6071 matches found
ECHO-CF8C-C1D6-F73D
Bulletin has no description...
ECHO-541A-6720-4DCA Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-80DA-5A07-B637 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-DADF-6239-1823 was not reproducible on a newer version of libtiff https://security-tracker.debian.org/tracker/CVE-2017-17973
Bulletin has no description...
ECHO-4D26-1D56-4C79
Bulletin has no description...
ECHO-9CD8-33F8-0F42 Debian's poppler links against libjpeg which is unaffected by this vulnerability. The vulnerable code is in Poppler's internal JPEG decoder which Debian does not use. https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319
Bulletin has no description...
ECHO-976F-52C3-E76A Upstream can no longer reproduce issue after fixing issue #631 on Jul 30, 2017 (before version 7.0.6 of the package). https://github.com/ImageMagick/ImageMagick/issues/633 https://github.com/ImageMagick/ImageMagick/issues/631
Bulletin has no description...
ECHO-9318-2EA4-3EC6
Bulletin has no description...
ECHO-20F5-1D38-DB71 Upstream rejected the issue, claiming documented options exist to limit stack usage. https://security-tracker.debian.org/tracker/CVE-2017-16232
Bulletin has no description...
ECHO-4A9C-630D-CC06 Not built into the binary packages and the code was fixed a long time ago and probably remains fixed. https://github.com/uclouvain/openjpeg/issues/871 https://security-tracker.debian.org/tracker/CVE-2016-9580
Bulletin has no description...
ECHO-7235-E3E9-241A
Bulletin has no description...
ECHO-4B6C-8E1C-2A64 From Debian: Only an issue with a QuantumDepth=64 build, thus not affecting the binary packages https://security-tracker.debian.org/tracker/CVE-2016-8678
Bulletin has no description...
ECHO-06BF-627E-890C
Bulletin has no description...
ECHO-6324-537E-5D75 According to the upstream, math.random() is not intended to meet cryptographic randomness requirements. Proper seeding should be handled by the application using libxslt. Additionally, calling srand() from a library is considered bad practice, as applications may expect deterministic behavior from random(). https://security-tracker.debian.org/tracker/CVE-2015-9019
Bulletin has no description...
ECHO-0854-6756-555E Debian builds with GNUTLS, not NSS https://security-tracker.debian.org/tracker/CVE-2015-3276
Bulletin has no description...
ECHO-30B8-1960-3011 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-139C-E746-D4E7 Debian's poppler links against libjpeg which is unaffected by this vulnerability. The vulnerable code is in Poppler's internal JPEG decoder which Debian does not use. https://security-tracker.debian.org/tracker/CVE-2017-2814 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319
Bulletin has no description...
ECHO-9A38-E230-2936
Bulletin has no description...