<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="72d1a9718e54cfbd6617b5b81cb1e40d"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="compat-openssl097g-2171"
    timestamp="1160757340"
    engine="1.0">
  <yum:name>compat-openssl097g</yum:name>
  <summary lang="en">compat-openssl097g: Fix for a buffer overflow and a DoS-condition.</summary>
  <summary lang="de">compat-openssl097g: Ein Pufferüberlauf und eine DoS-Verwundbarkeit wurden behoben.</summary>
  <description lang="en">A buffer overflow condition within the
SSL_get_shared_ciphers() function and a DoS condition known
as &quot;parasitic public keys&quot; have been fixed. The later
problem allowed attackers to trick the OpenSSL engine to
spend an extraordinary amount of time to process public
keys. The following CAN numbers have been assigned:
CVE-2006-2937, CVE-2006-2940, CVE-2006-3738, CVE-2006-4339
and CVE-2006-4343.
</description>
  <description lang="de">Ein Pufferüberlauf in der SSL_get_shared_ciphers() Funktion
und eine DoS-Verwundbarkeit bekannt als &quot;parasitic public
keys&quot;-Problem wurden behoben. Letzteres Problem erlaubte es
Angreifern, Schlüssel zu erzeugen, deren Verarbeitung durch
OpenSSL nur mit unakzeptabel hohem Zeitaufwand möglich war.
Die folgenden CAN-Nummern wurden diesen Problemen
zugewiesen: CVE-2006-2937, CVE-2006-2940, CVE-2006-3738,
CVE-2006-4339 und CVE-2006-4343.
</description>
  <yum:version ver="2171" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="compat-openssl097g" epoch="0" ver="0.9.7g" rel="13.5" flags="EQ"/>
    <rpm:entry kind="atom" name="compat-openssl097g-32bit" epoch="0" ver="0.9.7g" rel="13.5" flags="EQ"/>
    <rpm:entry kind="atom" name="compat-openssl097g-64bit" epoch="0" ver="0.9.7g" rel="13.5" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>compat-openssl097g</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.9.7g" rel="13.5"/>
      <checksum type="sha" pkgid="YES">6989013ad997edd9969ae58c35f03a71fd6a05c2</checksum>
      <time file="1160992523" build="1160757340"/>
      <size package="644777" installed="1621565" archive="1624304"/>
      <location href="rpm/i586/compat-openssl097g-0.9.7g-13.5.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="compat-openssl097g" epoch="0" ver="0.9.7g" rel="13.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="compat-openssl097g"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/compat-openssl097g-0.9.7g-13.5.i586.patch.rpm"/>
          <checksum type="sha">310f1cac7f1425b633865f5ae05fb0367d5dd273</checksum>
          <time file="1161018048" build="1160757340"/>
          <size package="531761" archive="1216172"/>
          <base-version epoch="0" ver="0.9.7g" rel="11"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/compat-openssl097g-0.9.7g-11_13.5.i586.delta.rpm"/>
          <checksum type="sha">903162e4cf737f999e322fcbe9026f6ea1ed4368</checksum>
          <time file="1161018050" build="1160757340"/>
          <size package="180488" archive="0"/>
          <base-version epoch="0" ver="0.9.7g" rel="11" md5sum="9c0b4f3fda143c746857bf001f85b54a" buildtime="1145760551" sequence_info="compat-openssl097g-0.9.7g-11-9332bf1c69dadf0f88a3555e724ef6cb30"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>compat-openssl097g</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.9.7g" rel="13.5"/>
      <checksum type="sha" pkgid="YES">f4f508cd8991f0027f9f61a963f72f6dba2c6da9</checksum>
      <time file="1160992702" build="1160757507"/>
      <size package="679895" installed="1830349" archive="1833088"/>
      <location href="rpm/ppc/compat-openssl097g-0.9.7g-13.5.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="compat-openssl097g" epoch="0" ver="0.9.7g" rel="13.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="compat-openssl097g"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/compat-openssl097g-0.9.7g-13.5.ppc.patch.rpm"/>
          <checksum type="sha">958b1e3236ce3b10e9d9cc71728794badd1c1bd4</checksum>
          <time file="1161018053" build="1160757507"/>
          <size package="566013" archive="1424956"/>
          <base-version epoch="0" ver="0.9.7g" rel="11"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/compat-openssl097g-0.9.7g-11_13.5.ppc.delta.rpm"/>
          <checksum type="sha">244bc1af940433f66f4a897c0926af91bb9e1695</checksum>
          <time file="1161018055" build="1160757507"/>
          <size package="176730" archive="0"/>
          <base-version epoch="0" ver="0.9.7g" rel="11" md5sum="91f38c834588d57ad23dd3e7d58481df" buildtime="1145897006" sequence_info="compat-openssl097g-0.9.7g-11-2f3cf72ca09a9fb443170b5a76d17af930"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>compat-openssl097g</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.9.7g" rel="13.5"/>
      <checksum type="sha" pkgid="YES">a4f9f2089bc95c254bdec4b598f8fd20b33d000f</checksum>
      <time file="1160992325" build="1160757302"/>
      <size package="724291" installed="1898841" archive="1901588"/>
      <location href="rpm/x86_64/compat-openssl097g-0.9.7g-13.5.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="compat-openssl097g" epoch="0" ver="0.9.7g" rel="13.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="compat-openssl097g"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/compat-openssl097g-0.9.7g-13.5.x86_64.patch.rpm"/>
          <checksum type="sha">bb6b5331b3ca790a90bfcfbd9a757aaf7dded2d2</checksum>
          <time file="1161018058" build="1160757302"/>
          <size package="607588" archive="1493456"/>
          <base-version epoch="0" ver="0.9.7g" rel="11"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/compat-openssl097g-0.9.7g-11_13.5.x86_64.delta.rpm"/>
          <checksum type="sha">60f0cd6641297058589ed21c93953eac806f8946</checksum>
          <time file="1161018060" build="1160757302"/>
          <size package="201370" archive="0"/>
          <base-version epoch="0" ver="0.9.7g" rel="11" md5sum="038a0a1561fa91d5c37f6f682d113bf3" buildtime="1145766550" sequence_info="compat-openssl097g-0.9.7g-11-16274e39634dbc61a383c6772d2c323130"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>compat-openssl097g-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.9.7g" rel="13.5"/>
      <checksum type="sha" pkgid="YES">b74bfe1905dd496011c6a92193299b7923ffde82</checksum>
      <time file="1160992524" build="1160757347"/>
      <size package="529781" installed="1215772" archive="1216172"/>
      <location href="rpm/x86_64/compat-openssl097g-32bit-0.9.7g-13.5.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="compat-openssl097g-32bit" epoch="0" ver="0.9.7g" rel="13.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="compat-openssl097g-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/compat-openssl097g-32bit-0.9.7g-13.5.x86_64.patch.rpm"/>
          <checksum type="sha">1ee910b75fa69fda87dd8d3be214a8fe7db2592a</checksum>
          <time file="1161018063" build="1160757347"/>
          <size package="529901" archive="1216172"/>
          <base-version epoch="0" ver="0.9.7g" rel="11"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/compat-openssl097g-32bit-0.9.7g-11_13.5.x86_64.delta.rpm"/>
          <checksum type="sha">bf27a1c61af2ffc1cdbacefd6d11eb13eb38af10</checksum>
          <time file="1161018064" build="1160757347"/>
          <size package="62649" archive="0"/>
          <base-version epoch="0" ver="0.9.7g" rel="11" md5sum="94f9a3408236579a363adb96e04ccf4a" buildtime="1145760564" sequence_info="compat-openssl097g-32bit-0.9.7g-11-c92c7f342e93b65e95f429e3d555ecf720"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>compat-openssl097g-64bit</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.9.7g" rel="13.5"/>
      <checksum type="sha" pkgid="YES">e3e22bcae7175734c219bd3056cb15e76b410b80</checksum>
      <time file="1161015189" build="1160757902"/>
      <size package="630203" installed="1980944" archive="1981352"/>
      <location href="rpm/ppc/compat-openssl097g-64bit-0.9.7g-13.5.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="compat-openssl097g-64bit" epoch="0" ver="0.9.7g" rel="13.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="compat-openssl097g-64bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/compat-openssl097g-64bit-0.9.7g-13.5.ppc.patch.rpm"/>
          <checksum type="sha">4c86a4204120521452d1eaabd32e355cb5d525d1</checksum>
          <time file="1161018067" build="1160757902"/>
          <size package="630323" archive="1981352"/>
          <base-version epoch="0" ver="0.9.7g" rel="11"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/compat-openssl097g-64bit-0.9.7g-11_13.5.ppc.delta.rpm"/>
          <checksum type="sha">fff0898aea8f5e9a0bfa120fa6361b09eafeb456</checksum>
          <time file="1161018069" build="1160757902"/>
          <size package="73195" archive="0"/>
          <base-version epoch="0" ver="0.9.7g" rel="11" md5sum="aa2a42397bc4ffa4518ffbf5d7fa8e18" buildtime="1145982029" sequence_info="compat-openssl097g-64bit-0.9.7g-11-d2e03e1693f5ded073e8ce63024eaf4d20"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
