11209 matches found
ECHO-9D3D-C34F-5DFC
Bulletin has no description...
ECHO-EE6E-3541-8406
Bulletin has no description...
ECHO-6F06-7887-E51E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-5F1F-E89D-BE0F
Bulletin has no description...
ECHO-405A-CF37-AEC7
Bulletin has no description...
ECHO-918A-FD9A-B2CD
Bulletin has no description...
ECHO-8F9F-FBF5-041F systemd-journald ANSI escape sequence forwarding to wall. CVSS 2.9. Requires ForwardToWall=yes in journald.conf and a local user session. Irrelevant for container workloads — no journald running, no wall targets. No upstream fix exists.
Bulletin has no description...
ECHO-39BC-1319-217C xdg-open launching a browser with a URL can cause SameSite=Strict cookies to be sent (browser treats it like typed navigation). The CVE record itself notes this is disputed: integrations of xdg-open typically do not convey whether the command was manually entered by the user, and distro/browser vendors treat mitigation as a browser CLI/"untrusted URL" concern rather than an xdg-utils code defect. Debian rates the issue unimportant and has no fixed version in any suite (including forky/sid). No upstream patch exists in xdg-utils; oss-security discussion (2025-06-23) recommended browser-side untrusted-mode flags first.
Bulletin has no description...
ECHO-9C44-F69C-DC26
Bulletin has no description...
ECHO-81C5-9F79-D550
Bulletin has no description...
ECHO-C5C2-7377-0D26
Bulletin has no description...
ECHO-224B-7D14-E186
Bulletin has no description...
ECHO-48B4-F133-D141
Bulletin has no description...
ECHO-0460-B582-014C
Bulletin has no description...
ECHO-6946-C59B-9AFD Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-AB2A-73D9-3AA2
Bulletin has no description...
ECHO-0151-A823-026D Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-49C7-4E0E-F2A6
Bulletin has no description...
ECHO-A21B-9EF1-9834
Bulletin has no description...
ECHO-DB43-5462-956D
Bulletin has no description...
ECHO-7B96-B37E-2BE6
Bulletin has no description...
ECHO-2791-8592-919C
Bulletin has no description...
ECHO-2F8E-E19D-BF58
Bulletin has no description...
ECHO-9838-E255-038E
Bulletin has no description...
ECHO-CFEB-52BB-5E5C
Bulletin has no description...
ECHO-DA22-22D4-A3EB
Bulletin has no description...
ECHO-A68F-2CD0-6978
Bulletin has no description...
ECHO-B0AE-FACC-5AE1 The CVE text claims arbitrary code execution "via creating a crafted AAC file" in libx264. libx264 is an H.264 encoder and never parses AAC or any other container or audio input. The only reference, x264 issue #75, is a LeakSanitizer report from running FFmpeg's configure checks with --enable-libx264: when x264_encoder_open() fails, its fail: path frees the encoder without x264_param_cleanup(), so the copied parameter strings (a few hundred bytes) leak once. There is no out-of-bounds access, no use-after-free and no attacker-controlled data involved. FFmpeg closed the original ticket as invalid and pointed at the leak in libx264. The record was assigned by MITRE with no CNA score; the 9.8 comes from CISA-ADP. Debian rates it unimportant in every suite ("Negligible security impact, usually only used for short-lived processes"), and no x264 commit since the report touches this path, so there is nothing to backport.
Bulletin has no description...
ECHO-572D-1F26-2B99
Bulletin has no description...
ECHO-70E5-DF73-C55E
Bulletin has no description...
ECHO-A4DF-8BA1-1B3B
Bulletin has no description...
ECHO-4911-1ADA-38AF
Bulletin has no description...
ECHO-0F32-6C9D-7894
Bulletin has no description...
ECHO-5F2F-255F-8FD6
Bulletin has no description...
ECHO-6551-DA8D-A4B8
Bulletin has no description...
ECHO-2722-1714-7588 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-F9A5-D2FF-574E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-1C91-F5A8-99CB Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-1203-94CA-1CEE Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E7F4-9860-3083
Bulletin has no description...
ECHO-E3B7-5995-8269 third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner. https://nvd.nist.gov/vuln/detail/CVE-2020-13092
Bulletin has no description...
ECHO-9AD0-4A61-6710 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-902D-3A16-FD64 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-EB33-91EE-8D11
Bulletin has no description...
ECHO-E4C7-B244-8A4C
Bulletin has no description...
ECHO-E5BF-6322-947E
Bulletin has no description...
ECHO-E9D4-431A-60BA
Bulletin has no description...
ECHO-6841-5622-FD54
Bulletin has no description...