<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="dbfedf4e20b8e167936f71460bc95188"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sdkp2-finch-6342"
    timestamp="1246695644"
    engine="1.0">
  <yum:name>sdkp2-finch</yum:name>
  <summary lang="en">Security update for pidgin</summary>
  <summary lang="de">Security update for pidgin</summary>
  <description lang="en">Several bugfixes were done for the Instant Messenger Pidgin:
- Malformed responses to file transfers could cause a
  buffer overflow in pidgin (CVE-2009-1373) and specially
  crafted packets could crash it (CVE-2009-1375).
- The fix against integer overflows in the msn protocol
  handling was incomplete (CVE-2009-1376).
- Fixed misparsing ICQ message as SMS DoS (CVE-2009-1889,
  Pidgin#9483).

Also the Yahoo IM protocol was made to work again.
</description>
  <description lang="de">Several bugfixes were done for the Instant Messenger Pidgin:
- Malformed responses to file transfers could cause a
  buffer overflow in pidgin (CVE-2009-1373) and specially
  crafted packets could crash it (CVE-2009-1375).
- The fix against integer overflows in the msn protocol
  handling was incomplete (CVE-2009-1376).
- Fixed misparsing ICQ message as SMS DoS (CVE-2009-1889,
  Pidgin#9483).

Also the Yahoo IM protocol was made to work again.
</description>
  <yum:version ver="6342" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="finch" epoch="0" ver="2.3.1" rel="10.15" flags="EQ"/>
    <rpm:entry kind="atom" name="finch-devel" epoch="0" ver="2.3.1" rel="10.15" flags="EQ"/>
    <rpm:entry kind="atom" name="libpurple" epoch="0" ver="2.3.1" rel="10.15" flags="EQ"/>
    <rpm:entry kind="atom" name="libpurple-devel" epoch="0" ver="2.3.1" rel="10.15" flags="EQ"/>
    <rpm:entry kind="atom" name="pidgin" epoch="0" ver="2.3.1" rel="10.15" flags="EQ"/>
    <rpm:entry kind="atom" name="pidgin-devel" epoch="0" ver="2.3.1" rel="10.15" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>finch</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.3.1" rel="10.15"/>
      <checksum type="sha" pkgid="YES">a28897fd8ba5c7fd72d746285cb763b0b3c0e652</checksum>
      <time file="1247050629" build="1246695644"/>
      <size package="201696" installed="502662" archive="504512"/>
      <location xml:base="media://#1" href="suse/x86_64/finch-2.3.1-10.19.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="finch" epoch="0" ver="2.3.1" rel="10.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="finch"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>finch-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.3.1" rel="10.15"/>
      <checksum type="sha" pkgid="YES">da76fe86505562838aa7491d6ad3621f5b0346fd</checksum>
      <time file="1247050629" build="1246695644"/>
      <size package="41001" installed="167776" archive="175184"/>
      <location xml:base="media://#1" href="suse/x86_64/finch-devel-2.3.1-10.19.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="finch-devel" epoch="0" ver="2.3.1" rel="10.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="finch-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libpurple</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.3.1" rel="10.15"/>
      <checksum type="sha" pkgid="YES">e1a3574b8dfb8e986acc235c94c1ef688fa3be1f</checksum>
      <time file="1247050631" build="1246695644"/>
      <size package="4954815" installed="18208089" archive="18243416"/>
      <location xml:base="media://#1" href="suse/x86_64/libpurple-2.3.1-10.19.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libpurple" epoch="0" ver="2.3.1" rel="10.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libpurple"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libpurple-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.3.1" rel="10.15"/>
      <checksum type="sha" pkgid="YES">3790f0682d6f25a280e3d9927c166859e0026c8a</checksum>
      <time file="1247050631" build="1246695644"/>
      <size package="138221" installed="806821" archive="817728"/>
      <location xml:base="media://#1" href="suse/x86_64/libpurple-devel-2.3.1-10.19.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libpurple-devel" epoch="0" ver="2.3.1" rel="10.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libpurple-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>pidgin</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.3.1" rel="10.15"/>
      <checksum type="sha" pkgid="YES">863590c565cc66df4aca44fc47a41048493fa419</checksum>
      <time file="1247050633" build="1246695644"/>
      <size package="1609406" installed="2806662" archive="2894412"/>
      <location xml:base="media://#1" href="suse/x86_64/pidgin-2.3.1-10.19.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="pidgin" epoch="0" ver="2.3.1" rel="10.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="pidgin"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>pidgin-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.3.1" rel="10.15"/>
      <checksum type="sha" pkgid="YES">cf4791b78ae69edbc604a19a075e2d4e66f980e9</checksum>
      <time file="1247050633" build="1246695644"/>
      <size package="51517" installed="219889" archive="227880"/>
      <location xml:base="media://#1" href="suse/x86_64/pidgin-devel-2.3.1-10.19.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="pidgin-devel" epoch="0" ver="2.3.1" rel="10.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="pidgin-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
