<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="2c8f3fb7280833b546c12be817fc3856"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="squirrelmail-3944"
    timestamp="1183982993"
    engine="1.0">
  <yum:name>squirrelmail</yum:name>
  <summary lang="en">squirrelmail: fix two cross site scripting bugs</summary>
  <summary lang="de">squirrelmail: zwei Cross-Site-Scripting Fehler wurden behoben</summary>
  <description lang="en">This update of squirrelmail fixes two cross-site-scripting
vulnerabilities that can be used by an attacker to read
opened emails (CVE-2007-1262) and to send email on behalf
of the user (CVE-2007-2589).

This is a reissue of the previous update due to regressions.
</description>
  <description lang="de">Dieses Update von Squirrelmail behebt zwei
Cross-Site-Scripting Fehler, die es einem Angreifer
erlaubten, eMails unbefugt zu lesen (CVE-2007-1262) und zum
anderen es ermöglichten, dass eMails im Namen eines anderen
Benutzers verschickt werden konnten (CVE-2007-2589).

Dies ist eine Wiederauflage des Security Updates, da im
vorherigen einige Regressions aufgetreten sind.
</description>
  <yum:version ver="3944" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="squirrelmail" epoch="0" ver="1.4.10a" rel="17.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>squirrelmail</name>
      <arch>noarch</arch>
      <version epoch="0" ver="1.4.10a" rel="17.1"/>
      <checksum type="sha" pkgid="YES">a34023b94ca62bb3c3cace1a6245452726e495c1</checksum>
      <time file="1185408847" build="1183982993"/>
      <size package="580110" installed="2758725" archive="2843852"/>
      <location href="rpm/noarch/squirrelmail-1.4.10a-17.1.noarch.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="squirrelmail" epoch="0" ver="1.4.10a" rel="17.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="squirrelmail"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/noarch/squirrelmail-1.4.10a-17.1.noarch.patch.rpm"/>
          <checksum type="sha">b195292443f38aa61ed3c93cca2f789ef1031d85</checksum>
          <time file="1185411856" build="1183982993"/>
          <size package="490830" archive="2509424"/>
          <base-version epoch="0" ver="1.4.5" rel="18"/>
          <base-version epoch="0" ver="1.4.5" rel="18.10"/>
          <base-version epoch="0" ver="1.4.5" rel="18.2"/>
          <base-version epoch="0" ver="1.4.5" rel="18.4"/>
          <base-version epoch="0" ver="1.4.5" rel="18.7"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/noarch/squirrelmail-1.4.5_1.4.10a-18_17.1.noarch.delta.rpm"/>
          <checksum type="sha">aa732a4582945a3dbc102058efaa6b7c9cd2433a</checksum>
          <time file="1185411859" build="1183982993"/>
          <size package="142279" archive="0"/>
          <base-version epoch="0" ver="1.4.5" rel="18" md5sum="38cfe681238396fff9e9f1c54b20c3d9" buildtime="1146560931" sequence_info="squirrelmail-1.4.5-18-75ca753a43bc404217a0768369bf74f0a41ca6812627131f12"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/noarch/squirrelmail-1.4.5_1.4.10a-18.10_17.1.noarch.delta.rpm"/>
          <checksum type="sha">461f62f78d20e8d44f6121705b6d8e1ca6486564</checksum>
          <time file="1185411861" build="1183982993"/>
          <size package="138906" archive="0"/>
          <base-version epoch="0" ver="1.4.5" rel="18.10" md5sum="a388dff14c76cf05843480fb7b93bab1" buildtime="1181313241" sequence_info="squirrelmail-1.4.5-18.10-ed70c25fe585e3cdd0bbc9ac37dd0577a4111aa6812627131f12"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
