https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-2274.htmlhttps://patchthecve.com/cve/CVE-2002-2274.htmlTue, 16 Jun 2026 22:01:00 +0000LOW 2.1: akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file.https://patchthecve.com/cve/CVE-2002-2244.htmlhttps://patchthecve.com/cve/CVE-2002-2244.htmlTue, 16 Jun 2026 22:00:56 +0000LOW 2.1: Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle.https://patchthecve.com/cve/CVE-2002-2243.htmlhttps://patchthecve.com/cve/CVE-2002-2243.htmlTue, 16 Jun 2026 22:00:56 +0000MEDIUM 5.0: Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service (refused connections) by opening a connection and not closing it.