<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="6cec58f9397cd63b6615ea174acfb73e"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="libarchive-3982"
    timestamp="1185837728"
    engine="1.0">
  <yum:name>libarchive</yum:name>
  <summary lang="en">libarchive: security update</summary>
  <summary lang="de">libarchive: Sicherheitsupdate</summary>
  <description lang="en">Specially crafted tar-archives could cause programs based
on libarchive to crash, to run into an enless loop or
potentially to even execute arbitrary code (CVE-2007-3641,
CVE-2007-3644, CVE-2007-3645).
</description>
  <description lang="de">Durch Fehler in libarchive können Programme, die libarchive
benutzen, beim Lesen von speziell beschaffenen tar-Archiven
zum Absturz gebracht werden, in eine Enlosschleife laufen
oder möglicherweise sogar beliebigen Code ausführen
(CVE-2007-3641, CVE-2007-3644, CVE-2007-3645).
</description>
  <yum:version ver="3982" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="bsdtar" epoch="0" ver="1.3.1" rel="37.1" flags="EQ"/>
    <rpm:entry kind="atom" name="libarchive" epoch="0" ver="1.3.1" rel="37.1" flags="EQ"/>
    <rpm:entry kind="atom" name="libarchive-devel" epoch="0" ver="1.3.1" rel="37.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>bsdtar</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">42901b9820bdea6dfa34e77bb183730b0dd80b63</checksum>
      <time file="1185841188" build="1185837728"/>
      <size package="69196" installed="139776" archive="140028"/>
      <location href="rpm/i586/bsdtar-1.3.1-37.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="bsdtar" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="bsdtar"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/bsdtar-1.3.1-37.1.i586.patch.rpm"/>
          <checksum type="sha">8bf029b0c6d7df0648c95cff3a4d084e8451dba1</checksum>
          <time file="1185851686" build="1185837728"/>
          <size package="69294" archive="140028"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>bsdtar</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">97d20874bdecdb040957734db3c1ee995143b781</checksum>
      <time file="1185841135" build="1185837652"/>
      <size package="77216" installed="168512" archive="168764"/>
      <location href="rpm/ppc/bsdtar-1.3.1-37.1.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="bsdtar" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="bsdtar"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/bsdtar-1.3.1-37.1.ppc.patch.rpm"/>
          <checksum type="sha">46d03bec448304370a5c713eac844d984d6e2ae9</checksum>
          <time file="1185851690" build="1185837652"/>
          <size package="77316" archive="168764"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>bsdtar</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">e3deee83841027d2ca98e950bf5676d1dc1fc52d</checksum>
      <time file="1185841099" build="1185837632"/>
      <size package="74147" installed="157240" archive="157492"/>
      <location href="rpm/x86_64/bsdtar-1.3.1-37.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="bsdtar" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="bsdtar"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/bsdtar-1.3.1-37.1.x86_64.patch.rpm"/>
          <checksum type="sha">a185a4fc53faf4eb341ac7a5dc6221d2cef6661e</checksum>
          <time file="1185851694" build="1185837632"/>
          <size package="74249" archive="157492"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libarchive</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">7474fee8b5f70a278c40572fafb89c1ea3b2a765</checksum>
      <time file="1185841188" build="1185837728"/>
      <size package="435068" installed="951178" archive="953684"/>
      <location href="rpm/i586/libarchive-1.3.1-37.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libarchive" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libarchive"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/libarchive-1.3.1-37.1.i586.patch.rpm"/>
          <checksum type="sha">3e0effcbe8eccdeb4a3daf7d4ec0ab972130b3e2</checksum>
          <time file="1185851698" build="1185837728"/>
          <size package="60509" archive="119336"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libarchive</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">102c927bb9c7ff1fdd1bc79d0c303f9d757aac67</checksum>
      <time file="1185841135" build="1185837652"/>
      <size package="451176" installed="988090" archive="990596"/>
      <location href="rpm/ppc/libarchive-1.3.1-37.1.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libarchive" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libarchive"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/libarchive-1.3.1-37.1.ppc.patch.rpm"/>
          <checksum type="sha">3f57b25f88fe598e8a1d27a38a0d2fd4f3253f71</checksum>
          <time file="1185851702" build="1185837652"/>
          <size package="68687" archive="156248"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libarchive</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">551a26946012bf0e53cdabbff9e380ff7e8f2d08</checksum>
      <time file="1185841099" build="1185837632"/>
      <size package="440076" installed="960682" archive="963196"/>
      <location href="rpm/x86_64/libarchive-1.3.1-37.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libarchive" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libarchive"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/libarchive-1.3.1-37.1.x86_64.patch.rpm"/>
          <checksum type="sha">3efed8bafe4c28feacfcf40b91ad8ae3d9d0794d</checksum>
          <time file="1185851706" build="1185837632"/>
          <size package="62225" archive="128844"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libarchive-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">789b28840794dd6d14899c8ff414fcd7e463e989</checksum>
      <time file="1185841188" build="1185837728"/>
      <size package="115303" installed="242285" archive="244328"/>
      <location href="rpm/i586/libarchive-devel-1.3.1-37.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libarchive-devel" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libarchive-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/libarchive-devel-1.3.1-37.1.i586.patch.rpm"/>
          <checksum type="sha">6644b453e902ef3fa4fdb1fdd72640001c2a87e7</checksum>
          <time file="1185851711" build="1185837728"/>
          <size package="59400" archive="171932"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libarchive-devel</name>
      <arch>ppc</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">59b3be423840913ce24c991b17c91b83cc7d5d0d</checksum>
      <time file="1185841135" build="1185837652"/>
      <size package="124147" installed="273529" archive="275572"/>
      <location href="rpm/ppc/libarchive-devel-1.3.1-37.1.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libarchive-devel" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libarchive-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/libarchive-devel-1.3.1-37.1.ppc.patch.rpm"/>
          <checksum type="sha">684f446214156590eb103997fe5c14a0081e16a5</checksum>
          <time file="1185851715" build="1185837652"/>
          <size package="67330" archive="203176"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libarchive-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="1.3.1" rel="37.1"/>
      <checksum type="sha" pkgid="YES">22ae0f9b3697f1c04de40e5046302f41c5260930</checksum>
      <time file="1185841099" build="1185837632"/>
      <size package="118847" installed="314467" archive="316508"/>
      <location href="rpm/x86_64/libarchive-devel-1.3.1-37.1.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libarchive-devel" epoch="0" ver="1.3.1" rel="37.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libarchive-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/libarchive-devel-1.3.1-37.1.x86_64.patch.rpm"/>
          <checksum type="sha">04d05f03ac6a0ba6a218643d884a94c652aad31b</checksum>
          <time file="1185851719" build="1185837632"/>
          <size package="62835" archive="244112"/>
          <base-version epoch="0" ver="1.3.1" rel="6"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
