https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-1911.htmlhttps://patchthecve.com/cve/CVE-2005-1911.htmlTue, 16 Jun 2026 22:13:54 +0000MEDIUM 5.0: The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss).https://patchthecve.com/cve/CVE-2005-1453.htmlhttps://patchthecve.com/cve/CVE-2005-1453.htmlTue, 16 Jun 2026 22:13:04 +0000MEDIUM 5.0: fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.https://patchthecve.com/cve/CVE-2004-2068.htmlhttps://patchthecve.com/cve/CVE-2004-2068.htmlTue, 16 Jun 2026 22:08:56 +0000MEDIUM 5.0: fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.https://patchthecve.com/cve/CVE-2003-0744.htmlhttps://patchthecve.com/cve/CVE-2003-0744.htmlTue, 16 Jun 2026 22:02:45 +0000MEDIUM 5.0: The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input.https://patchthecve.com/cve/CVE-2002-1661.htmlhttps://patchthecve.com/cve/CVE-2002-1661.htmlTue, 16 Jun 2026 21:59:44 +0000MEDIUM 5.0: The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.