6071 matches found
ECHO-225C-65A8-298E Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-B80D-D824-90A1
Bulletin has no description...
ECHO-EFE4-3A95-5347
Bulletin has no description...
ECHO-83E1-A1F5-89BA
Bulletin has no description...
ECHO-AE46-4403-688C
Bulletin has no description...
ECHO-A217-D7D1-126E
Bulletin has no description...
ECHO-AA40-D591-93A9 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-7850-E6B8-97C1 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-F800-2733-E5C3 Disputed by upstream. 1. non-issue according to debian. 2. This is essentially an integer truncation issue, and not an integer overflow. We have determined that this should not affect any other data allocated close to the 16-bit integer in question "dbentry-> n_key_data". Red Hat Product Security does not consider this issue as a security flaw.
Bulletin has no description...
ECHO-072A-9FF7-3371 Disputed by NVD and pip upstream. The CVE describes pip's --extra-index-url behavior where the highest version number is installed regardless of which index it comes from. The pip team considers this intended functionality, not a security flaw. Red Hat closed as WONTFIX; Ubuntu priority: Negligible. Affects all pip versions with no fix planned.
Bulletin has no description...
ECHO-748A-B087-8819
Bulletin has no description...
ECHO-6358-D799-1471 The vulnerability is in the mj2 component, which is not built because debian build with the -DBUILD_MJ2:BOOL=OFF flag. https://github.com/uclouvain/openjpeg/issues/1127 https://security-tracker.debian.org/tracker/CVE-2018-16376
Bulletin has no description...
ECHO-3646-91BE-32B5 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-E8C4-F7E3-A4FC
Bulletin has no description...
ECHO-2CF3-BC60-4174
Bulletin has no description...
ECHO-A156-A63C-CBE1
Bulletin has no description...
ECHO-C07A-BC81-6C75 Floating-point exception in pixman's combine_inner function triggered only via the stress-test developer test binary, not the runtime library. The vulnerable code is in stress-test.c which is never compiled, shipped, or installed in the libpixman-1-0 package present in Echo containers. Debian marks this as "unimportant" with note "Crash in test tool, no security impact." No upstream fix after 2.5+ years. https://security-tracker.debian.org/tracker/CVE-2023-37769
Bulletin has no description...
ECHO-CA6C-4314-8DC3
Bulletin has no description...