https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1665.htmlhttps://patchthecve.com/cve/CVE-2007-1665.htmlTue, 16 Jun 2026 22:38:04 +0000MEDIUM 5.0: Memory leak in the token OCR functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2007-1664.htmlhttps://patchthecve.com/cve/CVE-2007-1664.htmlTue, 16 Jun 2026 22:38:04 +0000MEDIUM 5.0: ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service (NULL pointer dereference) via a vector related to the token OCR functionality.https://patchthecve.com/cve/CVE-2007-1663.htmlhttps://patchthecve.com/cve/CVE-2007-1663.htmlTue, 16 Jun 2026 22:38:03 +0000MEDIUM 5.0: Memory leak in the image message functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2005-2448.htmlhttps://patchthecve.com/cve/CVE-2005-2448.htmlTue, 16 Jun 2026 22:14:54 +0000MEDIUM 5.0: Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems.https://patchthecve.com/cve/CVE-2005-2370.htmlhttps://patchthecve.com/cve/CVE-2005-2370.htmlTue, 16 Jun 2026 22:14:45 +0000MEDIUM 5.0: Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.https://patchthecve.com/cve/CVE-2005-2369.htmlhttps://patchthecve.com/cve/CVE-2005-2369.htmlTue, 16 Jun 2026 22:14:45 +0000HIGH 7.5: Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code.https://patchthecve.com/cve/CVE-2005-1852.htmlhttps://patchthecve.com/cve/CVE-2005-1852.htmlTue, 16 Jun 2026 22:13:48 +0000HIGH 7.5: Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.https://patchthecve.com/cve/CVE-2005-1851.htmlhttps://patchthecve.com/cve/CVE-2005-1851.htmlTue, 16 Jun 2026 22:13:48 +0000HIGH 10.0: A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors.https://patchthecve.com/cve/CVE-2005-1850.htmlhttps://patchthecve.com/cve/CVE-2005-1850.htmlTue, 16 Jun 2026 22:13:48 +0000HIGH 10.0: Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916.https://patchthecve.com/cve/CVE-2005-1916.htmlhttps://patchthecve.com/cve/CVE-2005-1916.htmlTue, 16 Jun 2026 22:13:54 +0000MEDIUM 5.5: linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.