https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-11937.htmlhttps://patchthecve.com/cve/CVE-2020-11937.htmlWed, 17 Jun 2026 02:51:05 +0000MEDIUM 5.5: In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.https://patchthecve.com/cve/CVE-2020-15570.htmlhttps://patchthecve.com/cve/CVE-2020-15570.htmlWed, 17 Jun 2026 02:56:50 +0000MEDIUM 5.5: The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.https://patchthecve.com/cve/CVE-2020-12135.htmlhttps://patchthecve.com/cve/CVE-2020-12135.htmlWed, 17 Jun 2026 02:51:28 +0000MEDIUM 5.5: bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.https://patchthecve.com/cve/CVE-2019-11484.htmlhttps://patchthecve.com/cve/CVE-2019-11484.htmlWed, 17 Jun 2026 02:12:59 +0000MEDIUM 6.3: Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.