https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-38441.htmlhttps://patchthecve.com/cve/CVE-2024-38441.htmlWed, 17 Jun 2026 07:40:17 +0000CRITICAL 9.8: Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c. 2.4.1 and 3.1.19 are also fixed versions.https://patchthecve.com/cve/CVE-2024-38440.htmlhttps://patchthecve.com/cve/CVE-2024-38440.htmlWed, 17 Jun 2026 07:40:17 +0000HIGH 7.5: Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c. The original issue 1097 report stated: 'The latest version of Netatalk (v3.2.0) contains a security vulhttps://patchthecve.com/cve/CVE-2024-38439.htmlhttps://patchthecve.com/cve/CVE-2024-38439.htmlWed, 17 Jun 2026 07:40:16 +0000CRITICAL 9.8: Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in etc/uams/uams_pam.c. 2.4.1 and 3.1.19 are also fixed versions.https://patchthecve.com/cve/CVE-2023-42464.htmlhttps://patchthecve.com/cve/CVE-2023-42464.htmlWed, 17 Jun 2026 06:23:53 +0000CRITICAL 9.8: A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in th