<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="1303da5302da37289e12566345b1d00c"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="tar-2343"
    timestamp="1165363607"
    engine="1.0">
  <yum:name>tar</yum:name>
  <summary lang="en">tar: Securityupdate to fix symlink traversal</summary>
  <summary lang="de">tar: Sicherheitsupdate das behebt ein Symlinkproblem behebt</summary>
  <description lang="en">This security update fixes a directory traversal in tar,
where unpacked symlinks could be followed outside of the
directory where the tar file is unpacked. (CVE-2006-6097)

This feature was made optional and needs to be enabled with
a commandline option.
</description>
  <description lang="de">Dieses Sicherheitsupdate behebt ein Problem, wo beim
Entpacken eines TAR Archives dieses durch Symlinks aus dem
aktuellen Verzeichnis ausbrechen konnte. (CVE-2006-6097)

Das alte obsolete Feature in GNU Tar wurde optional gemacht
und kann für alte TAR Archive mit einer
Kommandozeilenoption angeschaltet werden.
</description>
  <yum:version ver="2343" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="tar" epoch="0" ver="1.15.1" rel="23.5" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>tar</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.15.1" rel="23.5"/>
      <checksum type="sha" pkgid="YES">61caf11b0057a222c99d00858a82ab8559c4c1c7</checksum>
      <time file="1165396160" build="1165363607"/>
      <size package="643796" installed="1488146" archive="1495068"/>
      <location href="rpm/i586/tar-1.15.1-23.5.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="tar" epoch="0" ver="1.15.1" rel="23.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="tar"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/tar-1.15.1-23.5.i586.patch.rpm"/>
          <checksum type="sha">4d5bec146969683c2f246def88c9c4be159a1d41</checksum>
          <time file="1165397416" build="1165363607"/>
          <size package="107603" archive="195604"/>
          <base-version epoch="0" ver="1.15.1" rel="21"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>tar</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.15.1" rel="23.5"/>
      <checksum type="sha" pkgid="YES">eb8e187458f1c2c64fc10bb909f6c9ef1b078daa</checksum>
      <time file="1165396151" build="1165363744"/>
      <size package="650095" installed="1526982" archive="1533904"/>
      <location href="rpm/ppc/tar-1.15.1-23.5.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="tar" epoch="0" ver="1.15.1" rel="23.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="tar"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/tar-1.15.1-23.5.ppc.patch.rpm"/>
          <checksum type="sha">61e149da5f84c37d609a604aa2140f71b1611cae</checksum>
          <time file="1165397423" build="1165363744"/>
          <size package="118102" archive="234440"/>
          <base-version epoch="0" ver="1.15.1" rel="21"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>tar</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.15.1" rel="23.5"/>
      <checksum type="sha" pkgid="YES">c7dbd6cffb2dd8d70268403a8767498abd46ce2e</checksum>
      <time file="1165396060" build="1165363712"/>
      <size package="653781" installed="1508114" archive="1515036"/>
      <location href="rpm/x86_64/tar-1.15.1-23.5.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="tar" epoch="0" ver="1.15.1" rel="23.5" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="tar"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/tar-1.15.1-23.5.x86_64.patch.rpm"/>
          <checksum type="sha">58d5b5eeaf379fa2a097bf1a7276fdb3f4525b3b</checksum>
          <time file="1165397426" build="1165363712"/>
          <size package="117442" archive="215572"/>
          <base-version epoch="0" ver="1.15.1" rel="21"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
