<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="8ce1e2c2dcbbf5df8764b4d8f461c007"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sledp3-libvorbis-7057"
    timestamp="1275041919"
    engine="1.0">
  <yum:name>sledp3-libvorbis</yum:name>
  <summary lang="en">Security update for libvorbis</summary>
  <description lang="en">
This update of libvorbis fixes a memory corruption while parsing OGG files. 
The bug is exploitable by remote attackers to cause an application crash 
and could probably be exploited to execute arbitrary code. The issue has 
been tracked as CVE-2009-2663
&lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2663&gt; .

</description>
  <yum:version ver="7057" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="libvorbis" epoch="0" ver="1.1.2" rel="13.17.1" flags="EQ"/>
    <rpm:entry kind="atom" name="libvorbis-devel" epoch="0" ver="1.1.2" rel="13.17.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libvorbis</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.1.2" rel="13.17.1"/>
      <checksum type="sha" pkgid="YES">284fd343190796b17df24f99802c5ecd28c7b16d</checksum>
      <time file="1275041945" build="1275041919"/>
      <size package="177707" installed="1222093" archive="1223748"/>
      <location xml:base="media://#1" href="suse/i586/libvorbis-1.1.2-13.17.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libvorbis" epoch="0" ver="1.1.2" rel="13.17.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libvorbis"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>libvorbis-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.1.2" rel="13.17.1"/>
      <checksum type="sha" pkgid="YES">f2c9481d6bae42b4249bfe9fc6716147eadc70a2</checksum>
      <time file="1275041945" build="1275041919"/>
      <size package="429546" installed="1849855" archive="1869100"/>
      <location xml:base="media://#1" href="suse/i586/libvorbis-devel-1.1.2-13.17.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="libvorbis-devel" epoch="0" ver="1.1.2" rel="13.17.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="libvorbis-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
