11331 matches found
ECHO-7AEA-0124-6D6E
Bulletin has no description...
ECHO-9D25-083F-FEDF
Bulletin has no description...
ECHO-2778-15A6-FCFA
Bulletin has no description...
ECHO-3073-2AB6-F3CE Lua-only: readMessageBegin skips checkStringSize on the pre-versioned name. Built with --without-lua; no Lua binary package is produced.
Bulletin has no description...
ECHO-EEB1-DF32-DBAA The vulnerable code postdates this version. The Python >= 3.12 no-op host-name matcher (sslcompat returning True when ssl.match_hostname is missing) was introduced by 23e0e5ce (first released in 0.22.0) and is not an ancestor of v0.19.0. On trixie's Python 3.13 this version's sslcompat falls back to legacy_validate_callback, which compares the certificate commonName and raises on a mismatch; TSSLSocket uses PROTOCOL_SSLv23 (the PROTOCOL_TLS alias) with check_hostname off, so that callback is the check that runs. Verified with real handshakes against the built lib on Python 3.13.5: a certificate for "localhost" offered to a client expecting "wrong.example" is refused with the default ssl_version, with an explicit PROTOCOL_TLS (the upstream regression case) and with PROTOCOL_TLSv1_2, and TSSLServerSocket refuses a trusted client certificate issued for another identity. The same script against upstream v0.24.0's lib accepts both explicit-ssl_version mismatches, as the CVE describes. The fix d6782a87 restores a real matcher in sslcompat (code this version never lost) and turns on check_hostname for explicit-ssl_version contexts, which 0.19.0 does not need because open() always runs _validate_callback. Same reasoning as CVE-2026-66053.
Bulletin has no description...
ECHO-E672-55E9-2902
Bulletin has no description...
ECHO-8BAA-DAFF-36FE
Bulletin has no description...
ECHO-E235-B9B4-8385 Vulnerability is in GPU firmware (GSP / secure microcontroller), loaded by the host kernel driver. Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-3E27-9E15-144D Vulnerability is in the NVIDIA kernel-mode driver (nvidia.ko / open kernel module). Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-3A4D-FFED-6797 Vulnerability is in the NVIDIA kernel-mode driver (nvidia.ko / open kernel module). Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-5492-F891-89CB Vulnerability is in the NVIDIA kernel-mode driver (nvidia.ko / open kernel module). Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-B913-E78F-E9DE Vulnerability is in the NVIDIA kernel-mode driver (nvidia.ko / open kernel module). Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-683C-E218-E8FE Vulnerability is in the NVIDIA kernel-mode driver (nvidia.ko / open kernel module). Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Bulletin has no description...
ECHO-345E-0640-D812
Bulletin has no description...
ECHO-8FC6-205E-57A2
Bulletin has no description...
ECHO-DCDC-4FD6-A372
Bulletin has no description...
ECHO-66B7-0F22-7B10
Bulletin has no description...
ECHO-6459-65B4-6F8C
Bulletin has no description...
ECHO-F203-775A-EDAA
Bulletin has no description...
ECHO-7D38-76D0-5832
Bulletin has no description...
ECHO-D686-0FEA-E603
Bulletin has no description...
ECHO-208B-D6B3-DFB9
Bulletin has no description...
ECHO-48D4-6D76-5430
Bulletin has no description...
ECHO-B7B3-43E2-69FF
Bulletin has no description...
ECHO-E485-5B9D-E4BC
Bulletin has no description...
ECHO-1323-54F5-145D
Bulletin has no description...
ECHO-B37C-7C95-FABF
Bulletin has no description...
ECHO-C315-AE5B-F1BE
Bulletin has no description...
ECHO-4E48-DDC2-288C
Bulletin has no description...
ECHO-96F7-2B0E-5704
Bulletin has no description...
ECHO-DE50-284B-655F
Bulletin has no description...
ECHO-12DE-2DCA-D7DC
Bulletin has no description...
ECHO-3D2B-DE07-3BBE
Bulletin has no description...
ECHO-0030-65EC-F55D
Bulletin has no description...
ECHO-9169-1FD9-0C1C
Bulletin has no description...
ECHO-744A-B1B6-3B08
Bulletin has no description...
ECHO-B02A-9509-4828
Bulletin has no description...
ECHO-29A1-0646-4AEF
Bulletin has no description...
ECHO-D3CF-A68B-8D46
Bulletin has no description...
ECHO-69D8-1D7C-AC7F
Bulletin has no description...
ECHO-557D-8CB5-1D2E
Bulletin has no description...
ECHO-8340-2DF2-4096
Bulletin has no description...
ECHO-541C-D60F-BECF
Bulletin has no description...
ECHO-0AB6-B517-EA67
Bulletin has no description...
ECHO-25C0-43EF-F653
Bulletin has no description...
ECHO-B395-A7AB-D901
Bulletin has no description...
ECHO-BED1-5E00-330D
Bulletin has no description...
ECHO-A10B-DD74-A1AF
Bulletin has no description...