12055 matches found
ECHO-9290-B93D-4581
Bulletin has no description...
ECHO-6445-7D7C-0289
Bulletin has no description...
ECHO-56A4-40AE-0680
Bulletin has no description...
ECHO-39BC-1319-217C xdg-open launching a browser with a URL can cause SameSite=Strict cookies to be sent (browser treats it like typed navigation). The CVE record itself notes this is disputed: integrations of xdg-open typically do not convey whether the command was manually entered by the user, and distro/browser vendors treat mitigation as a browser CLI/"untrusted URL" concern rather than an xdg-utils code defect. Debian rates the issue unimportant and has no fixed version in any suite (including forky/sid). No upstream patch exists in xdg-utils; oss-security discussion (2025-06-23) recommended browser-side untrusted-mode flags first.
Bulletin has no description...
ECHO-581A-B1A0-1CC4
Bulletin has no description...
ECHO-CD9D-2394-E10E
Bulletin has no description...
ECHO-1B2E-BA53-A2B7 CVE-2020-27748 is fully addressed by the CVE-2022-4055 fix (already applied). The vulnerability existed in the run_thunderbird() function which parsed attach= parameters from mailto URIs. The CVE-2022-4055 patch (MR #58) completely removed run_thunderbird(), all Thunderbird detection/dispatch code, and the --attach CLI option. Since the entire vulnerable code surface has been deleted, CVE-2020-27748 cannot be exploited.
Bulletin has no description...
ECHO-7889-82B6-071E
Bulletin has no description...
ECHO-5E37-6BB1-4B05
Bulletin has no description...
ECHO-73F3-1173-C1CB
Bulletin has no description...
ECHO-04E2-597A-F713
Bulletin has no description...
ECHO-7DB2-03AA-5591
Bulletin has no description...
ECHO-C488-0C15-5961
Bulletin has no description...
ECHO-93CE-7F96-B607 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-BFDC-B6DF-D702 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-6DB1-1721-0288 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-1179-3EB1-5B56 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-4166-3833-E3A2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-C605-4F93-35FC Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-3F69-3D3C-78E5 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-B836-A6CD-E4E7 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E10D-8878-8638 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-3A29-239A-4DB2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-C19B-51A1-D3B1 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-A4D7-CE0F-6800 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-CCF2-3C59-98E6 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-B830-9BC8-D435 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E85B-79CE-CCC6 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-CC92-C6D1-DB6D Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-2EF8-B779-D669 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-6C06-5F6C-63C5 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-B99E-9A29-D77A Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-1BF8-6060-AD44 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-8589-8669-4601 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-A4F1-C472-FB32 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-8AF6-08DF-9473 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-F347-D7F5-EFD5 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-8752-7F5C-2930 CVE-2025-33219 is an integer overflow in the NVIDIA kernel module. Echo ships only userspace compatibility libraries (cuda-compat) via the cuda-13.1 package, not the kernel module. The vulnerable code path does not exist in the packages Echo distributes. Additionally, the installed version (590.48.01) is already at the fix threshold per NVIDIA Security Bulletin 5747. https://nvidia.custhelp.com/app/answers/detail/a_id/5747 https://security-tracker.debian.org/tracker/CVE-2025-33219
Bulletin has no description...
ECHO-D167-D9FF-F755
Bulletin has no description...
ECHO-EC6A-FA2D-8CAB
Bulletin has no description...
ECHO-35AF-8DFC-9FEE
Bulletin has no description...
ECHO-27F5-2176-4ABE
Bulletin has no description...
ECHO-0928-6C8A-5D18
Bulletin has no description...
ECHO-1C2D-1B31-8017 tar <no-dsa> (Hardly exploitable) https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5
Bulletin has no description...
ECHO-83BE-8121-5973 There is no information in the advisory about it except that it's related to CVE-2005-4890, which is fixed. https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 https://security-tracker.debian.org/tracker/CVE-2005-4890
Bulletin has no description...
ECHO-3DF5-A3A2-6763
Bulletin has no description...
ECHO-8C44-9B92-AAE4 Possible integer overflow issue in the BMP decoder. Will only affect 32-bit builds so not applicable. There is a fix that doesn't apply cleanly to our build because there is another patch to apply before it. Again it's irrelevant because the issue will only affect 32-bit builds. https://security-tracker.debian.org/tracker/CVE-2025-62171 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00
Bulletin has no description...
ECHO-743D-7093-1235
Bulletin has no description...