This is the mail archive of the
cygwin-announce@cygwin.com
mailing list for the Cygwin project.
Updated: neon-0.24.6-1
- From: "Max Bowsher" <maxb at ukf dot net>
- To: <cygwin-announce at cygwin dot com>
- Date: Thu, 20 May 2004 14:29:17 +0100
- Subject: Updated: neon-0.24.6-1
- Reply-to: The Cygwin Mailing List <cygwin at cygwin dot com>
Neon has been updated to new upstream version 0.24.6.
This is a security bugfix release. There are no security consequences to Cygwin users, however, because no packages using neon have
yet been added to the Cygwin net distribution.
Upstream announcement:
Changes in release 0.24.6:
* SECURITY (CVE CAN-2004-0398): Fix sscanf overflow in ne_rfc1036_parse,
thanks to Stefan Esser.
* Link libneon against libexpat during Subversion build using bundled neon.
* Win32 build script update (Jon Foster).
Max.