filename>nscd-2.11.2-3.1.1.i586.rpm</filename>
        </package>
        <package name="nscd" arch="x86_64" version="2.11.2" release="3.1.1">
          <filename>nscd-2.11.2-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="eba475581ca341d0282204f646886f90"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2729">
  <id>vte</id>
  <title>vte security update</title>
  <release>openSUSE 11.3</release>
  <issued date="1279261736"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621097" id="621097" title="bug number 621097" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2713" id="CVE-2010-2713" title="CVE-2010-2713" type="cve"/>
  </references>
  <description>VTE was vulnerable to an old title set+query attack which
could be used by remote attackers to execute arbitrary code
(CVE-2010-2713).
</description>
  <pkglist>
    <collection>
        <package name="vte" arch="i586" version="0.24.1" release="2.1.1">
          <filename>vte-0.24.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="vte" arch="x86_64" version="0.24.1" release="2.1.1">
          <filename>vte-0.24.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="vte-devel" arch="i586" version="0.24.1" release="2.1.1">
          <filename>vte-devel-0.24.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="vte-devel" arch="x86_64" version="0.24.1" release="2.1.1">
          <filename>vte-devel-0.24.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="vte-lang" arch="noarch" version="0.24.1" release="2.1.1">
          <filename>vte-lang-0.24.1-2.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="84e5a7eac307f669bfc6cffdcd7d8744"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2748">
  <id>spideroak-9681</id>
  <title>spideroak: Update to version 9681</title>
  <release>openSUSE 11.3</release>
  <issued date="1278337505"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621581" id="621581" title="bug number 621581" type="bugzilla"/>
  </references>
  <description>This updates SpiderOak to the latest official version, 9681
(bnc#621581). 


SpiderOak provides an easy, secure and consolidated free
online backup, sync, sharing, access &amp; storage solution.
</description>
  <pkglist>
    <collection>
        <package name="python-asn1" arch="noarch" version="0.0.11" release="1.2">
          <filename>python-asn1-0.0.11-1.2.noarch.rpm</filename>
        </package>
        <package name="python-bsddb3" arch="i586" version="5.0.0" release="1.1">
          <filename>python-bsddb3-5.0.0-1.1.i586.rpm</filename>
        </package>
        <package name="python-bsddb3" arch="x86_64" version="5.0.0" release="1.1">
          <filename>python-bsddb3-5.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="python-cerealizer" arch="noarch" version="0.7" release="1.2">
          <filename>python-cerealizer-0.7-1.2.noarch.rpm</filename>
        </package>
        <package name="python-concurrentloghandler" arch="noarch" version="0.8.4" release="1.2">
          <filename>python-concurrentloghandler-0.8.4-1.2.noarch.rpm</filename>
        </package>
        <package name="python-crypto" arch="i586" version="2.1.0" release="1.9">
          <filename>python-crypto-2.1.0-1.9.i586.rpm</filename>
        </package>
        <package name="python-crypto" arch="x86_64" version="2.1.0" release="1.9">
          <filename>python-crypto-2.1.0-1.9.x86_64.rpm</filename>
        </package>
        <package name="python-curl" arch="i586" version="7.19.0" release="3.2">
          <filename>python-curl-7.19.0-3.2.i586.rpm</filename>
        </package>
        <package name="python-curl" arch="x86_64" version="7.19.0" release="3.2">
          <filename>python-curl-7.19.0-3.2.x86_64.rpm</filename>
        </package>
        <package name="python-louie" arch="i586" version="1.1" release="1.2">
          <filename>python-louie-1.1-1.2.i586.rpm</filename>
        </package>
        <package name="python-louie" arch="x86_64" version="1.1" release="1.2">
          <filename>python-louie-1.1-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-nose" arch="i586" version="0.11.1" release="1.2">
          <filename>python-nose-0.11.1-1.2.i586.rpm</filename>
        </package>
        <package name="python-nose" arch="x86_64" version="0.11.1" release="1.2">
          <filename>python-nose-0.11.1-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-transaction" arch="i586" version="1.0a1" release="2.1.1">
          <filename>python-transaction-1.0a1-2.1.1.i586.rpm</filename>
        </package>
        <package name="python-transaction" arch="x86_64" version="1.0a1" release="2.1.1">
          <filename>python-transaction-1.0a1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="python-zc-lockfile" arch="noarch" version="1.0.0" release="2.1">
          <filename>python-zc-lockfile-1.0.0-2.1.noarch.rpm</filename>
        </package>
        <package name="python-zconfig" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zconfig-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zconfig" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zconfig-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-zdaemon" arch="noarch" version="2.0.4" release="1.2">
          <filename>python-zdaemon-2.0.4-1.2.noarch.rpm</filename>
        </package>
        <package name="python-zodb3" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zodb3-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zodb3" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zodb3-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="python-zope-event" arch="i586" version="3.5.0" release="2.2">
          <filename>python-zope-event-3.5.0-2.2.i586.rpm</filename>
        </package>
        <package name="python-zope-event" arch="x86_64" version="3.5.0" release="2.2">
          <filename>python-zope-event-3.5.0-2.2.x86_64.rpm</filename>
        </package>
        <package name="python-zope-proxy" arch="i586" version="3.6.0" release="1.2">
          <filename>python-zope-proxy-3.6.0-1.2.i586.rpm</filename>
        </package>
        <package name="python-zope-proxy" arch="x86_64" version="3.6.0" release="1.2">
          <filename>python-zope-proxy-3.6.0-1.2.x86_64.rpm</filename>
        </package>
        <package name="spideroak" arch="i586" version="9681" release="0.1.1">
          <filename>spideroak-9681-0.1.1.i586.rpm</filename>
        </package>
        <package name="spideroak" arch="x86_64" version="9681" release="0.1.1">
          <filename>spideroak-9681-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="8daa9a03826aef95669a5b369077f153"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2750">
  <id>exim</id>
  <title>exim: fixes two local issues;CVE-2010-2023 and CVE-2010-2024</title>
  <release>openSUSE 11.3</release>
  <issued date="1279617517"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612549" id="612549" title="bug number 612549" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2023" id="CVE-2010-2023" title="CVE-2010-2023" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2024" id="CVE-2010-2024" title="CVE-2010-2024" type="cve"/>
  </references>
  <description>Two local vulnerabilities have been fixed in the exim MTA
which allowed attackers to create arbitrary files or to
change ownership of arbitrary files. CVE-2010-2023 and
CVE-2010-2024 have been assigned to these issues.
</description>
  <pkglist>
    <collection>
        <package name="exim" arch="i586" version="4.71" release="4.1.1">
          <filename>exim-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="exim" arch="x86_64" version="4.71" release="4.1.1">
          <filename>exim-4.71-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="eximon" arch="i586" version="4.71" release="4.1.1">
          <filename>eximon-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="eximon" arch="x86_64" version="4.71" release="4.1.1">
          <filename>eximon-4.71-4.1.1.x86_64.rpm</filename>
        </package>
        <package name="eximstats-html" arch="i586" version="4.71" release="4.1.1">
          <filename>eximstats-html-4.71-4.1.1.i586.rpm</filename>
        </package>
        <package name="eximstats-html" arch="x86_64" version="4.71" release="4.1.1">
          <filename>eximstats-html-4.71-4.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="d3cfa64ebd32e46b75f3e7ef4499fb62"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2720">
  <id>libtiff-devel</id>
  <title>libtiff security updates</title>
  <release>openSUSE 11.3</release>
  <issued date="1279176442"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612879" id="612879" title="bug number 612879" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067" id="CVE-2010-2067" title="CVE-2010-2067" type="cve"/>
  </references>
  <description>specially crafted tiff images could cause a buffer overflow
in libtiff (CVE-2010-2067).
</description>
  <pkglist>
    <collection>
        <package name="libtiff-devel" arch="i586" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="libtiff-devel" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff-devel-32bit" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff-devel-32bit-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3" arch="i586" version="3.9.2" release="5.1.1">
          <filename>libtiff3-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="libtiff3" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff3-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff3-32bit" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>libtiff3-32bit-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" arch="i586" version="3.9.2" release="5.1.1">
          <filename>tiff-3.9.2-5.1.1.i586.rpm</filename>
        </package>
        <package name="tiff" arch="x86_64" version="3.9.2" release="5.1.1">
          <filename>tiff-3.9.2-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="94fc6c315469432a43f8779997029d74"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2754">
  <id>seamonkey</id>
  <title>seamonkey: Update to 2.0.6 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279721691"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Seamonkey to the 2.0.6 security
release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-35 / CVE-2010-1208: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in the DOM attribute cloning routine where under
certain circumstances an event attribute node can be
deleted while another object still contains a reference to
it. This reference could subsequently be accessed,
potentially causing the execution of attacker controlled
memory.

MFSA 2010-36 / CVE-2010-1209: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an error in Mozilla's implementation of NodeIterator in
which a malicious NodeFilter could be created which would
detach nodes from the DOM tree while it was being
traversed. The use of a detached and subsequently deleted
node could result in the execution of attacker-controlled
memory.

MFSA 2010-37 / CVE-2010-1214: Security researcher J23
reported via TippingPoint's Zero Day Initiative an error in
the code used to store the names and values of plugin
parameter elements. A malicious page could embed plugin
content containing a very large number of parameter
elements which would cause an overflow in the integer value
counting them. This integer is later used in allocating a
memory buffer used to store the plugin parameters. Under
such conditions, too small a buffer would be created and
attacker-controlled data could be written past the end of
the buffer, potentially resulting in code execution.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-45 / CVE-2010-1206: Google security researcher
Michal Zalewski reported two methods for spoofing the
contents of the location bar. The first method works by
opening a new window containing a resource that responds
with an HTTP 204 (no content) and then using the reference
to the new window to insert HTML content into the blank
document. The second location bar spoofing method does not
require that the resource opened in a new window respond
with 204, as long as the opener calls window.stop() before
the document is loaded. In either case a user could be
mislead as to the correct location of the document they are
currently viewing.

MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi
Chancel reported that the location bar could be spoofed to
look like a secure page when the current document was
served via plaintext. The vulnerability is triggered by a
server by first redirecting a request for a plaintext
resource to another resource behind a valid SSL/TLS
certificate. A second request made to the original
plaintext resource which is responded to not with a
redirect but with JavaScript containing history.back() and
history.forward() will result in the plaintext resource
being displayed with valid SSL/TLS badging in the location
bar. References


MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="seamonkey" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-dom-inspector-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-dom-inspector" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-dom-inspector-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-irc-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-irc" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-irc-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-common-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-common" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-common-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-other-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-translations-other" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-translations-other-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="i586" version="2.0.6" release="0.1.1">
          <filename>seamonkey-venkman-2.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="seamonkey-venkman" arch="x86_64" version="2.0.6" release="0.1.1">
          <filename>seamonkey-venkman-2.0.6-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="0a27214568585051fe4391074990ff56"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2737">
  <id>postfix</id>
  <title>postfix: Chrooted mysql.sock lost on mysql restart. Fixed by this update.</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527675"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606251" id="606251" title="bug number 606251" type="bugzilla"/>
  </references>
  <description>This updates fixes several problems with postfix:
- using my_print_defaults command for parsing of /etc/my.cnf
- using quotation marks: &quot;$PF_CHROOT&quot;
- adding sysconfig option POSTFIX_MYSQL_CONN=(socket,tcp)
- MYSQL_SOCK_DIR is mounted with '-o bind' to postfix
  CHROOT now
</description>
  <pkglist>
    <collection>
        <package name="postfix" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-devel" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-devel-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-devel" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-devel-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-doc" arch="noarch" version="2.7.1" release="2.1.1">
          <filename>postfix-doc-2.7.1-2.1.1.noarch.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-mysql-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-mysql" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-mysql-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="i586" version="2.7.1" release="2.1.1">
          <filename>postfix-postgresql-2.7.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="postfix-postgresql" arch="x86_64" version="2.7.1" release="2.1.1">
          <filename>postfix-postgresql-2.7.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="f2a3614d8d7e94514b5b854f4d8bb359"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2745">
  <id>yast2-gtk</id>
  <title>yast2-gtk: updated to version 2.21.68 fixing bnc#609778 and bnc#620513</title>
  <release>openSUSE 11.3</release>
  <issued date="1279530498"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609778" id="609778" title="bug number 609778" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620513" id="620513" title="bug number 620513" type="bugzilla"/>
  </references>
  <description>yast2-gtk was updated to fix the following bugs bnc#609778
- yast software management (qt,gtk,ncurses): configuration
&gt; online from menubar does not work as expected.  Partly
fixed by this update for the gtk interface by omitting
online-update configuration menu item when not running
online-update. bnc#620513 - sw_single (gtk): freeze when
opening the Dependencies box.  Fixes were also made to make
the Versions box for a selected package more prominent.
</description>
  <pkglist>
    <collection>
        <package name="yast2-gtk" arch="i586" version="2.21.68" release="0.1.1">
          <filename>yast2-gtk-2.21.68-0.1.1.i586.rpm</filename>
        </package>
        <package name="yast2-gtk" arch="x86_64" version="2.21.68" release="0.1.1">
          <filename>yast2-gtk-2.21.68-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="aafc622b521f6bf7a10c33c97623edba"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2775">
  <id>NetworkManager-novellvpn</id>
  <title>NetworkManager-NovellVPN: Fix for NovellVPN Connection Requires to Accept Advanced Options to Work</title>
  <release>openSUSE 11.3</release>
  <issued date="1279711811"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622854" id="622854" title="bug number 622854" type="bugzilla"/>
  </references>
  <description>This update fixes:
- bnc#622854: NovellVPN Connection Requires to Accept
  Advanced Options to Work
</description>
  <pkglist>
    <collection>
        <package name="NetworkManager-novellvpn" arch="i586" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-0.7.2.r1138-7.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn" arch="x86_64" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-0.7.2.r1138-7.1.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-gnome" arch="i586" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-gnome-0.7.2.r1138-7.1.1.i586.rpm</filename>
        </package>
        <package name="NetworkManager-novellvpn-gnome" arch="x86_64" version="0.7.2.r1138" release="7.1.1">
          <filename>NetworkManager-novellvpn-gnome-0.7.2.r1138-7.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="92089c2493010e5ba10b4496e8123ca8"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2793">
  <id>release-notes-openSUSE</id>
  <title>release-notes-openSUSE: Various additions and translations</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868056"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621890" id="621890" title="bug number 621890" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=617092" id="617092" title="bug number 617092" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619193" id="619193" title="bug number 619193" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=621469" id="621469" title="bug number 621469" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623179" id="623179" title="bug number 623179" type="bugzilla"/>
  </references>
  <description>Enhancements to the openSUSE release notes. It adds and
updates some translations.
</description>
  <pkglist>
    <collection>
        <package name="release-notes-openSUSE" arch="noarch" version="11.3.6" release="0.1.1">
          <filename>release-notes-openSUSE-11.3.6-0.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="3a2da176b650999d89cf35b0d6e75a7e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2743">
  <id>gnome-panel</id>
  <title>gnome-panel: Fix newly created panels to be visible</title>
  <release>openSUSE 11.3</release>
  <issued date="1279528123"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=620418" id="620418" title="bug number 620418" type="bugzilla"/>
  </references>
  <description>This update fixes an issue in Gnome Panel:
- bnc#620418: New Panel failed
</description>
  <pkglist>
    <collection>
        <package name="gnome-panel" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-devel" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-devel-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-devel" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-devel-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-doc" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-doc-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-doc" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-doc-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-extras" arch="i586" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-extras-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="gnome-panel-extras" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-extras-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="gnome-panel-lang" arch="noarch" version="2.30.0" release="5.1.1">
          <filename>gnome-panel-lang-2.30.0-5.1.1.noarch.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0" arch="i586" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-2.30.0-5.1.1.i586.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
        <package name="libpanel-applet-2-0-32bit" arch="x86_64" version="2.30.0" release="5.1.1">
          <filename>libpanel-applet-2-0-32bit-2.30.0-5.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="61e6ca70c87edaaeb2ba72b145c0865c"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2741">
  <id>udisks</id>
  <title>udisks: Fixed ejecting usb-drives or disks as normal user</title>
  <release>openSUSE 11.3</release>
  <issued date="1279527609"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=618955" id="618955" title="bug number 618955" type="bugzilla"/>
  </references>
  <description>A problem in udisks was fixed:
- bnc#618955: Cannot eject usb-drives or disks as normal
  user
</description>
  <pkglist>
    <collection>
        <package name="udisks" arch="i586" version="1.0.1" release="2.1.1">
          <filename>udisks-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="udisks" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>udisks-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
        <package name="udisks-devel" arch="i586" version="1.0.1" release="2.1.1">
          <filename>udisks-devel-1.0.1-2.1.1.i586.rpm</filename>
        </package>
        <package name="udisks-devel" arch="x86_64" version="1.0.1" release="2.1.1">
          <filename>udisks-devel-1.0.1-2.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="30bc69039fff036aedfdac5dd4adcf98"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2752">
  <id>unscd</id>
  <title>unscd: Fixed unscd does not start issue</title>
  <release>openSUSE 11.3</release>
  <issued date="1279711573"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622910" id="622910" title="bug number 622910" type="bugzilla"/>
  </references>
  <description>This update fixes a non starting unscd issue.

- bnc#622910: unscd does not start, rpm verify does not
  show error :-(
</description>
  <pkglist>
    <collection>
        <package name="unscd" arch="i586" version="0.45" release="6.1.1">
          <filename>unscd-0.45-6.1.1.i586.rpm</filename>
        </package>
        <package name="unscd" arch="x86_64" version="0.45" release="6.1.1">
          <filename>unscd-0.45-6.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="a618f6f1ba6d2380c7bf23f8cdfbbd8e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2755">
  <id>MozillaThunderbird</id>
  <title>MozillaThunderbird: Update to 3.0.6 security release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279723552"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=622506" id="622506" title="bug number 622506" type="bugzilla"/>
  </references>
  <description>This update brings Mozilla Thunderbird to the 3.0.6
security release.

It fixes following security bugs: MFSA 2010-34 /
CVE-2010-1211: Mozilla developers identified and fixed
several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these
bugs showed evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor
Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert
reported memory safety problems that affected Firefox 3.6
and Firefox 3.5.

MFSA 2010-39 / CVE-2010-2752: Security researcher J23
reported via TippingPoint's Zero Day Initiative that an
array class used to store CSS values contained an integer
overflow vulnerability. The 16 bit integer value used in
allocating the size of the array could overflow, resulting
in too small a memory buffer being created. When the array
was later populated with CSS values data would be written
past the end of the buffer potentially resulting in the
execution of attacker-controlled memory.

MFSA 2010-40 / CVE-2010-2753: Security researcher
regenrecht reported via TippingPoint's Zero Day Initiative
an integer overflow vulnerability in the implementation of
the XUL &lt;tree&gt; element's selection attribute. When the size
of a new selection is sufficiently large the integer used
in calculating the length of the selection can overflow,
resulting in a bogus range being marked selected. When
adjustSelection is then called on the bogus range the range
is deleted leaving dangling references to the ranges which
could be used by an attacker to call into deleted memory
and run arbitrary code on a victim's computer.

MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin
reported a buffer overflow in Mozilla graphics code which
consumes image data processed by libpng. A malformed PNG
file could be created which would cause libpng to
incorrectly report the size of the image to downstream
consumers. When the dimensions of such images are
underreported, the Mozilla code responsible for displaying
the graphic will allocate too small a memory buffer to
contain the image data and will wind up writing data past
the end of the buffer. This could result in the execution
of attacker-controlled memory.

MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke
Hasegawa reported that the Web Worker method importScripts
can read and parse resources from other domains even when
the content is not valid JavaScript. This is a violation of
the same-origin policy and could be used by an attacker to
steal information from other sites.

MFSA 2010-46 / CVE-2010-0654: Google security researcher
Chris Evans reported that data can be read across domains
by injecting bogus CSS selectors into a target site and
then retrieving the data using JavaScript APIs. If an
attacker can inject opening and closing portions of a CSS
selector into points A and B of a target page, then the
region between the two injection points becomes readable to
JavaScript through, for example, the getComputedStyle() API.

MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush
Dalili reported that potentially sensitive URL parameters
could be leaked across domains upon script errors when the
script filename and line number is included in the error
message.
</description>
  <pkglist>
    <collection>
        <package name="MozillaThunderbird" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-devel-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-devel" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-devel-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-common-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-common" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-common-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="i586" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-other-3.0.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="MozillaThunderbird-translations-other" arch="x86_64" version="3.0.6" release="0.1.1">
          <filename>MozillaThunderbird-translations-other-3.0.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="enigmail" arch="i586" version="1.0.1" release="3.1.1">
          <filename>enigmail-1.0.1-3.1.1.i586.rpm</filename>
        </package>
        <package name="enigmail" arch="x86_64" version="1.0.1" release="3.1.1">
          <filename>enigmail-1.0.1-3.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="366a569e33905d24e7539a5ec70cb07e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2756">
  <id>wine</id>
  <title>wine: Update from 1.2-rc6 to 1.2 release</title>
  <release>openSUSE 11.3</release>
  <issued date="1279780819"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623394" id="623394" title="bug number 623394" type="bugzilla"/>
  </references>
  <description>This update brings Wine from the 1.2 release candidate 6 to
the final 1.2 release.
</description>
  <pkglist>
    <collection>
        <package name="wine" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine" arch="x86_64" version="1.2" release="0.1.1">
          <filename>wine-1.2-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="wine-32bit" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-32bit-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine-devel" arch="i586" version="1.2" release="0.1.1">
          <filename>wine-devel-1.2-0.1.1.i586.rpm</filename>
        </package>
        <package name="wine-devel" arch="x86_64" version="1.2" release="0.1.1">
          <filename>wine-devel-1.2-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
<!--PATCHINFO id="5b8f75ddbdb9270e24b376b404ff130e"!-->
<update status="stable" from="maint-coord@suse.de" type="recommended" version="2785">
  <id>k3b</id>
  <title>k3b: Update to 2.0 final</title>
  <release>openSUSE 11.3</release>
  <issued date="1279868201"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=623399" id="623399" title="bug number 623399" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=619731" id="619731" title="bug number 619731" type="bugzilla"/>
  </references>
  <description>Update to 2.0 final. It updates only translations and fixes
some bugs.
- Fix freeze while ripping CD audio (bko#235466)
- Fix drag and drop from file managers to k3b project
  (bko#242745)
- Install app icons in hicolor
- Fixing missing icon when Oxygen icons not used for
  desktop (bnc#619731)
</description>
  <pkglist>
    <collection>
        <package name="k3b" arch="i586" version="2.0.0" release="1.1.1">
          <filename>k3b-2.0.0-1.1.1.i586.rpm</filename>
        </package>
        <package name="k3b" arch="x86_64" version="2.0.0" release="1.1.1">
          <filename>k3b-2.0.0-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="k3b-devel" arch="i586" version="2.0.0" release="1.1.1">
          <filename>k3b-devel-2.0.0-1.1.1.i586.rpm</filename>
        </package>
        <package name="k3b-devel" arch="x86_64" version="2.0.0" release="1.1.1">
          <filename>k3b-devel-2.0.0-1.1.1.x86_64.rpm</filename>
        </package>
        <package name="k3b-lang" arch="noarch" version="2.0.0" release="1.1.1">
          <filename>k3b-lang-2.0.0-1.1.1.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
</updates>
