<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="a653de9011a155a32e8510c3e40539a7"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="1331">
  <id>dbg111-libnewt0_52</id>
  <title>newt: fixing a heap overflow (CVE-2009-2905)</title>
  <release>openSUSE 11.1</release>
  <issued date="1253710315"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=540930" id="540930" title="bug number 540930" type="bugzilla"/>
  </references>
  <description>A heap-based buffer overflow was found in the way newt used
to process content, to be rendered in text dialog box.
Local attacker could issue a specially-crafted text dialog
box rendering request (direct or via custom application),
leading to denial of service (application crash) or,
potentially, to execution of arbitrary code with the
privileges of the user running the application.

CVE-2009-2905 has been assigned to this issue.
</description>
  <pkglist>
    <collection>
        <package name="newt-debuginfo" arch="i586" version="0.52.10" release="1.40.1">
          <filename>newt-debuginfo-0.52.10-1.40.1.i586.rpm</filename>
        </package>
        <package name="newt-debuginfo" arch="ppc" version="0.52.10" release="1.40.1">
          <filename>newt-debuginfo-0.52.10-1.40.1.ppc.rpm</filename>
        </package>
        <package name="newt-debuginfo" arch="x86_64" version="0.52.10" release="1.40.1">
          <filename>newt-debuginfo-0.52.10-1.40.1.x86_64.rpm</filename>
        </package>
        <package name="newt-debugsource" arch="i586" version="0.52.10" release="1.40.1">
          <filename>newt-debugsource-0.52.10-1.40.1.i586.rpm</filename>
        </package>
        <package name="newt-debugsource" arch="ppc" version="0.52.10" release="1.40.1">
          <filename>newt-debugsource-0.52.10-1.40.1.ppc.rpm</filename>
        </package>
        <package name="newt-debugsource" arch="x86_64" version="0.52.10" release="1.40.1">
          <filename>newt-debugsource-0.52.10-1.40.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
