Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
203
security advisoryimportantbugfixMageia 10 libneon Important Davfs2 Mount Adjustment Alert 2026-0051
Security update. Publication date: 16 Jul 2026 URL: https://advisories.mageia.org/MGAA-2026-0051.html Type: bugfix Affected Mageia releases: 10 Description: Update of libneon fixes davfs2 not being able to mount as an ordinary user. References: - https://bugs.mageia.org/show_bug.cgi?id=35770 SRPMS: - 10/core/libneon-0.36.0-1.1.mga10 . A security update for Mageia that addresses the mounting issue with davfs2 for users. Learn more about it here.. Mageia libneon update security mount issue. . Severity: Important. LinuxSecurity.com Team
Jul 15, 2026
•Important
Mageia
91
security advisoryGentoomultiple issuesGentoo: GLSA 200406-03 Normal: Multiple Libneon Risks in Sitecopy
sitecopy includes a vulnerable version of the neon library.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: sitecopy: Multiple vulnerabilities in included libneon Date: June 05, 2004 Bugs: #51585 ID: 200406-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= sitecopy includes a vulnerable version of the neon library. Background ========= sitecopy easily maintains remote websites. It makes it simple to keep a remote site synchronized with the local site with one command. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/sitecopy
Jun 05, 2004
Gentoo
91
security advisorygentoocode executionGentoo GLSA-200405-25 Normal: tla Heap Overflow In libneon
tla includes a vulnerable version of the neon library.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: tla: Heap-based buffer overflow in included libneon Date: May 30, 2004 Bugs: #51586 ID: 200405-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= tla includes a vulnerable version of the neon library. Background ========= GNU Arch (tla) is a revision control system suited for widely distributed development. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-util/tla < 1.2.1_pre1 > = 1.2.1_pre1 Description ========== Stefan Esser discovered a vulnerability in the code of the neon library (GLSA 200405-13): if a malicious date string is passed to the ne_rfc1036_parse() function, it can trigger a string overflow into static heap variables. tla includes it's own version of the library. Impact ===== When connected to a malicious WebDAV server, this vulnerability could allow execution of arbitrary code with the rights of the user running tla. Workaround ========= There is no known workaround at this time. Resolution ========= All users of tla should upgrade to the latest stable version: # emerge sync # emerge -pv "> =dev-util/tla-1.2.1_pre1" # emerge "> =dev-util/tla-1.2.1_pre1" References ========= [ 1 ] GLSA 200405-13 https://security.gentoo.org/glsa/200405-13 Availability =========== This GLSA andany updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200405-25 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
May 30, 2004
Gentoo
91
security advisoryGentooformat stringGentoo: GLSA-200405-01 Normal: libneon Format String Code Execution
There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Multiple format string vulnerabilities in neon 0.24.4 and earlier Date: May 09, 2004 Bugs: #48448 ID: 200405-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code. Background ========= neon provides an HTTP and WebDAV client library. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/neon = 0.24.5 Description ========== There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code under the context of the process using libneon. Impact ===== An attacker may be able to execute arbitrary code under the context of the process using libneon. Workaround ========= A workaround is not currently known for this issue. All users are advised to upgrade to the latest version of the affected package. Resolution ========= Neon users should upgrade to version 0.24.5 or later: # emerge sync # emerge -pv "> =net-misc/neon-0.24.5" # emerge "> =net-misc/neon-0.24.5" References ========= [ 1 ] CVE https://www.cve.org/CVERecord?id=CVE-CAN-2004-0179 Availability =========== This GLSA and any updates to it areavailable for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200405-01 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
May 09, 2004
Gentoo
87
security advisorycriticaldebianDebian neon Critical Format String Remote Exec Vulnerability DSA 487-1
These vulnerabilities could exploited by a malicious WebDAV server to execute arbitrary code with libneon's privileges.. Debian Security Advisory DSA 487-1
Apr 17, 2004
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!