11317 matches found
ECHO-F237-5771-3C00 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-B507-5D7A-0C6F
Bulletin has no description...
ECHO-2EC8-1A62-F90D
Bulletin has no description...
ECHO-0F49-5D12-5BD0
Bulletin has no description...
ECHO-335C-65C6-BCA4
Bulletin has no description...
ECHO-73F3-1173-C1CB
Bulletin has no description...
ECHO-161C-5786-CB70
Bulletin has no description...
ECHO-0733-CF36-0C43 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-D4CB-FB13-FCE0
Bulletin has no description...
ECHO-11C6-FB86-E864 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-568F-2036-225B Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-DEB6-75E4-F0F1 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-8B55-03C5-BAD1 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-4C61-91EF-064A Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-7592-AEC9-5CD1
Bulletin has no description...
ECHO-88A2-2FCC-BE2A
Bulletin has no description...
ECHO-13CC-25E9-E23C
Bulletin has no description...
ECHO-F860-EC46-FA89
Bulletin has no description...
ECHO-4EA6-0DA8-E4A5
Bulletin has no description...
ECHO-830D-D66C-EF17
Bulletin has no description...
ECHO-82A6-442F-DF96
Bulletin has no description...
ECHO-32A0-7ECA-6A4C
Bulletin has no description...
ECHO-C5E6-D739-F53E
Bulletin has no description...
ECHO-E054-CEB8-F226
Bulletin has no description...
ECHO-3890-027D-1B0C
Bulletin has no description...
ECHO-EE76-63DA-E27E
Bulletin has no description...
ECHO-ABBF-6840-ED40
Bulletin has no description...
ECHO-004C-71C0-AB43
Bulletin has no description...
ECHO-1B07-D81F-62FA
Bulletin has no description...
ECHO-9B5E-AF86-3789
Bulletin has no description...
ECHO-5D31-5398-16AE
Bulletin has no description...
ECHO-E273-D299-099C
Bulletin has no description...
ECHO-B550-5FF1-C43B
Bulletin has no description...
ECHO-78C2-1651-B07E
Bulletin has no description...
ECHO-97B7-DB1F-A2F1
Bulletin has no description...
ECHO-E1CA-675B-F72E
Bulletin has no description...
ECHO-2296-1FB1-7EC2
Bulletin has no description...
ECHO-FBB2-6775-831E
Bulletin has no description...
ECHO-7C7A-99C8-B321
Bulletin has no description...
ECHO-52F4-E7B3-C993
Bulletin has no description...
ECHO-2F77-0A3F-C878
Bulletin has no description...
ECHO-C50C-9D1F-AEDB
Bulletin has no description...
ECHO-5B8B-ED94-89DF
Bulletin has no description...
ECHO-7AEA-0124-6D6E
Bulletin has no description...
ECHO-9D25-083F-FEDF
Bulletin has no description...
ECHO-B4E9-C42D-70DC
Bulletin has no description...
ECHO-EEB1-DF32-DBAA The vulnerable code postdates this version. The Python >= 3.12 no-op host-name matcher (sslcompat returning True when ssl.match_hostname is missing) was introduced by 23e0e5ce (first released in 0.22.0) and is not an ancestor of v0.19.0. On trixie's Python 3.13 this version's sslcompat falls back to legacy_validate_callback, which compares the certificate commonName and raises on a mismatch; TSSLSocket uses PROTOCOL_SSLv23 (the PROTOCOL_TLS alias) with check_hostname off, so that callback is the check that runs. Verified with real handshakes against the built lib on Python 3.13.5: a certificate for "localhost" offered to a client expecting "wrong.example" is refused with the default ssl_version, with an explicit PROTOCOL_TLS (the upstream regression case) and with PROTOCOL_TLSv1_2, and TSSLServerSocket refuses a trusted client certificate issued for another identity. The same script against upstream v0.24.0's lib accepts both explicit-ssl_version mismatches, as the CVE describes. The fix d6782a87 restores a real matcher in sslcompat (code this version never lost) and turns on check_hostname for explicit-ssl_version contexts, which 0.19.0 does not need because open() always runs _validate_callback. Same reasoning as CVE-2026-66053.
Bulletin has no description...
ECHO-E672-55E9-2902
Bulletin has no description...