|
Neon WebDAV Client Library ne_rfc1036_parse Function Heap Overflow Vulnerability
Solution: Neon 0.24.6 has been released to address this issue. Debian has releases an advisory DSA 506-1 to address this issue. Please see the referenced advisory for more information. Debian has releases an advisory DSA 507-1 to address this issue in cadaver. Please see the referenced advisory for more information. Red Hat Fedora Linux has released advisories FEDORA-2004-129 and FEDORA-2004-130 dealing with this issue for their Fedora Linux Core. Please see the referenced advisories for more information. Mandrake Linux has released advisory MDKSA-2004:049 and fixes dealing with this issue. Please see the referenced advisory for more information. OpenPKG has released advisory OpenPKG-SA-2004.024 and fixes dealing with this issue. Please see the referenced advisory for more information. Gentoo Linux has released advisories GLSA 200405-13, and GLSA 200405-15 dealing with this issue. Please see the referenced advisories for more information. Users of affected packages are encouraged to run the following commands as superuser: emerge sync emerge -pv ">=net-misc/neon-0.24.6" emerge ">=net-misc/neon-0.24.6" emerge -pv ">=net-misc/cadaver-0.22.2" emerge ">=net-misc/cadaver-0.22.2" Conectiva Linux has released advisory CLA-2004:841 dealing with this issue. Please see the referenced advisory for more information. Silicon Graphics has released advisory 20040508-01-U and fixes dealing with this and other issues for SGI ProPack 2.4. Please see the referenced advisory for more information. Gentoo has released an updated advisory (GLSA 200405-25:02) providing fixes for GNU Arch (tla), which includes the vulnerable neon library. Fixes may be applied by the superuser with the following commands: emerge sync emerge -pv ">=dev-util/tla-1.2-r2" emerge ">=dev-util/tla-1.2-r2" Gentoo has released an advisory (GLSA 200406-03) providing fixes for sitecopy, which includes the vulnerable neon library. Fixes may be applied by the superuser with the following commands: emerge -pv unmerge net-misc/sitecopy emerge unmerge net-misc/sitecopy Mandrake Linux has released advisory MDKSA-2004:078 addressing this issue. Please see the referenced advisory for further information. The Fedora Legacy project has released advisory FLSA:1552 along with fixes to address this issue for RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information. sitecopy sitecopy 0.13.3
sitecopy sitecopy 0.13.4
Cadaver WebDAV Client 0.18
Neon Client Library 0.19.3
Cadaver WebDAV Client 0.22
Cadaver WebDAV Client 0.22.1
Neon Client Library 0.23
Neon Client Library 0.23.1
Neon Client Library 0.23.2
Neon Client Library 0.23.3
Neon Client Library 0.23.4
Neon Client Library 0.23.5
Neon Client Library 0.23.6
Neon Client Library 0.23.7
Neon Client Library 0.23.8
Neon Client Library 0.24
Neon Client Library 0.24.1
Neon Client Library 0.24.2
Neon Client Library 0.24.3
Neon Client Library 0.24.4
Neon Client Library 0.24.5
OpenOffice OpenOffice 1.1.2
|
|
|
Privacy Statement |
