neon-debuginfo vulnerabilities (Red Hat)

2 vulnerabilities.

• neon-debuginfo Red Hat neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in... CVE-2009-2474 Fix available 5.8 MediumAugust 21, 2009
• neon-debuginfo Red Hat neon before 0.28.6, when expat is used, does not properly detect recursion during entity... CVE-2009-2473 Public exploitFix available 4.3 MediumAugust 21, 2009