<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="61e8a7944bfbd369b915673c77e34371"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="libneon-devel-6550"
    timestamp="1255351222"
    engine="1.0">
  <yum:name>libneon-devel</yum:name>
  <summary lang="en">neon security update</summary>
  <summary lang="de">neon security update</summary>
  <description lang="en">neon did not properly handle embedded NUL characters in
X.509 certificates when comparing host names. Attackers
could exploit that to spoof SSL servers (CVE-2009-2408).

Specially crafted XML documents that contain a large number
of nested entity references could cause neon to consume
large amounts of CPU and memory (CVE-2009-2473).
</description>
  <description lang="de">neon did not properly handle embedded NUL characters in
X.509 certificates when comparing host names. Attackers
could exploit that to spoof SSL servers (CVE-2009-2408).

Specially crafted XML documents that contain a large number
of nested entity references could cause neon to consume
large amounts of CPU and memory (CVE-2009-2473).
</description>
  <yum:version ver="6550" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="neon" epoch="0" ver="0.26.4" rel="17.2" flags="EQ"/>
    <rpm:entry kind="atom" name="neon-32bit" epoch="0" ver="0.26.4" rel="17.2" flags="EQ"/>
    <rpm:entry kind="atom" name="neon-64bit" epoch="0" ver="0.26.4" rel="17.2" flags="EQ"/>
    <rpm:entry kind="atom" name="neon-devel" epoch="0" ver="0.26.4" rel="17.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">323827f42f6ac199ce18d2fff0fcc80445cb9b6a</checksum>
      <time file="1255356420" build="1255351222"/>
      <size package="106262" installed="319792" archive="321400"/>
      <location href="rpm/i586/neon-0.26.4-17.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/neon-0.26.4-17_17.2.i586.delta.rpm"/>
          <checksum type="sha">fa56bcdae3a27033f8f743f1058199a1fe7ccb89</checksum>
          <time file="1255357804" build="1255351222"/>
          <size package="61435" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="ab405e8f04d035f16f7c0f47713ee5c2" buildtime="1190419670" sequence_info="neon-0.26.4-17-7c794d68d61f80577bb85d84ed85e09a30"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">db286ff4e589fc24abd17bad6847e67e19016d82</checksum>
      <time file="1255354241" build="1255351128"/>
      <size package="113474" installed="356704" archive="358312"/>
      <location href="rpm/ppc/neon-0.26.4-17.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/ppc/neon-0.26.4-17_17.2.ppc.delta.rpm"/>
          <checksum type="sha">27b7817cd634606948859d1892cfc73851dee90b</checksum>
          <time file="1255357818" build="1255351128"/>
          <size package="65398" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="2b2d9bd7a07753a65cf553a5c1ce4975" buildtime="1190452536" sequence_info="neon-0.26.4-17-bc97d4a8e59457c55f99b2608c46131630"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">2190387a9936dc809f49f66dfb8ff19c9a96147b</checksum>
      <time file="1255354337" build="1255351099"/>
      <size package="111837" installed="338124" archive="339732"/>
      <location href="rpm/x86_64/neon-0.26.4-17.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/neon-0.26.4-17_17.2.x86_64.delta.rpm"/>
          <checksum type="sha">a5bb3ab019700e2780be2a6eb303acf7c73ef8fc</checksum>
          <time file="1255357820" build="1255351099"/>
          <size package="65200" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="aab4bef658897c136ebd36a50c516f2c" buildtime="1190406655" sequence_info="neon-0.26.4-17-8ed1a7bfb12310f16409fa74bc63dfab30"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">378334662bb3c9dda811e5bb8893b2e9649ee1af</checksum>
      <time file="1255356420" build="1255351241"/>
      <size package="62050" installed="118076" archive="118496"/>
      <location href="rpm/x86_64/neon-32bit-0.26.4-17.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon-32bit" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/neon-32bit-0.26.4-17_17.2.x86_64.delta.rpm"/>
          <checksum type="sha">c7544f9ca17ceb1be28a45481220e99427f16635</checksum>
          <time file="1255357821" build="1255351241"/>
          <size package="15899" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="8557d475ba10b0b6936a63639c0aced8" buildtime="1190419720" sequence_info="neon-32bit-0.26.4-17-7b106cc8d996e3456cdd3e0fe9f262a620"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon-64bit</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">2d0cad4d1160302a44947654b7b657b98d614597</checksum>
      <time file="1255354253" build="1255350915"/>
      <size package="71062" installed="196224" archive="196644"/>
      <location href="rpm/ppc/neon-64bit-0.26.4-17.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon-64bit" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon-64bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">5febafe5fd2458645c6ac6e16cfa7146f0431a8b</checksum>
      <time file="1255356420" build="1255351222"/>
      <size package="169750" installed="530281" archive="556240"/>
      <location href="rpm/i586/neon-devel-0.26.4-17.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon-devel" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/neon-devel-0.26.4-17_17.2.i586.delta.rpm"/>
          <checksum type="sha">5dd1bc4c884b61d1382730afec7d9e7e8119cc5b</checksum>
          <time file="1255357824" build="1255351222"/>
          <size package="58398" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="c1b98de69256af97b9c68c202ecc0d2b" buildtime="1190419670" sequence_info="neon-devel-0.26.4-17-3a53cfd98b96fbfeea4b327d374106a9e3e59b10"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon-devel</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">3abb179eada605257e8ce9e2c1da5cf989616962</checksum>
      <time file="1255354242" build="1255351128"/>
      <size package="180165" installed="565789" archive="591748"/>
      <location href="rpm/ppc/neon-devel-0.26.4-17.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon-devel" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/ppc/neon-devel-0.26.4-17_17.2.ppc.delta.rpm"/>
          <checksum type="sha">c51872a9548b1e8777dafb24a6f609a021725ede</checksum>
          <time file="1255357825" build="1255351128"/>
          <size package="59183" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="9b5f6dea79727335880274576e860d1d" buildtime="1190452536" sequence_info="neon-devel-0.26.4-17-991eaf9ca0ae6e896370faaaf0e4d90ce3e59b10"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>neon-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.26.4" rel="17.2"/>
      <checksum type="sha" pkgid="YES">3fd45cfbcc312a673c46838cde842009bf97fa59</checksum>
      <time file="1255354337" build="1255351099"/>
      <size package="176263" installed="603001" archive="628968"/>
      <location href="rpm/x86_64/neon-devel-0.26.4-17.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="neon-devel" epoch="0" ver="0.26.4" rel="17.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="neon-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/neon-devel-0.26.4-17_17.2.x86_64.delta.rpm"/>
          <checksum type="sha">ae381ff62c089cf295db64c989a1d55598e268a1</checksum>
          <time file="1255357827" build="1255351099"/>
          <size package="60389" archive="0"/>
          <base-version epoch="0" ver="0.26.4" rel="17" md5sum="3114b726cde8efdd864eb39fa206559e" buildtime="1190406655" sequence_info="neon-devel-0.26.4-17-aaf4c27710a7a027f7634a17644e1dc3e3e59b10"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
