Open Source Vulnerabilities
backup-manager, backup-manager, backup-manager
libgd2, libgd2, libgd2, libwmf, libwmf, libwmf, racket, racket, racket
libgd2/ libgd2/ libgd2/ libwmf/ libwmf/ libwmf/ racket/ racket/ racket
libwmf
Integer overflows in libgd (before 2.0.35) in gdImageCreate, gdImageCreateTrueColor and gdImageCopyResized on large width/height, overflowing the pixel-buffer allocation. The libgd 2.0.35 fix — the overflow2() helper and its guards on the sx*sy allocations — is already present in this trixie source: overflow2() is defined in src/extra/gd/gdhelpers.c and gdImageCreate / gdImageCreateTrueColor in src/extra/gd/gd.c bail out via overflow2(sx, sy) and the per-row size checks before allocating. There is nothing to backport; the vulnerability does not reproduce against 0.2.13. Debian rates trixie "unimportant".
libwmf
Integer overflows in libgd (before 2.0.35) in gdImageCreate, gdImageCreateTrueColor and gdImageCopyResized on large width/height, overflowing the pixel-buffer allocation. The libgd 2.0.35 fix — the overflow2() helper and its guards on the sx*sy allocations — is already present in this trixie source: overflow2() is defined in src/extra/gd/gdhelpers.c and gdImageCreate / gdImageCreateTrueColor in src/extra/gd/gd.c bail out via overflow2(sx, sy) and the per-row size checks before allocating. There is nothing to backport; the vulnerability does not reproduce against 0.2.13. Debian rates trixie "unimportant".
librpcsecgss
librpcsecgss - arbitrary code execution
centerim
centerim - arbitrary code execution
tcp-wrappers, tcp-wrappers, tcp-wrappers
postfix-policyd
postfix-policyd - arbitrary code execution
lighttpd
lighttpd - several vulnerabilities
python3
CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1
python3
CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1
python2
CVE-2007-4559 affecting package python2 for versions less than 2.7.18-8
python2
CVE-2007-4559 affecting package python2 for versions less than 2.7.18-8
CVE-2007-4559 does not affect BellSoft software
python-py
CVE-2007-4559 affecting package python-py 1.11.0-1
python2.7, python3.4, python3.5, python2.7, python3.5, python2.7, python3.6, python3.8, python2.7, python3.10, python3.11
python2.7/ python3.4/ python3.5/ python2.7/ python3.5/ python2.7/ python3.6/ python3.8/ python2.7/ python3.10/ python3.11
Directory path traversal in extract() and extractall() tarfile functions via '..' (dot dot) sequences
Directory path traversal in extract() and extractall() tarfile functions via '..' (dot dot) sequences
