Fedora alert FEDORA-2008-7661 (neon)

From:
    	     
 
updates@fedoraproject.org
To:
    	     
 
fedora-package-announce@redhat.com
Subject:
    	     
 
[SECURITY] Fedora 9 Update: neon-0.28.3-1.fc9
Date:
    	     
 
Thu, 16 Oct 2008 02:07:23 +0000
Message-ID:
    	     
 
<20081016020723.263A0208D5F@bastion.fedora.phx.redhat.com>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-7661
2008-10-16 00:44:23
--------------------------------------------------------------------------------

Name        : neon
Product     : Fedora 9
Version     : 0.28.3
Release     : 1.fc9
URL         : http://www.webdav.org/neon/
Summary     : An HTTP and WebDAV client library
Description :
neon is an HTTP and WebDAV client library, with a C interface;
providing a high-level interface to HTTP and WebDAV methods along
with a low-level interface for HTTP request handling.  neon
supports persistent connections, proxy servers, basic, digest and
Kerberos authentication, and has complete SSL support.

--------------------------------------------------------------------------------
Update Information:

This update includes the latest release of neon, fixing a security issue in the
Digest authentication domain parameter support.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Aug 28 2008 Joe Orton <jorton@redhat.com> 0.28.3-1
- update to 0.28.3 (CVE-2008-3746, #460415)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #459620 - CVE-2008-3746 neon: NULL ptr dereference in the Digest authentication support
(DoS possible)
        https://bugzilla.redhat.com/show_bug.cgi?id=459620
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update neon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-ann...