Skip to content
OpenAdvisories
Unscored RHSA-2009:1452 2 CVEs

Red Hat Security Advisory: neon security update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as neon 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as neon-debuginfo 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as neon-devel 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop neon 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop neon-debuginfo 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop neon-devel 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es neon 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es neon-debuginfo 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es neon-devel 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws neon 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws neon-debuginfo 0:0.24.7-4.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws neon-devel 0:0.24.7-4.el4_8.2
Red Hat · RHEL 5 enterprise_linux:5::client neon 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::client neon-debuginfo 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation neon 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation neon-debuginfo 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation neon-devel 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::server neon 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::server neon-debuginfo 0:0.25.5-10.el5_4.1
Red Hat · RHEL 5 enterprise_linux:5::server neon-devel 0:0.25.5-10.el5_4.1

Vulnerabilities 2

  • Unscored —
    CVE-2009-2473 Public exploit

    neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows contex…

  • Unscored —
    CVE-2009-2474

    neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the s…

    neon27 litmus Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=518215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=518223
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1452.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2473
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2473
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2473
  • report
    https://access.redhat.com/security/cve/CVE-2009-2474
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2474
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2474