https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-103680.htmlhttps://patchthecve.com/cve/CVE-2026-103680.htmlMon, 05 Oct 2026 13:42:10 +0000LOW 3.1: A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral Encaphttps://patchthecve.com/cve/CVE-2026-103679.htmlhttps://patchthecve.com/cve/CVE-2026-103679.htmlMon, 05 Oct 2026 14:05:23 +0000MEDIUM 6.5: A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, caushttps://patchthecve.com/cve/CVE-2026-103678.htmlhttps://patchthecve.com/cve/CVE-2026-103678.htmlMon, 05 Oct 2026 14:25:05 +0000MEDIUM 5.4: A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the application fails to properly validate input buffer boundaries before copying data in get_rtf_data_from_buf(), reading beyond th