<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="a653de9011a155a32e8510c3e40539a7"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="libnewt0_52-6504"
    timestamp="1253712579"
    engine="1.0">
  <yum:name>libnewt0_52</yum:name>
  <summary lang="en">newt: fixing a heap overflow (CVE-2009-2905)</summary>
  <summary lang="de">newt: fixing a heap overflow (CVE-2009-2905)</summary>
  <description lang="en">A heap-based buffer overflow was found in the way newt used
to process content, to be rendered in text dialog box.
Local attacker could issue a specially-crafted text dialog
box rendering request (direct or via custom application),
leading to denial of service (application crash) or,
potentially, to execution of arbitrary code with the
privileges of the user running the application.

CVE-2009-2905 has been assigned to this issue.
</description>
  <description lang="de">A heap-based buffer overflow was found in the way newt used
to process content, to be rendered in text dialog box.
Local attacker could issue a specially-crafted text dialog
box rendering request (direct or via custom application),
leading to denial of service (application crash) or,
potentially, to execution of arbitrary code with the
privileges of the user running the application.

CVE-2009-2905 has been assigned to this issue.
</description>
  <yum:version ver="6504" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="newt" epoch="0" ver="0.52.7" rel="36.2" flags="EQ"/>
    <rpm:entry kind="atom" name="newt-32bit" epoch="0" ver="0.52.7" rel="36.2" flags="EQ"/>
    <rpm:entry kind="atom" name="newt-64bit" epoch="0" ver="0.52.7" rel="36.2" flags="EQ"/>
    <rpm:entry kind="atom" name="newt-devel" epoch="0" ver="0.52.7" rel="36.2" flags="EQ"/>
    <rpm:entry kind="atom" name="newt-doc" epoch="0" ver="0.52.7" rel="36.2" flags="EQ"/>
    <rpm:entry kind="atom" name="newt-static" epoch="0" ver="0.52.7" rel="36.2" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">935ada8f166ac5f933757d852e13f5926382a623</checksum>
      <time file="1253793360" build="1253712579"/>
      <size package="91569" installed="204846" archive="214144"/>
      <location href="rpm/i586/newt-0.52.7-36.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/newt-0.52.7-35_36.2.i586.delta.rpm"/>
          <checksum type="sha">d6eb05e912ffcb908aa0be6b5ac08c16d7a0b32e</checksum>
          <time file="1253795423" build="1253712579"/>
          <size package="17017" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="4d4c026e53d78749dee6147703b9a359" buildtime="1190502134" sequence_info="newt-0.52.7-35-c676cb5c2d138590b451863621c6a4fdc7"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">a37ac5c160a23d7030d2e9835998c922b2896625</checksum>
      <time file="1253793139" build="1253712369"/>
      <size package="101224" installed="245814" archive="255112"/>
      <location href="rpm/ppc/newt-0.52.7-36.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/ppc/newt-0.52.7-36_36.2.ppc.delta.rpm"/>
          <checksum type="sha">cbcb413d983ef0f5f39c48ea34bdb89ae82533fc</checksum>
          <time file="1253795481" build="1253712369"/>
          <size package="16053" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="36" md5sum="f2f57d640950e11df967adee40d7d69c" buildtime="1190765931" sequence_info="newt-0.52.7-36-172567733fa133b99838c24b248b5ce7c7"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">8c134281bd93705d5719436fd2b38598db3a002c</checksum>
      <time file="1253793405" build="1253712439"/>
      <size package="98630" installed="234786" archive="244092"/>
      <location href="rpm/x86_64/newt-0.52.7-36.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/newt-0.52.7-35_36.2.x86_64.delta.rpm"/>
          <checksum type="sha">5c4781d05e498f8ecbe2ecd78ae080381b264780</checksum>
          <time file="1253795487" build="1253712439"/>
          <size package="16297" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="ddd0c1d30eb58282cc0fdcf6141f6e68" buildtime="1190502518" sequence_info="newt-0.52.7-35-b55047c897e91cc93fffe4b3a2f3e33ec7"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-32bit</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">75158dc696b5eaec71722912b799c101ccf301fd</checksum>
      <time file="1253793360" build="1253712600"/>
      <size package="49321" installed="96604" archive="97460"/>
      <location href="rpm/x86_64/newt-32bit-0.52.7-36.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-32bit" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-32bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/newt-32bit-0.52.7-35_36.2.x86_64.delta.rpm"/>
          <checksum type="sha">7cb6d6b430041d349cd54c5992b257b5b44275d3</checksum>
          <time file="1253795492" build="1253712600"/>
          <size package="9809" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="04642ac5bd11d617fc46d771d6ae9311" buildtime="1190502166" sequence_info="newt-32bit-0.52.7-35-5633a6dd41948e53b17f0a0db0d7c8db50"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-64bit</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">fd378389f82260d9be9e18cbb8d3bd4344622bfd</checksum>
      <time file="1253793283" build="1253712168"/>
      <size package="56282" installed="160376" archive="161244"/>
      <location href="rpm/ppc/newt-64bit-0.52.7-36.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-64bit" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-64bit"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">0ee660a5836f1b746ed6de4fa036ab99ccf47d22</checksum>
      <time file="1253793360" build="1253712579"/>
      <size package="13105" installed="19316" archive="20028"/>
      <location href="rpm/i586/newt-devel-0.52.7-36.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-devel" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/newt-devel-0.52.7-35_36.2.i586.delta.rpm"/>
          <checksum type="sha">d20e41e3c57a1734e5bc20c444b35c49c78f8155</checksum>
          <time file="1253795502" build="1253712579"/>
          <size package="8384" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="891f0734e488c6cdcbc7e23adbe9e176" buildtime="1190502134" sequence_info="newt-devel-0.52.7-35-079cae5548924714f63be011bfd4d55d40"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-devel</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">2796503ef0a0149d53d4945d263a6755e1030b65</checksum>
      <time file="1253793139" build="1253712369"/>
      <size package="13067" installed="19316" archive="20028"/>
      <location href="rpm/ppc/newt-devel-0.52.7-36.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-devel" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-devel</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">51ef061a2a0c1c6e2292312788a0425016fc0929</checksum>
      <time file="1253793405" build="1253712439"/>
      <size package="13098" installed="19316" archive="20032"/>
      <location href="rpm/x86_64/newt-devel-0.52.7-36.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-devel" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/newt-devel-0.52.7-35_36.2.x86_64.delta.rpm"/>
          <checksum type="sha">bd512dcc97f0fd0b0d6fb5fee6fc37f0769f7996</checksum>
          <time file="1253795510" build="1253712439"/>
          <size package="8352" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="77a62b75e531e6fbd36469450a264b92" buildtime="1190502518" sequence_info="newt-devel-0.52.7-35-31ecbd88c2b415b0f26e302f2b96348a40"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-doc</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">3b9e902d3faf3747849c5226c230feee42505178</checksum>
      <time file="1253793360" build="1253712579"/>
      <size package="161095" installed="418045" archive="418640"/>
      <location href="rpm/i586/newt-doc-0.52.7-36.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-doc" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-doc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/newt-doc-0.52.7-35_36.2.i586.delta.rpm"/>
          <checksum type="sha">b8f0536135e734a4b9c13a91d65e0c1290e43eb7</checksum>
          <time file="1253795514" build="1253712579"/>
          <size package="8289" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="06861b0c93f403c0e248712a8f561e10" buildtime="1190502134" sequence_info="newt-doc-0.52.7-35-15d1f9abd0c18ca3ed69cfab9fb3069c30"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-doc</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">f4f8c6eebcb0854059a1f863d5438c89163d4ac7</checksum>
      <time file="1253793139" build="1253712369"/>
      <size package="161088" installed="418045" archive="418640"/>
      <location href="rpm/ppc/newt-doc-0.52.7-36.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-doc" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-doc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-doc</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">fec65612cc6c1c58d1f57db7bfd773d2c4efa4e6</checksum>
      <time file="1253793405" build="1253712439"/>
      <size package="161107" installed="418045" archive="418640"/>
      <location href="rpm/x86_64/newt-doc-0.52.7-36.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-doc" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-doc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/newt-doc-0.52.7-35_36.2.x86_64.delta.rpm"/>
          <checksum type="sha">29bb747a8f7ab4dc1e17fb569dd44f4212147cea</checksum>
          <time file="1253795523" build="1253712439"/>
          <size package="8280" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="9143909751eb649daee685260063e3c7" buildtime="1190502518" sequence_info="newt-doc-0.52.7-35-72837e1695b975dd69fc9862ea21b9d330"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-static</name>
      <arch>i586</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">774e8ec9bc0b61e76bee54ad6aa8a42f25153ee8</checksum>
      <time file="1253793360" build="1253712579"/>
      <size package="39897" installed="91428" archive="91684"/>
      <location href="rpm/i586/newt-static-0.52.7-36.2.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-static" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-static"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/i586/newt-static-0.52.7-35_36.2.i586.delta.rpm"/>
          <checksum type="sha">69190416c073fb69a7582dc35bea6d6183aa36ca</checksum>
          <time file="1253795541" build="1253712579"/>
          <size package="8375" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="2be680b36577b671fdedae43023b8a7c" buildtime="1190502134" sequence_info="newt-static-0.52.7-35-c9292387a6318836aed45207a074a99810"/>
        </deltarpm>
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-static</name>
      <arch>ppc</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">560ee6100df4811dfd8ec9a8c971234aa5fe2fc2</checksum>
      <time file="1253793139" build="1253712369"/>
      <size package="42582" installed="106212" archive="106468"/>
      <location href="rpm/ppc/newt-static-0.52.7-36.2.ppc.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-static" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-static"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>newt-static</name>
      <arch>x86_64</arch>
      <version epoch="0" ver="0.52.7" rel="36.2"/>
      <checksum type="sha" pkgid="YES">b8177548339019583af51fa76abf285045be8e6a</checksum>
      <time file="1253793405" build="1253712439"/>
      <size package="43308" installed="125164" archive="125420"/>
      <location href="rpm/x86_64/newt-static-0.52.7-36.2.x86_64.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="newt-static" epoch="0" ver="0.52.7" rel="36.2" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="newt-static"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
        <deltarpm>
          <location href="rpm/x86_64/newt-static-0.52.7-35_36.2.x86_64.delta.rpm"/>
          <checksum type="sha">30a73bd3ef1771d47c8007071c3e2ac513227fa8</checksum>
          <time file="1253795550" build="1253712439"/>
          <size package="8331" archive="0"/>
          <base-version epoch="0" ver="0.52.7" rel="35" md5sum="5ba7a77d5d66187aa3e2672ecba411f6" buildtime="1190502518" sequence_info="newt-static-0.52.7-35-1b060f67615bf1f408d3f374316d342a10"/>
        </deltarpm>
      </pkgfiles>
    </package>
  </atoms>
</patch>
