<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="40802662d0c7f210467b3c8bfd358220"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="derby-4091"
    timestamp="1187221879"
    engine="1.0">
  <yum:name>derby</yum:name>
  <summary lang="en">derby: Fixed remote denial of service</summary>
  <summary lang="de">derby: Behebt ein remote denial of service Problem</summary>
  <description lang="en">Apache Derby did not determine schema privilege
requirements during the DropSchemaNode bind phase, which
allows remote authenticated users to execute arbitrary drop
schema statements in SQL authorization mode. (CVE-2006-7217)

This update also brings a new requirement of a Java 1.5 JRE.
</description>
  <description lang="de">Apache Derby hat die Anforderungen der Schema Privilegien
während der DropSchemaNode Bindphase nicht überprüft, was
entfernten bereits authentifizierten Angreifern erlaubte
beliebige DROP Befehle im SQL Authorizationsmodus
auszuführen. (CVE-2006-7217)

Die Pakete benötigen weiterhin jetzt eine Java 1.5 JRE.
</description>
  <yum:version ver="4091" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="derby" epoch="0" ver="10.3.1.4" rel="0.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>derby</name>
      <arch>noarch</arch>
      <version epoch="0" ver="10.3.1.4" rel="0.1"/>
      <checksum type="sha" pkgid="YES">9e50bf0d32d4a2f46fb970049fbb57a34041f595</checksum>
      <time file="1187261960" build="1187221879"/>
      <size package="8065346" installed="20985522" archive="21220656"/>
      <location href="rpm/noarch/derby-10.3.1.4-0.1.noarch.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="derby" epoch="0" ver="10.3.1.4" rel="0.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="derby"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/noarch/derby-10.3.1.4-0.1.noarch.patch.rpm"/>
          <checksum type="sha">bc042d280578639e2e39b21dc7b2f70eb7756e1b</checksum>
          <time file="1187265003" build="1187221879"/>
          <size package="8062875" archive="21208712"/>
          <base-version epoch="0" ver="10.0.2.1" rel="34"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
