[SECURITY] Fedora 11 Update: neon-0.28.6-1.fc11

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-8815
2009-08-20 20:34:04
--------------------------------------------------------------------------------

Name        : neon
Product     : Fedora 11
Version     : 0.28.6
Release     : 1.fc11
URL         : http://www.webdav.org/neon/
Summary     : An HTTP and WebDAV client library
Description :
neon is an HTTP and WebDAV client library, with a C interface;
providing a high-level interface to HTTP and WebDAV methods along
with a low-level interface for HTTP request handling.  neon
supports persistent connections, proxy servers, basic, digest and
Kerberos authentication, and has complete SSL support.

--------------------------------------------------------------------------------
Update Information:

This update includes the latest release of neon, version 0.28.6.    This fixes
two security issues:    * the "billion laughs" attack against expat could allow
a Denial of Service attack by a malicious server. (CVE-2009-2473)    * an
embedded NUL byte in a certificate subject name could allow an undetected MITM
attack against an SSL server if a trusted CA issues such a cert.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Aug 19 2009 Joe Orton <jorton at redhat.com> 0.28.6-1
- update to 0.26.1
* Thu Jul  9 2009 Joe Orton <jorton at redhat.com> 0.28.5-1
- update to 0.28.5 (#502451, #491839)
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update neon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------