<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="63cd604284f0ecefce6f29b0f9c61d30"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2213">
  <id>dbg111-libpython2_6-1_0</id>
  <title>python: denial of service by proessing malformed XML (&quot;Expat vulnerability&quot;)</title>
  <release>openSUSE 11.1 DEBUGINFO</release>
  <issued date="1269909464"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=581765" id="581765" title="bug number 581765" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625" id="CVE-2009-2625" title="CVE-2009-2625" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560" id="CVE-2009-3560" title="CVE-2009-3560" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720" id="CVE-2009-3720" title="CVE-2009-3720" type="cve"/>
  </references>
  <description>This update of python has a copy of libxmlrpc that is
vulnerable to denial of service bugs that can occur while
processing malformed XML input. CVE-2009-2625: CVSS v2 Base
Score: 5.0 (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P):
Permissions, Privileges, and Access Control (CWE-264)
CVE-2009-3720: CVSS v2 Base Score: 5.0 (MEDIUM)
(AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information
(CWE-noinfo) CVE-2009-3560: CVSS v2 Base Score: 5.0
(MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors
(CWE-119)
</description>
  <pkglist>
    <collection>
        <package name="python-base-debuginfo" arch="i586" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debuginfo-2.6.0-2.22.23.1.i586.rpm</filename>
        </package>
        <package name="python-base-debuginfo" arch="ppc" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debuginfo-2.6.0-2.22.23.1.ppc.rpm</filename>
        </package>
        <package name="python-base-debuginfo" arch="x86_64" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debuginfo-2.6.0-2.22.23.1.x86_64.rpm</filename>
        </package>
        <package name="python-base-debuginfo-32bit" arch="x86_64" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debuginfo-32bit-2.6.0-2.22.23.1.x86_64.rpm</filename>
        </package>
        <package name="python-base-debuginfo-64bit" arch="ppc" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debuginfo-64bit-2.6.0-2.22.23.1.ppc.rpm</filename>
        </package>
        <package name="python-base-debugsource" arch="i586" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debugsource-2.6.0-2.22.23.1.i586.rpm</filename>
        </package>
        <package name="python-base-debugsource" arch="ppc" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debugsource-2.6.0-2.22.23.1.ppc.rpm</filename>
        </package>
        <package name="python-base-debugsource" arch="x86_64" version="2.6.0" release="2.22.23.1">
          <filename>python-base-debugsource-2.6.0-2.22.23.1.x86_64.rpm</filename>
        </package>
        <package name="python-debuginfo" arch="i586" version="2.6.0" release="2.23.1">
          <filename>python-debuginfo-2.6.0-2.23.1.i586.rpm</filename>
        </package>
        <package name="python-debuginfo" arch="ppc" version="2.6.0" release="2.23.1">
          <filename>python-debuginfo-2.6.0-2.23.1.ppc.rpm</filename>
        </package>
        <package name="python-debuginfo" arch="x86_64" version="2.6.0" release="2.23.1">
          <filename>python-debuginfo-2.6.0-2.23.1.x86_64.rpm</filename>
        </package>
        <package name="python-debuginfo-32bit" arch="x86_64" version="2.6.0" release="2.23.1">
          <filename>python-debuginfo-32bit-2.6.0-2.23.1.x86_64.rpm</filename>
        </package>
        <package name="python-debuginfo-64bit" arch="ppc" version="2.6.0" release="2.23.1">
          <filename>python-debuginfo-64bit-2.6.0-2.23.1.ppc.rpm</filename>
        </package>
        <package name="python-debugsource" arch="i586" version="2.6.0" release="2.23.1">
          <filename>python-debugsource-2.6.0-2.23.1.i586.rpm</filename>
        </package>
        <package name="python-debugsource" arch="ppc" version="2.6.0" release="2.23.1">
          <filename>python-debugsource-2.6.0-2.23.1.ppc.rpm</filename>
        </package>
        <package name="python-debugsource" arch="x86_64" version="2.6.0" release="2.23.1">
          <filename>python-debugsource-2.6.0-2.23.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
