<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="2bf3d4d93bd78d8c4ba85f2b470302a5"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sdkp3-python-6946"
    timestamp="1269611519"
    engine="1.0">
  <yum:name>sdkp3-python</yum:name>
  <summary lang="en">Security update for Python</summary>
  <description lang="en">
This update of python has a copy of libxmlrpc that is vulnerable to denial of service bugs that can occur while processing malformed XML input.
CVE-2009-2625: CVSS v2 Base Score: 5.0 (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges, and Access Control (CWE-264)
CVE-2009-3720: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information (CWE-noinfo)
CVE-2009-3560: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)


</description>
  <yum:version ver="6946" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="python-demo" epoch="0" ver="2.4.2" rel="18.29.2" flags="EQ"/>
    <rpm:entry kind="atom" name="python-devel" epoch="0" ver="2.4.2" rel="18.29.2" flags="EQ"/>
    <rpm:entry kind="atom" name="python-idle" epoch="0" ver="2.4.2" rel="18.29.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>python-demo</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.4.2" rel="18.29.2"/>
      <checksum type="sha" pkgid="YES">5f001d5eb8582f42d01493cd18731cf5b18c754e</checksum>
      <time file="1269611550" build="1269611519"/>
      <size package="521809" installed="2054700" archive="2137128"/>
      <location xml:base="media://#1" href="suse/x86_64/python-demo-2.4.2-18.29.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="python-demo" epoch="0" ver="2.4.2" rel="18.29.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="python-demo"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>python-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.4.2" rel="18.29.2"/>
      <checksum type="sha" pkgid="YES">43cf0b8671af793737d3c28ffe8d9e4984a60e50</checksum>
      <time file="1269611551" build="1269611519"/>
      <size package="2883868" installed="14564040" archive="14769456"/>
      <location xml:base="media://#1" href="suse/x86_64/python-devel-2.4.2-18.29.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="python-devel" epoch="0" ver="2.4.2" rel="18.29.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="python-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>python-idle</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="2.4.2" rel="18.29.2"/>
      <checksum type="sha" pkgid="YES">931fd6ab315bb1727f50db62fa72daa0b3a5e56a</checksum>
      <time file="1269611551" build="1269611519"/>
      <size package="370276" installed="1634492" archive="1665820"/>
      <location xml:base="media://#1" href="suse/x86_64/python-idle-2.4.2-18.29.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="python-idle" epoch="0" ver="2.4.2" rel="18.29.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="python-idle"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
