6071 matches found
ECHO-635A-010C-FDCB
Bulletin has no description...
ECHO-9A28-8A09-4E5A
Bulletin has no description...
ECHO-324B-7AA5-13F9
Bulletin has no description...
ECHO-D430-00FC-F662
Bulletin has no description...
ECHO-F2C1-328C-2BC2 Vulnerability is in libavfilter/vf_quirc.c (QR decode via libquirc). Debian's ffmpeg package does not enable --enable-libquirc (default off; not present in debian/rules CONFIG), so the quirc filter is not built into our binary. Refs: - https://security-tracker.debian.org/tracker/CVE-2026-66041 - https://github.com/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 details: | Upstream fix resizes quirc buffers when input size changes. Clean upstream patch applies to the source tree, but the filter is not compiled in. If --enable-libquirc is ever added to debian/rules, convert this to a real PATCH_TYPE_UPSTREAM_PATCH entry.
Bulletin has no description...
ECHO-9DB0-DFD3-A7BB
Bulletin has no description...
ECHO-1A3B-6A3E-53F3
Bulletin has no description...
ECHO-DDD3-D328-2DB3
Bulletin has no description...
ECHO-416C-75E9-1367
Bulletin has no description...
ECHO-A13B-3527-8590
Bulletin has no description...
ECHO-3F90-0490-A5DB
Bulletin has no description...
ECHO-3699-27C7-123E
Bulletin has no description...
ECHO-F08C-7E47-8652 The vulnerable unexpand(1) code path (multibyte -t handling) was introduced upstream in GNU coreutils 9.11. Debian trixie ships coreutils 9.7-3, which predates it, so this CVE cannot be triggered in our build. No Echo patch is required. Re-evaluate if this spec is ever rebased to coreutils >= 9.11.
Bulletin has no description...
ECHO-D8C2-64E4-5430
Bulletin has no description...
ECHO-3497-4A0A-F528
Bulletin has no description...
ECHO-C5C2-10B5-9D2D
Bulletin has no description...
ECHO-C3E8-FE66-18C2
Bulletin has no description...
ECHO-B2AC-84D5-8C29
Bulletin has no description...