https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-7555.htmlhttps://patchthecve.com/cve/CVE-2017-7555.htmlWed, 17 Jun 2026 01:24:36 +0000CRITICAL 9.8: Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.https://patchthecve.com/cve/CVE-2013-6412.htmlhttps://patchthecve.com/cve/CVE-2013-6412.htmlWed, 17 Jun 2026 00:00:26 +0000MEDIUM 4.6: The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.https://patchthecve.com/cve/CVE-2012-6607.htmlhttps://patchthecve.com/cve/CVE-2012-6607.htmlTue, 16 Jun 2026 23:48:27 +0000LOW 3.3: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.https://patchthecve.com/cve/CVE-2012-0787.htmlhttps://patchthecve.com/cve/CVE-2012-0787.htmlTue, 16 Jun 2026 23:38:15 +0000LOW 3.7: The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when usihttps://patchthecve.com/cve/CVE-2012-0786.htmlhttps://patchthecve.com/cve/CVE-2012-0786.htmlTue, 16 Jun 2026 23:38:15 +0000LOW 3.3: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.