Open Source Vulnerabilities
CVE-2009-3603 does not affect BellSoft software
CVE-2009-3607 does not affect BellSoft software
ipe, ipe, ipe, ipe, ipe, ipe, ipe, ipe
ipe, ipe, ipe, ipe, ipe, ipe, ipe, ipe
ipe, ipe, ipe, ipe, ipe, ipe, ipe, ipe
ipe, ipe, ipe, ipe, ipe, ipe, ipe, ipe
ipe, ipe, ipe, ipe, ipe, ipe, ipe, ipe
advi, advi, advi, camlimages, camlimages, camlimages
libgd2, libgd2, libgd2, libwmf, libwmf, libwmf, racket, racket, racket
libgd2/ libgd2/ libgd2/ libwmf/ libwmf/ libwmf/ racket/ racket/ racket
libwmf
Buffer overflow/over-read in _gdGetColors (gd_gd.c) reached via the GD-file reader (gdImageCreateFromGd) when colorsTotal is not validated (libgd 2.x / PHP before 5.3.1). libwmf uses its bundled GD only as an output backend and exposes no API that decodes an untrusted .gd file, so the vulnerable reader path is never invoked. Additionally the upstream validation is already present in this trixie source: _gdGetColors in src/extra/gd/gd_gd.c rejects colorsTotal > gdMaxColors, and the non-2x branch reads colorsTotal as a single byte (<= 255 < gdMaxColors). Not reachable and already remediated in source; scanners flag it only via Debian's stale source-package match (trixie "unimportant / unfixed"; standalone libgd2 is fixed).
libwmf
Buffer overflow/over-read in _gdGetColors (gd_gd.c) reached via the GD-file reader (gdImageCreateFromGd) when colorsTotal is not validated (libgd 2.x / PHP before 5.3.1). libwmf uses its bundled GD only as an output backend and exposes no API that decodes an untrusted .gd file, so the vulnerable reader path is never invoked. Additionally the upstream validation is already present in this trixie source: _gdGetColors in src/extra/gd/gd_gd.c rejects colorsTotal > gdMaxColors, and the non-2x branch reads colorsTotal as a single byte (<= 255 < gdMaxColors). Not reachable and already remediated in source; scanners flag it only via Debian's stale source-package match (trixie "unimportant / unfixed"; standalone libgd2 is fixed).
CVE-2005-4881 does not affect BellSoft software
CVE-2009-3228 does not affect BellSoft software
CVE-2009-3612 does not affect BellSoft software
phpmyadmin, phpmyadmin, phpmyadmin
phpmyadmin, phpmyadmin, phpmyadmin
camlimages, camlimages
camlimages - arbitrary code execution
postgresql-ocaml, postgresql-ocaml
postgresql-ocaml - missing escape function
postgresql-ocaml/ postgresql-ocaml
postgresql-ocaml - missing escape function
mysql-ocaml, mysql-ocaml
mysql-ocaml - missing escape function
pygresql, pygresql
pygresql - missing escape function
python-django, python-django, python-django
python-django
python-django - denial of service
opensaml2, shibboleth-sp2
opensaml2, shibboleth-sp2 - interpretation conflict
opensaml2/ shibboleth-sp2
opensaml2, shibboleth-sp2 - interpretation conflict
wget, wget
wget - SSL certificate verification weakness
