ECHO-776A-C85C-3DA5 This vulnerability is only applicable in scenarios in which a terminal emulator with improper handling of escape codes; Terminal emulators in Echo's images employ proper escaping and sanitization to mitigate such risks. https://ubuntu.com/security/CVE-2018-1000021#notes https://security-tracker.debian.org/tracker/CVE-2018-1000021

Bulletin has no description...

ECHO-9410-1B2D-191E

Bulletin has no description...

ECHO-195A-A2DE-FF9A This vulnerability is disputed by the opensh maintainers and is considered expected behavior. https://security-tracker.debian.org/tracker/CVE-2016-20012 https://github.com/openssh/openssh-portable/pull/270 https://www.openwall.com/lists/oss-security/2018/08/24/1

Bulletin has no description...

ECHO-B55C-210A-6F81 Only relevant to systems running systemd along with selinux. https://security-tracker.debian.org/tracker/CVE-2013-4392 can be verified using the following command: ls /sys/fs/selinux If the directory does not exist, then selinux is not enabled. cat /proc/1/comm If the output is not systemd, then selinux is not enabled.

Bulletin has no description...

ECHO-FA5B-6CEC-3E77 the cve is dependent on LOG_UNKFAIL_ENAB in login.defs being no, which is not the default. https://security-tracker.debian.org/tracker/CVE-2007-5686 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=290803

Bulletin has no description...

ECHO-D342-7C67-297F This vulnerability is not applicable as Echo images do not ship with libraries enabling S/KEY or OPIE authentication. https://security-tracker.debian.org/tracker/CVE-2007-2243 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=436571

Bulletin has no description...

ECHO-A597-344D-59BE This is intended behaviour https://security-tracker.debian.org/tracker/CVE-2005-2541

Bulletin has no description...

ECHO-2892-A22F-F2D5 That's a policy violation, but not a security problem

Bulletin has no description...

ECHO-7300-0DF7-EF21

Bulletin has no description...

ECHO-2C1D-6266-FCE5

Bulletin has no description...

ECHO-273B-FD6D-3AFE

Bulletin has no description...

ECHO-CC02-A477-2575

Bulletin has no description...

ECHO-9546-A6BF-A698

Bulletin has no description...

ECHO-C0A9-4423-AA59

Bulletin has no description...

ECHO-F24E-40E5-BA8E

Bulletin has no description...

ECHO-CF28-0EB1-0DB4

Bulletin has no description...

ECHO-9A35-993C-321E Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

ECHO-C174-AB42-F783 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

ECHO-45C0-9CD6-B1BD Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

ECHO-F4BA-0513-7223 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...