[ MDVSA-2009:220-1 ] davfs

[dude67]

_______________________________________________________________________

Package : davfs
Date : January 5, 2010
Affected: 2008.0
_______________________________________________________________________

Problem Description:

A vulnerability was found in xmltok_impl.c (expat) that with
specially crafted XML could be exploited and lead to a denial of
service attack. Related to CVE-2009-2625 (CVE-2009-3720).

This update fixes this vulnerability.

Update:

Packages for 2008.0 are provided for Corporate Desktop 2008.0
customers.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-3720
https://bugs.gentoo.org/show_bug.cgi?id=280615
_______________________________________________________________________