11209 matches found
ECHO-A7ED-BFEC-5FE3 Array index error in gd_gif_in.c in the bundled GD graphics library (libgd before 2.0.35), reached via the GIF reader (gdImageCreateFromGif). libwmf carries its own copy of GD under src/extra/gd and compiles it (Debian does not build-depend on libgd-dev, so LIBWMF_OPT_SYS_GD is off), but that copy ships no GIF reader at all: there is no gd_gif_in.c/gd_gif_out.c and libgd_la_SOURCES in src/extra/gd/Makefile.am compiles no GIF source. libwmf uses GD only as a rasterization/output backend and never decodes GIF input. The vulnerable code is not present or reachable in this package; scanners flag it only via Debian's stale source-package match (trixie is "unimportant / unfixed" while standalone libgd2 is fixed).
Bulletin has no description...
ECHO-85A3-417A-5FA2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-D537-58D2-7E5E
Bulletin has no description...
ECHO-AFDF-CD6B-D2FD
Bulletin has no description...
ECHO-68C9-01DA-B460
Bulletin has no description...
ECHO-7892-53AE-A3FB
Bulletin has no description...
ECHO-0DFF-8373-3408
Bulletin has no description...
ECHO-2807-9F4F-AD1F Vulnerability is in libheif's image-sequence / ISOBMFF track parsing, which was added in v1.20.0. v1.19.8 — the version we ship — has no track parsing at all (no Box_stsc / Box_stts / Box_saiz / TrackBox / MovieBox), so the vulnerable code is not present.
Bulletin has no description...
ECHO-1F95-ED49-F41F
Bulletin has no description...
ECHO-F2D1-E04B-C5E8
Bulletin has no description...
ECHO-8792-9C43-A7BA
Bulletin has no description...
ECHO-43E7-F704-3E0E
Bulletin has no description...
ECHO-C25D-53F4-8782
Bulletin has no description...
ECHO-297B-3C7F-90D1
Bulletin has no description...
ECHO-979C-CCDF-DDA8 Resolved by package bump to 1.90.0+e1 (fixed version: 1.83.7)
Bulletin has no description...
ECHO-70F1-B0EA-CD3C
Bulletin has no description...
ECHO-E09D-D17B-953C
Bulletin has no description...
ECHO-E759-82C3-DFDB
Bulletin has no description...
ECHO-A687-A125-AE85
Bulletin has no description...
ECHO-4A16-8886-FBC5
Bulletin has no description...
ECHO-632A-C621-45BF
Bulletin has no description...
ECHO-404F-2A67-489D
Bulletin has no description...
ECHO-BF94-A3AA-1731
Bulletin has no description...
ECHO-34D9-EA37-38AF
Bulletin has no description...
ECHO-741D-8A38-66AB
Bulletin has no description...
ECHO-E2F6-D6A3-9113
Bulletin has no description...
ECHO-AC84-3B8A-D924
Bulletin has no description...
ECHO-1E9D-9CBE-8622
Bulletin has no description...
ECHO-E69F-5EF2-55D4
Bulletin has no description...
ECHO-C375-87D8-EE8B
Bulletin has no description...
ECHO-33BB-95D6-B867
Bulletin has no description...
ECHO-FA6F-2167-BB0A
Bulletin has no description...
ECHO-2B66-C126-1BAB
Bulletin has no description...
ECHO-332C-D1F1-FB8F
Bulletin has no description...
ECHO-0CD2-5D81-DA86
Bulletin has no description...
ECHO-2EBD-53A1-7608
Bulletin has no description...
ECHO-0A46-045E-587B
Bulletin has no description...
ECHO-DE8F-2AD3-E61D Disputed by Anyscale. Ray is not intended for use outside of a strictly controlled network environment. According to anyscale: "[this] is a long-standing design decision based on how Ray’s security boundaries are drawn and consistent with Ray deployment best practices"
Bulletin has no description...
ECHO-E27D-8BAB-6648
Bulletin has no description...
ECHO-5939-F806-1836
Bulletin has no description...
ECHO-DDE2-B936-33E7
Bulletin has no description...
ECHO-72B4-B0C4-C60E
Bulletin has no description...
ECHO-2014-AA83-CA03
Bulletin has no description...
ECHO-6F51-B75E-80E8
Bulletin has no description...
ECHO-4D6B-0E2B-2431
Bulletin has no description...
ECHO-2CCC-1670-8C46
Bulletin has no description...
ECHO-2A5F-F6ED-BC31
Bulletin has no description...
ECHO-DC86-0C7B-0A2C
Bulletin has no description...