<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="81784b1af32c10a70030409d240c5d5b"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sdkp3-gimp-6880"
    timestamp="1267119495"
    engine="1.0">
  <yum:name>sdkp3-gimp</yum:name>
  <summary lang="en">Security update for gimp</summary>
  <description lang="en">
Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to
execute arbitrary code on the victim's system by tricking the victim to open
specially crafted files.



CVE-2009-1570: CVSS v2 Base Score: 4.3 (moderate) (AV:N/AC:M/Au:N/C:N/I:N/A:P): Numeric Errors (CWE-189)
CVE-2009-3909: CVSS v2 Base Score: 4.3 (moderate) (AV:N/AC:M/Au:N/C:N/I:N/A:P): Numeric Errors (CWE-189)


</description>
  <yum:version ver="6880" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="gimp" epoch="0" ver="2.2.10" rel="22.33.1" flags="EQ"/>
    <rpm:entry kind="atom" name="gimp-devel" epoch="0" ver="2.2.10" rel="22.33.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>gimp</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.10" rel="22.33.1"/>
      <checksum type="sha" pkgid="YES">d29fbd3b4cc74ca90a2a6a460d224b4ad1244c54</checksum>
      <time file="1267119571" build="1267119495"/>
      <size package="9101401" installed="29354402" archive="29563368"/>
      <location xml:base="media://#1" href="suse/i586/gimp-2.2.10-22.33.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="gimp" epoch="0" ver="2.2.10" rel="22.33.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="gimp"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>gimp-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.10" rel="22.33.1"/>
      <checksum type="sha" pkgid="YES">555b7244dd23aca7e407c9208e40d620dc105edf</checksum>
      <time file="1267119572" build="1267119495"/>
      <size package="496868" installed="3484755" archive="3603700"/>
      <location xml:base="media://#1" href="suse/i586/gimp-devel-2.2.10-22.33.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="gimp-devel" epoch="0" ver="2.2.10" rel="22.33.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="gimp-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
