Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
203
security advisoryimportantwebdavMageia 9 Tomcat Important WebDAV HTTP/2 Security Fix MGASA-2026-0139
MGASA-2026-0139 - Updated tomcat packages fix security vulnerability. MGASA-2026-0139 - Updated tomcat packages fix security vulnerability Publication date: 15 May 2026 URL: https://advisories.mageia.org/MGASA-2026-0139.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-41284, CVE-2026-41293, CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514, CVE-2026-43515 Description: Unbounded read in WebDAV LOCK and PROPFIND handling. (CVE-2026-41284) HTTP/2 request headers not validated. (CVE-2026-41293) WebSocket authentication header exposure. (CVE-2026-42498) Digest authenticator will authenticate any unknown user. (CVE-2026-43512) LockOutRealm treats user names as case-sensitive. (CVE-2026-43513) AJP secret compared in non-constant time. (CVE-2026-43514) Security constraints not correctly applied. (CVE-2026-43515) References: - https://bugs.mageia.org/show_bug.cgi?id=35523 - https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.118 - https://www.openwall.com/lists/oss-security/2026/05/12/8 - https://www.openwall.com/lists/oss-security/2026/05/12/9 - https://www.openwall.com/lists/oss-security/2026/05/12/10 - https://www.openwall.com/lists/oss-security/2026/05/12/11 - https://www.openwall.com/lists/oss-security/2026/05/12/12 - https://www.openwall.com/lists/oss-security/2026/05/12/13 - https://www.openwall.com/lists/oss-security/2026/05/12/14 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 SRPMS: - 9/core/tomcat-9.0.118-1.mga9 . Updated tomcat packages in Mageia resolve multiple security issues. Critical vulnerabilities fixed ensure safer applicationoperation.. Mageia tomcat security patch, Tomcat vulnerabilities, webdav security issues, http2 request validation. . Severity: Important. LinuxSecurity.com Team
May 15, 2026
•Important
Mageia
91
security advisorygentoolow severityGentoo: GLSA-200711-03 Low: Gallery WebDAV and Reupload Threats
The WebDAV and Reupload modules of Gallery contain multiple unspecified vulnerabilities.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200711-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: Gallery: Multiple vulnerabilities Date: November 01, 2007 Bugs: #191587 ID: 200711-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= The WebDAV and Reupload modules of Gallery contain multiple unspecified vulnerabilities. Background ========= Gallery is a PHP based photo album manager. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/gallery < 2.2.3 > = 2.2.3 Description ========== Merrick Manalastas and Nicklous Roberts have discovered multiple vulnerabilities in the WebDAV and Reupload modules. Impact ===== A remote attacker could exploit these vulnerabilities to bypass security restrictions and rename, replace and change properties of items, or edit item data using WebDAV. Workaround ========= There is no known workaround at this time. Resolution ========= All Gallery users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =www-apps/gallery-2.2.3" References ========= [ 1 ] CVE-2007-4650 https://www.cve.org/CVERecord?id=CVE-2007-4650 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200711-03 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Nov 02, 2007
•Low
Gentoo
91
security advisorygentooremote executionGentoo: GLSA-200405-04 High: OpenOffice.org Remote Code Execution Risk
Several format string vulnerabilities are present in the Neon library included in OpenOffice.org, allowing remote execution of arbitrary code when connected to an untrusted WebDAV server. [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: OpenOffice.org vulnerability when using DAV servers Date: May 11, 2004 Bugs: #47926 ID: 200405-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Several format string vulnerabilities are present in the Neon library included in OpenOffice.org, allowing remote execution of arbitrary code when connected to an untrusted WebDAV server. Background ========= OpenOffice.org is an office productivity suite, including word processing, spreadsheets, presentations, drawings, data charting, formula editing, and file conversion facilities. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-office/openoffice = 1.1.1-r1 2 app-office/openoffice = 1.0.3-r2 3 app-office/openoffice = 1.1.0-r4 4 app-office/openoffice-ximian = 1.1.51-r1 5 app-office/openoffice-ximian-bin
May 11, 2004
Gentoo
87
security advisorybuffer overflowdebianDebian DSA 412-1: Addressing Moderate Nd Remote Execution Risk
Multiple vulnerabilities were discovered in nd, a command-line WebDAVinterface, whereby long strings received from the remote server couldoverflow fixed-length buffers. This vulnerability could be exploitedby a remote attacker in control of a malicious WebDAV server toexecute arbitrary code if the server was accessed by a vulnerableversion of nd.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 412-1
Jan 06, 2004
•Important
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!