12891 matches found
ECHO-490E-06BA-F374
Bulletin has no description...
ECHO-D2D1-578D-1A9C
Bulletin has no description...
ECHO-1EEA-BB40-C2E4
Bulletin has no description...
ECHO-2182-2E8A-6286
Bulletin has no description...
ECHO-B531-27F2-3607
Bulletin has no description...
ECHO-B9AF-DF64-A726
Bulletin has no description...
ECHO-FF0E-D680-A287
Bulletin has no description...
ECHO-AD54-7743-1269 suexec in Apache HTTP Server 2.2.3 does not verify user/group ID combinations, which "might allow local users to leverage other vulnerabilities". The vendor disputes the issue because the attack "rely on an insecure server configuration" in which the unprivileged server user already has write access to the document root and can run arbitrary code; the suexec security model is not intended to protect against privilege escalation in such a configuration. NVD lists only 2.2.3 as affected (shipped version is 2.4.68). Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2007-1743
Bulletin has no description...
ECHO-8835-2681-4829 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-2F43-CC05-EEE0 Vulnerability is in the NGX updater, part of the host display-driver install. Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-14CE-5047-A43F
Bulletin has no description...
ECHO-7B96-3C92-04C6
Bulletin has no description...
ECHO-401A-73DF-0D29
Bulletin has no description...
ECHO-07BD-5728-1AD8 Assertion failure (abort/DoS) in jxl::PlaneBase::PlaneBase() reachable only when the cjxl encoder is used to encode a maliciously crafted GIF. There is no memory corruption and no upstream fix: the upstream tracking issues (#422, #762) remain open with no merged commit, and Debian rates the issue "unimportant" with a "Negligible security impact" note and no fixed version in any suite (bookworm through sid). With no upstream remediation available and negligible impact on the libjxl decode path we ship, this is not actionable as a backport.
Bulletin has no description...
ECHO-21A6-33D6-5465 Tor Browser information exposure vulnerability. This CVE is for Tor Browser, not Firefox ESR. Tracked against firefox-esr only because Tor Browser is based on Firefox, but the vulnerability is in Tor-specific code not present in firefox-esr. https://security-tracker.debian.org/tracker/CVE-2019-12383
Bulletin has no description...
ECHO-56A7-5917-6302
Bulletin has no description...
ECHO-ECF7-D413-F297 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-7610-17CE-56E5 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-6D8F-2062-51BD
Bulletin has no description...
ECHO-D76D-8B79-4473 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-0B3B-7E35-1F11 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-AE5E-0A53-0B5F
Bulletin has no description...
ECHO-1C8B-6A01-2CFE
Bulletin has no description...
ECHO-D361-202F-EABD
Bulletin has no description...
ECHO-038B-1877-5351
Bulletin has no description...
ECHO-B15F-540B-5661
Bulletin has no description...
ECHO-BBDD-CC38-C3A7
Bulletin has no description...
ECHO-8F94-ADFC-30E7
Bulletin has no description...
ECHO-AABB-5650-DEE3
Bulletin has no description...
ECHO-DCA5-C0F2-32B1 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-3879-0D40-E19E
Bulletin has no description...
ECHO-DF2B-C938-96C6
Bulletin has no description...
ECHO-1DBA-BADF-F45E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-7900-AC8B-AA81 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-EBEC-F6F4-A98D Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-976A-CCB0-F1C8
Bulletin has no description...
ECHO-12DC-016D-7EBF
Bulletin has no description...
ECHO-B32D-0D77-F517
Bulletin has no description...
ECHO-7C96-23E5-AD5B
Bulletin has no description...
ECHO-451B-C709-8943 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-DEA7-DAB0-28C7 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-50F5-F38A-4329 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-732C-42E9-BCE2
Bulletin has no description...
ECHO-28A9-42C6-76D6 Vulnerability is in the NVIDIA kernel-mode driver (nvidia.ko / open kernel module). Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-51E1-9866-6285 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-ABC7-D4B7-5B10
Bulletin has no description...
ECHO-3E29-E248-ADAB
Bulletin has no description...
ECHO-5B52-E7E7-A6C7
Bulletin has no description...