<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="71325a2bff27f92de8b8882e0f5bef96"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sledp2-udev-6153"
    timestamp="1239703094"
    engine="1.0">
  <yum:name>sledp2-udev</yum:name>
  <summary lang="en">Security update for udev</summary>
  <summary lang="de">Security update for udev</summary>
  <description lang="en">This update fixes a local privilege escalation in udev.

CVE-2009-1185: udev did not check the origin of the netlink
messages. A local attacker could fake device create events
and so gain root privileges.

It also fixes three bugs:
- Fixup persistent symlinks for tapes (bnc#446534)
- Fixup broken ATA compability links (bnc#447995)
- Add by-path links for tapes (bnc#478132)
</description>
  <description lang="de">This update fixes a local privilege escalation in udev.

CVE-2009-1185: udev did not check the origin of the netlink
messages. A local attacker could fake device create events
and so gain root privileges.

It also fixes three bugs:
- Fixup persistent symlinks for tapes (bnc#446534)
- Fixup broken ATA compability links (bnc#447995)
- Add by-path links for tapes (bnc#478132)
</description>
  <yum:version ver="6153" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="udev" epoch="0" ver="085" rel="30.52" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>udev</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="085" rel="30.52"/>
      <checksum type="sha" pkgid="YES">b120922488ca5789ffe9b23b71ff09b0be35b683</checksum>
      <time file="1239704306" build="1239703094"/>
      <size package="189540" installed="534483" archive="546632"/>
      <location xml:base="media://#1" href="suse/x86_64/udev-085-30.54.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="udev" epoch="0" ver="085" rel="30.52" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="udev"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
