-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-7661 2008-10-16 00:44:23 --------------------------------------------------------------------------------
Name : neon Product : Fedora 9 Version : 0.28.3 Release : 1.fc9 URL : http://www.webdav.org/neon/ Summary : An HTTP and WebDAV client library Description : neon is an HTTP and WebDAV client library, with a C interface; providing a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections, proxy servers, basic, digest and Kerberos authentication, and has complete SSL support. -------------------------------------------------------------------------------- Update Information: This update includes the latest release of neon, fixing a security issue in the Digest authentication domain parameter support. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 28 2008 Joe Orton <[EMAIL PROTECTED]> 0.28.3-1 - update to 0.28.3 (CVE-2008-3746, #460415) -------------------------------------------------------------------------------- References: [ 1 ] Bug #459620 - CVE-2008-3746 neon: NULL ptr dereference in the Digest authentication support (DoS possible) https://bugzilla.redhat.com/show_bug.cgi?id=459620 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update neon' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list [email protected] http://www.redhat.com/mailman/listinfo/fedora-package-announce
