https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2010-3387.htmlhttps://patchthecve.com/cve/CVE-2010-3387.htmlTue, 16 Jun 2026 23:22:41 +0000MEDIUM 6.9: vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: a third party disputes this issue because the script erroneously uses a sehttps://patchthecve.com/cve/CVE-2008-4985.htmlhttps://patchthecve.com/cve/CVE-2008-4985.htmlTue, 16 Jun 2026 22:58:53 +0000MEDIUM 6.9: vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file.https://patchthecve.com/cve/CVE-2005-0071.htmlhttps://patchthecve.com/cve/CVE-2005-0071.htmlTue, 16 Jun 2026 22:10:27 +0000MEDIUM 5.0: vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.