11305 matches found
ECHO-BC76-D5E9-1602 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-049F-A2B6-F5C3 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-1FEF-8BA5-F5E3 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-4B8F-D51C-29B8
Bulletin has no description...
ECHO-0D6F-7FBE-C7FA
Bulletin has no description...
ECHO-2EA7-D2C8-D549
Bulletin has no description...
ECHO-895D-0FCF-45BD
Bulletin has no description...
ECHO-5C3C-57C5-8FB2
Bulletin has no description...
ECHO-07B2-9E60-E1BA
Bulletin has no description...
ECHO-6486-9A91-3077
Bulletin has no description...
ECHO-B5E8-7A05-5B42
Bulletin has no description...
ECHO-428D-D3D6-1CC8
Bulletin has no description...
ECHO-6170-C952-1E0B
Bulletin has no description...
ECHO-84B2-B2CE-8A5F
Bulletin has no description...
ECHO-25F8-9743-35BB
Bulletin has no description...
ECHO-89C6-C3E9-D8D2
Bulletin has no description...
ECHO-F940-3352-DC67
Bulletin has no description...
ECHO-4E4C-B37E-F35F
Bulletin has no description...
ECHO-0B2F-27C4-24AA
Bulletin has no description...
ECHO-BC9C-5617-0A3C
Bulletin has no description...
ECHO-03EA-A4EB-03CB Heap out-of-bounds read during cleanup of the GSSAPI "auth-indicators" array (missing trailing NULL). This array is part of Red Hat's downstream GSSAPI authentication-indicators patch and is scoped by upstream to "Red Hat Enterprise Linux versions of OpenSSH". Echo builds from Debian openssh 1:10.4p1-1 (sid), which does not carry that patch: gss-serv.c, auth2-gss.c and gss-genr.c contain zero references to auth indicators, so the vulnerable code path is not present. Debian rates it undetermined/unimportant. https://security-tracker.debian.org/tracker/CVE-2026-55654 https://bugzilla.redhat.com/show_bug.cgi?id=2462493
Bulletin has no description...
ECHO-6DFE-B27A-9111 Local MITM of client-side X11 forwarding via abstract UNIX socket pre-binding, scoped by upstream to Red Hat Enterprise Linux OpenSSH clients. The vulnerable abstract-socket-first behavior is introduced by Red Hat's downstream openssh-7.2p2-x11.patch, which Debian does not carry: in the Debian openssh sources connect_local_xsocket() only connects to the filesystem-path X socket, and no debian/patches entry touches this code, so the vulnerable code path is not present. Debian rates it undetermined.
Bulletin has no description...
ECHO-B9F2-2C14-64AB
Bulletin has no description...
ECHO-F4DA-5CDF-F6C3
Bulletin has no description...
ECHO-C85B-77DD-0D28
Bulletin has no description...
ECHO-2791-8592-919C
Bulletin has no description...
ECHO-D1AC-9337-96AB
Bulletin has no description...
ECHO-3B67-4BD3-D8BE
Bulletin has no description...
ECHO-063C-9C61-C3D6
Bulletin has no description...
ECHO-E352-AA77-0D12
Bulletin has no description...
ECHO-7903-2043-8947
Bulletin has no description...
ECHO-00B6-A8A9-0340
Bulletin has no description...
ECHO-145E-CEA4-F440
Bulletin has no description...
ECHO-FD52-1A86-4159
Bulletin has no description...
ECHO-D43D-BAC8-84E2
Bulletin has no description...
ECHO-CBD2-A00B-644F
Bulletin has no description...
ECHO-E8F8-BB4B-0500
Bulletin has no description...
ECHO-E231-2B20-A715
Bulletin has no description...
ECHO-0DF6-8DE2-95BC
Bulletin has no description...
ECHO-54D5-BB21-6CD0
Bulletin has no description...
ECHO-CD40-334E-9AC0
Bulletin has no description...
ECHO-8FDA-FCF5-F272
Bulletin has no description...
ECHO-1461-C70A-6ADD
Bulletin has no description...
ECHO-5486-BD09-8414
Bulletin has no description...
ECHO-841C-3840-7470
Bulletin has no description...
ECHO-77AE-CE5F-D255
Bulletin has no description...
ECHO-9D3B-357F-1F8C
Bulletin has no description...
ECHO-71A9-4D38-B645 Integer overflow in the HTJ2K decoder (ht_undo_impl) leading to a heap-buffer-overflow. HTJ2K support (OpenEXRCore internal_ht.cpp / ht_undo_impl) was added in 3.4.0; affected range is 3.4.0-3.4.11. The codec does not exist in 3.1.x, so 3.1.13 is not affected (Debian reports only a fixed_version, not the affected range).
Bulletin has no description...
ECHO-D0FA-76AB-4B21 Heap-buffer-overflow READ in ht_undo_impl() via codestream/channel width mismatch in the HTJ2K decoder. HTJ2K support (OpenEXRCore internal_ht.cpp / ht_undo_impl) was added in 3.4.0; affected range is 3.4.0-3.4.11. The codec does not exist in 3.1.x, so 3.1.13 is not affected (Debian reports only a fixed_version, not the affected range).
Bulletin has no description...