https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-0638.htmlhttps://patchthecve.com/cve/CVE-2002-0638.htmlTue, 16 Jun 2026 21:57:50 +0000MEDIUM 6.2: setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utilithttps://patchthecve.com/cve/CVE-2002-0083.htmlhttps://patchthecve.com/cve/CVE-2002-0083.htmlTue, 16 Jun 2026 21:56:44 +0000CRITICAL 9.8: Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.https://patchthecve.com/cve/CVE-2001-1449.htmlhttps://patchthecve.com/cve/CVE-2001-1449.htmlTue, 16 Jun 2026 21:56:17 +0000HIGH 7.5: The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.https://patchthecve.com/cve/CVE-2001-1030.htmlhttps://patchthecve.com/cve/CVE-2001-1030.htmlTue, 16 Jun 2026 21:55:26 +0000HIGH 7.5: Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.https://patchthecve.com/cve/CVE-2001-0977.htmlhttps://patchthecve.com/cve/CVE-2001-0977.htmlTue, 16 Jun 2026 21:55:20 +0000MEDIUM 5.0: slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.