https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-3533.htmlhttps://patchthecve.com/cve/CVE-2005-3533.htmlTue, 16 Jun 2026 22:17:08 +0000HIGH 7.2: Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.https://patchthecve.com/cve/CVE-2005-3346.htmlhttps://patchthecve.com/cve/CVE-2005-3346.htmlTue, 16 Jun 2026 22:16:46 +0000HIGH 7.2: Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv funhttps://patchthecve.com/cve/CVE-2003-0452.htmlhttps://patchthecve.com/cve/CVE-2003-0452.htmlTue, 16 Jun 2026 22:02:13 +0000MEDIUM 4.6: Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections."