https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-5668.htmlhttps://patchthecve.com/cve/CVE-2017-5668.htmlWed, 17 Jun 2026 01:21:00 +0000CRITICAL 9.8: bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for CVhttps://patchthecve.com/cve/CVE-2016-10189.htmlhttps://patchthecve.com/cve/CVE-2016-10189.htmlWed, 17 Jun 2026 00:39:14 +0000HIGH 7.5: BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.https://patchthecve.com/cve/CVE-2016-10188.htmlhttps://patchthecve.com/cve/CVE-2016-10188.htmlWed, 17 Jun 2026 00:39:14 +0000CRITICAL 9.8: Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire.