https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-18226.htmlhttps://patchthecve.com/cve/CVE-2017-18226.htmlWed, 17 Jun 2026 01:12:26 +0000MEDIUM 5.5: The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM `cat /var/run/jabber/filehttps://patchthecve.com/cve/CVE-2017-18225.htmlhttps://patchthecve.com/cve/CVE-2017-18225.htmlWed, 17 Jun 2026 01:12:25 +0000HIGH 7.8: The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber account, which might allow local users to gain privileges by leveraging access to this account and then waiting for root to execute one of thttps://patchthecve.com/cve/CVE-2017-10807.htmlhttps://patchthecve.com/cve/CVE-2017-10807.htmlWed, 17 Jun 2026 01:00:44 +0000CRITICAL 9.8: JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.