How many CVEs have a located fix in debian/netatalk?

16 published CVEs have a fix traced to functions in debian/netatalk, touching 36 functions across 21 files.

Which function in debian/netatalk has been patched by the most CVEs?

afp_disconnect in etc/afpd/auth.c has been changed by 15 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in debian/netatalk?

The median fix changes 699 lines. 6% of fixes change 20 lines or fewer, and 0% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#350 of 500 repositories

debian/netatalk

Name: debian/netatalk: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix May 21, 2026

16

CVE fixes located

Published CVEs

36

Functions patched

Distinct function sites

21

Files patched

Distinct source files

2022–2026

Years covered

By CVE publication date

Overview

16 published CVEs have a fix traced to functions in debian/netatalk, the earliest published in 2022. Those fixes changed 36 distinct functions across 21 files, in 905 patch hunks.

Among the 500 repositories tracked here, debian/netatalk ranks #350 by the number of CVEs with a located fix.

Most patched functions

Functions in debian/netatalk changed by the most CVE fixes.

Most patched files

Files in debian/netatalk changed by the most CVE fixes.

1libatalk/util/server_child.c15 CVEs · 4 functions
2etc/afpd/mangle.c15 CVEs · 3 functions
3etc/afpd/spotlight_marshalling.c15 CVEs · 3 functions
4etc/afpd/auth.c15 CVEs · 2 functions
5etc/afpd/desktop.c15 CVEs · 2 functions
6etc/afpd/directory.c15 CVEs · 2 functions
7etc/afpd/file.c15 CVEs · 2 functions
8include/atalk/server_child.h15 CVEs · 2 functions
9libatalk/cnid/mysql/cnid_mysql.c15 CVEs · 2 functions
10libatalk/unicode/charcnv.c15 CVEs · 2 functions

Fix size

How much code a CVE fix in debian/netatalk changes, with backports counted once.

699

Median lines changed

Added plus removed, per CVE

6%

Fixes of 20 lines or fewer

Share of CVE fixes

0%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in debian/netatalk, and the functions each fix changed.

Dead bounds check in Spotlight RPC unmarshaller
CVE-2026-44057quote_gvariant_string has_dotdot_component cnid_mysql_get
Low · CVSS 3.1
EPSS 0.3%2026-05-21
Shell injection via volume path
CVE-2026-44076quote_gvariant_string has_dotdot_component cnid_mysql_get
Medium · CVSS 6.7
EPSS 0.2%2026-05-21
EA path traversal via incomplete sanitization
CVE-2026-44068quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.6
EPSS 0.5%2026-05-21
Heap out-of-bounds reads in Spotlight RPC unmarshalling
CVE-2026-44066quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.1
EPSS 0.5%2026-05-21
ASP session ID out-of-bounds access
CVE-2026-44064quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.1
EPSS 0.3%2026-05-21
Missing o_len bounds check in pull_charset_flags()
CVE-2026-44062quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.5
EPSS 0.6%2026-05-21
Integer underflow in dsi_writeinit() leads to denial of service
CVE-2026-44060quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.5
EPSS 0.6%2026-05-21
Bitwise OR logic bug enables shell injection
CVE-2026-44055quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.5
EPSS 0.6%2026-05-21
Predictable afpd session token
CVE-2026-44054quote_gvariant_string has_dotdot_component cnid_mysql_get
Medium · CVSS 6.5
EPSS 0.5%2026-05-21
LDAP simple-bind password exposure in log output
CVE-2026-44052quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 7.5
EPSS 0.4%2026-05-21
Arbitrary file read via attacker-controlled symlink creation
CVE-2026-44051quote_gvariant_string has_dotdot_component cnid_mysql_get
High · CVSS 8.1
EPSS 0.6%2026-05-21
Heap buffer overflow in CNID daemon comm_rcv()
CVE-2026-44050quote_gvariant_string has_dotdot_component cnid_mysql_get
Critical · CVSS 9.9
EPSS 0.7%2026-05-21

Get an alert for each new debian/netatalk CVE, with the patched functions and AI-written analysis.

Monitor netatalk CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

Alinto/sogo16 CVEs android.googlesource.com/platform-system-bt16 CVEs argoproj/argo-workflows16 CVEs codeigniter4/CodeIgniter416 CVEs debian/libmatio16 CVEs debian/libvncserver16 CVEs debian/nss16 CVEs debian/poppler16 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in debian/netatalk.

How many CVEs have a located fix in debian/netatalk?: 16 published CVEs have a fix traced to functions in debian/netatalk, touching 36 functions across 21 files.
Which function in debian/netatalk has been patched by the most CVEs?: afp_disconnect in etc/afpd/auth.c has been changed by 15 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in debian/netatalk?: The median fix changes 699 lines. 6% of fixes change 20 lines or fewer, and 0% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track debian/netatalk CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing