dbg111-libneon-devel openSUSE 11.1 neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers (CVE-2009-2408). Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts of CPU and memory (CVE-2009-2473). neon-debuginfo-0.28.3-1.31.1.i586.rpm neon-debuginfo-0.28.3-1.31.1.ppc.rpm neon-debuginfo-0.28.3-1.31.1.x86_64.rpm neon-debugsource-0.28.3-1.31.1.i586.rpm neon-debugsource-0.28.3-1.31.1.ppc.rpm neon-debugsource-0.28.3-1.31.1.x86_64.rpm