<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="90f94006762e9327d42eb5e9236da67a"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="openssh-5149"
    timestamp="1207225607"
    engine="1.0">
  <yum:name>openssh</yum:name>
  <summary lang="en">openssh security update</summary>
  <summary lang="de">openssh Sicherheitsupdate</summary>
  <description lang="en">A flaw in the X forwarding code of openssh allowed
malicious users to steal the X access credentials of other
users (CVE-2008-1483).

Due to another flaw users could bypass the option
&quot;ForceCommand&quot; (CVE-2008-1657).
</description>
  <description lang="de">Ein Fehler in der X-Weiterleitung von openssh erlaubte es
böswilligen Benutzern, die X-Zugriffsberechtigungen anderer
Benutzer zu stehlen (CVE-2008-1483).

Durch einen anderen Fehler konnten benutzer die Option
&quot;ForceCommand&quot; (CVE-2008-1657).
</description>
  <yum:version ver="5149" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="openssh" epoch="0" ver="4.4p1" rel="29" flags="EQ"/>
    <rpm:entry kind="atom" name="openssh-askpass" epoch="0" ver="4.4p1" rel="29" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>openssh</name>
      <arch>i586</arch>
      <version epoch="0" ver="4.4p1" rel="29"/>
      <checksum type="sha" pkgid="YES">279c1ce6c326006cbb93bf51095f3685451156c5</checksum>
      <time file="1207234184" build="1207225607"/>
      <size package="736185" installed="2161759" archive="2168940"/>
      <location href="rpm/i586/openssh-4.4p1-29.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="openssh" epoch="0" ver="4.4p1" rel="29" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="openssh"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/openssh-4.4p1-29.i586.patch.rpm"/>
          <checksum type="sha">a7fa5c7e3b5cd263d97783287b5f70f810470f10</checksum>
          <time file="1207235078" build="1207225607"/>
          <size package="553375" archive="1596516"/>
          <base-version epoch="0" ver="4.4p1" rel="24"/>
          <base-version epoch="0" ver="4.4p1" rel="26"/>
          <base-version epoch="0" ver="4.4p1" rel="28"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/i586/openssh-4.4p1-24_29.i586.delta.rpm"/>
          <checksum type="sha">ca59abf7b446ae22e08d9efc71453f3cc440510e</checksum>
          <time file="1207235080" build="1207225607"/>
          <size package="161351" archive="0"/>
          <base-version epoch="0" ver="4.4p1" rel="24" md5sum="176728b78e17c615d7a367a756b1bda7" buildtime="1164654060" sequence_info="openssh-4.4p1-24-7c628a3421e2048386f76e1bcf5aff560233829192"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/i586/openssh-4.4p1-26_29.i586.delta.rpm"/>
          <checksum type="sha">5c3e7fe976e29af477e6b7a82a81bdf7dc9a48af</checksum>
          <time file="1207235082" build="1207225607"/>
          <size package="161647" archive="0"/>
          <base-version epoch="0" ver="4.4p1" rel="26" md5sum="f194ea992a3ca84e3320ce8335b49bb0" buildtime="1192669806" sequence_info="openssh-4.4p1-26-5810238d03bb6b73a26c31d4674adb9f0233829192"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>openssh</name>
      <arch>ppc</arch>
      <version epoch="0" ver="4.4p1" rel="29"/>
      <checksum type="sha" pkgid="YES">f15d2817a6a006d8e692c1d8410d8e46734e8ab7</checksum>
      <time file="1207234043" build="1207225381"/>
      <size package="822627" installed="2494967" archive="2502148"/>
      <location href="rpm/ppc/openssh-4.4p1-29.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="openssh" epoch="0" ver="4.4p1" rel="29" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="openssh"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/openssh-4.4p1-29.ppc.patch.rpm"/>
          <checksum type="sha">7ef5fc9cc980fa850f9083a41ab65d6ba0a6813c</checksum>
          <time file="1207235095" build="1207225381"/>
          <size package="614390" archive="1929724"/>
          <base-version epoch="0" ver="4.4p1" rel="24"/>
          <base-version epoch="0" ver="4.4p1" rel="26"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/ppc/openssh-4.4p1-24_29.ppc.delta.rpm"/>
          <checksum type="sha">ca6f06e038f35c1849a72f285025aa7363d97863</checksum>
          <time file="1207235097" build="1207225381"/>
          <size package="156859" archive="0"/>
          <base-version epoch="0" ver="4.4p1" rel="24" md5sum="af445e5dc4200b21e357acbaa0a1fce5" buildtime="1164671881" sequence_info="openssh-4.4p1-24-d2760ecf588b2b4e9c2737e1f91774040233829192"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/ppc/openssh-4.4p1-26_29.ppc.delta.rpm"/>
          <checksum type="sha">919e99c892c45f8cd80e958b8fec73101ba890aa</checksum>
          <time file="1207235098" build="1207225381"/>
          <size package="153373" archive="0"/>
          <base-version epoch="0" ver="4.4p1" rel="26" md5sum="180063137bb466b29afd2c04bd717e60" buildtime="1192667442" sequence_info="openssh-4.4p1-26-0c8357eef3eb16891e0165ea07a345260233829192"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>openssh</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="4.4p1" rel="29"/>
      <checksum type="sha" pkgid="YES">2734a2bee734188a2257080a334634a55f642311</checksum>
      <time file="1207234153" build="1207225545"/>
      <size package="791314" installed="2294105" archive="2301296"/>
      <location href="rpm/x86_64/openssh-4.4p1-29.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="openssh" epoch="0" ver="4.4p1" rel="29" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="openssh"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/openssh-4.4p1-29.x86_64.patch.rpm"/>
          <checksum type="sha">8000822babdd9d098b9f3690098e43f4ea91595b</checksum>
          <time file="1207235106" build="1207225545"/>
          <size package="610516" archive="1728868"/>
          <base-version epoch="0" ver="4.4p1" rel="24"/>
          <base-version epoch="0" ver="4.4p1" rel="26"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/x86_64/openssh-4.4p1-24_29.x86_64.delta.rpm"/>
          <checksum type="sha">18b1386b653f8477bebcab315531595504fec4a5</checksum>
          <time file="1207235108" build="1207225545"/>
          <size package="165694" archive="0"/>
          <base-version epoch="0" ver="4.4p1" rel="24" md5sum="057538b4adf02d900b59e16783e5944b" buildtime="1164654179" sequence_info="openssh-4.4p1-24-bf47f976f06b4363fa10eb35ebf5cd0d0233829192"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/x86_64/openssh-4.4p1-26_29.x86_64.delta.rpm"/>
          <checksum type="sha">15f99ebc7c4a093108fc757d287b4b2e6ba02681</checksum>
          <time file="1207235109" build="1207225545"/>
          <size package="160825" archive="0"/>
          <base-version epoch="0" ver="4.4p1" rel="26" md5sum="9adc08288b1f3a00479b513f169ec8f5" buildtime="1192671879" sequence_info="openssh-4.4p1-26-3e7cd44a31d12c818b4030daae1293560233829192"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>openssh-askpass</name>
      <arch>i586</arch>
      <version epoch="0" ver="4.4p1" rel="29"/>
      <checksum type="sha" pkgid="YES">2b853fdf7a954b9be5e59e62115975978196d49a</checksum>
      <time file="1207234184" build="1207225607"/>
      <size package="42987" installed="38865" archive="39752"/>
      <location href="rpm/i586/openssh-askpass-4.4p1-29.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="openssh-askpass" epoch="0" ver="4.4p1" rel="29" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="openssh-askpass"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/i586/openssh-askpass-4.4p1-29.i586.patch.rpm"/>
          <checksum type="sha">061ae172180e62aa85ada584ad0d83f48c22dbe2</checksum>
          <time file="1207235115" build="1207225607"/>
          <size package="23725" archive="124"/>
          <base-version epoch="0" ver="4.4p1" rel="24"/>
          <base-version epoch="0" ver="4.4p1" rel="26"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>openssh-askpass</name>
      <arch>ppc</arch>
      <version epoch="0" ver="4.4p1" rel="29"/>
      <checksum type="sha" pkgid="YES">675fd91c23cb19613125c3159027f15a5ad6028c</checksum>
      <time file="1207234043" build="1207225381"/>
      <size package="46302" installed="47173" archive="48060"/>
      <location href="rpm/ppc/openssh-askpass-4.4p1-29.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="openssh-askpass" epoch="0" ver="4.4p1" rel="29" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="openssh-askpass"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/ppc/openssh-askpass-4.4p1-29.ppc.patch.rpm"/>
          <checksum type="sha">64533bfb3c500907c7b99c88f2d7a2ea96d603d1</checksum>
          <time file="1207235120" build="1207225381"/>
          <size package="23729" archive="124"/>
          <base-version epoch="0" ver="4.4p1" rel="24"/>
          <base-version epoch="0" ver="4.4p1" rel="26"/>
        </patchrpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>openssh-askpass</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="4.4p1" rel="29"/>
      <checksum type="sha" pkgid="YES">f97e92757dce201c883e2541f1a478b7db238c71</checksum>
      <time file="1207234153" build="1207225545"/>
      <size package="45306" installed="44141" archive="45036"/>
      <location href="rpm/x86_64/openssh-askpass-4.4p1-29.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="openssh-askpass" epoch="0" ver="4.4p1" rel="29" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="openssh-askpass"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/x86_64/openssh-askpass-4.4p1-29.x86_64.patch.rpm"/>
          <checksum type="sha">3b2fb300de4f774252807dba68a9886ddc61b5f9</checksum>
          <time file="1207235124" build="1207225545"/>
          <size package="23721" archive="124"/>
          <base-version epoch="0" ver="4.4p1" rel="24"/>
          <base-version epoch="0" ver="4.4p1" rel="26"/>
        </patchrpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
