<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="b73457fe524d9f52fde0c72f00106362"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2134">
  <id>dbg111-kde4-kdm</id>
  <title>KDE KDM local root exploit (CVE-2010-0436)</title>
  <release>openSUSE 11.1 DEBUGINFO</release>
  <issued date="1268675644"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=584223" id="584223" title="bug number 584223" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" id="CVE-2010-0436" title="CVE-2010-0436" type="cve"/>
  </references>
  <description>The KDE KDM contains a local race condition which allows to
make arbitrary files world writable. CVE-2010-0436 has been
assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="kdebase4-workspace-debuginfo" arch="i586" version="4.1.3" release="10.4.1">
          <filename>kdebase4-workspace-debuginfo-4.1.3-10.4.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-debuginfo" arch="ppc" version="4.1.3" release="10.4.1">
          <filename>kdebase4-workspace-debuginfo-4.1.3-10.4.1.ppc.rpm</filename>
        </package>
        <package name="kdebase4-workspace-debuginfo" arch="x86_64" version="4.1.3" release="10.4.1">
          <filename>kdebase4-workspace-debuginfo-4.1.3-10.4.1.x86_64.rpm</filename>
        </package>
        <package name="kdebase4-workspace-debugsource" arch="i586" version="4.1.3" release="10.4.1">
          <filename>kdebase4-workspace-debugsource-4.1.3-10.4.1.i586.rpm</filename>
        </package>
        <package name="kdebase4-workspace-debugsource" arch="ppc" version="4.1.3" release="10.4.1">
          <filename>kdebase4-workspace-debugsource-4.1.3-10.4.1.ppc.rpm</filename>
        </package>
        <package name="kdebase4-workspace-debugsource" arch="x86_64" version="4.1.3" release="10.4.1">
          <filename>kdebase4-workspace-debugsource-4.1.3-10.4.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
