<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="2c8f3fb7280833b546c12be817fc3856"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="squirrelmail-3944"
    timestamp="1183122616"
    engine="1.0">
  <yum:name>squirrelmail</yum:name>
  <summary lang="en">squirrelmail: fix two cross site scripting bugs</summary>
  <summary lang="de">squirrelmail: zwei Cross-Site-Scripting Fehler wurden behoben</summary>
  <description lang="en">This update of squirrelmail fixes two cross-site-scripting
vulnerabilities that can be used by an attacker to read
opened emails (CVE-2007-1262) and to send email on behalf
of the user (CVE-2007-2589).

This is a reissue of the previous update due to regressions.
</description>
  <description lang="de">Dieses Update von Squirrelmail behebt zwei
Cross-Site-Scripting Fehler, die es einem Angreifer
erlaubten, eMails unbefugt zu lesen (CVE-2007-1262) und zum
anderen es ermöglichten, dass eMails im Namen eines anderen
Benutzers verschickt werden konnten (CVE-2007-2589).

Dies ist eine Wiederauflage des Security Updates, da im
vorherigen einige Regressions aufgetreten sind.
</description>
  <yum:version ver="3944" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="squirrelmail" epoch="0" ver="1.4.9a" rel="2.6" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>squirrelmail</name>
      <arch>noarch</arch>
      <version epoch="0" ver="1.4.9a" rel="2.6"/>
      <checksum type="sha" pkgid="YES">0e2664b5920299feac9092c78f53ea5ebdf87db8</checksum>
      <time file="1185407326" build="1183122616"/>
      <size package="580882" installed="2745596" archive="2830552"/>
      <location href="rpm/noarch/squirrelmail-1.4.9a-2.6.noarch.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="squirrelmail" epoch="0" ver="1.4.9a" rel="2.6" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="squirrelmail"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <patchrpm>
          <location href="rpm/noarch/squirrelmail-1.4.9a-2.6.noarch.patch.rpm"/>
          <checksum type="sha">0c31a9afeecbd5774859047045c74011e78fb1f2</checksum>
          <time file="1185411873" build="1183122616"/>
          <size package="252984" archive="1061880"/>
          <base-version epoch="0" ver="1.4.8" rel="21"/>
          <base-version epoch="0" ver="1.4.9a" rel="2.1"/>
          <base-version epoch="0" ver="1.4.9a" rel="2.3"/>
          <base-version epoch="0" ver="1.4.9a" rel="2.5"/>
        </patchrpm>
        <deltarpm>
          <location href="rpm/noarch/squirrelmail-1.4.8_1.4.9a-21_2.6.noarch.delta.rpm"/>
          <checksum type="sha">edad238351b1689853c276753a6f5039f9e8ba55</checksum>
          <time file="1185411874" build="1183122616"/>
          <size package="77655" archive="0"/>
          <base-version epoch="0" ver="1.4.8" rel="21" md5sum="6e0bd462ef67a8424ee8aa7f248b8733" buildtime="1164498982" sequence_info="squirrelmail-1.4.8-21-fd65e2989afd8057fc295e80f61fee6cb41ec68137131b22"/>
        </deltarpm>
        <deltarpm>
          <location href="rpm/noarch/squirrelmail-1.4.9a-2.5_2.6.noarch.delta.rpm"/>
          <checksum type="sha">d4b6d3a0cab0a92b34b793dbc42ed602c3816e05</checksum>
          <time file="1185411875" build="1183122616"/>
          <size package="60942" archive="0"/>
          <base-version epoch="0" ver="1.4.9a" rel="2.5" md5sum="7d1e4249bbcf3034fceee4934fa3f41c" buildtime="1181313221" sequence_info="squirrelmail-1.4.9a-2.5-87b2326751ed86c688b03ada38e5625fb4111dc68137131d22"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
