12057 matches found
ECHO-4897-A3E3-018C
Bulletin has no description...
ECHO-B3DC-369A-A35E
Bulletin has no description...
ECHO-E857-6D70-7368
Bulletin has no description...
ECHO-131F-3301-69B0
Bulletin has no description...
ECHO-AED0-0ED6-0E6D
Bulletin has no description...
ECHO-D89C-9245-720B This vulnerability is considered negligible, and upstream maintainers stated a fix is impossible without breaking existing workflows. https://security-tracker.debian.org/tracker/CVE-2020-15778 https://github.com/cpandya2909/CVE-2020-15778
Bulletin has no description...
ECHO-E3B7-5995-8269 third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner. https://nvd.nist.gov/vuln/detail/CVE-2020-13092
Bulletin has no description...
ECHO-06E5-62CC-395F This issue has been fixed to the best ability of the maintainers by adjusting host key ordering to always use the default if the client has learned a hostkey matching the best-preference algorithm. Fixes beyond this are considered to reduce overall security by the maintainers. https://security-tracker.debian.org/tracker/CVE-2020-14145 https://docs.ssh-mitm.at/vulnerabilities/CVE-2020-14145.html
Bulletin has no description...
ECHO-701C-0998-5CEF This vulnerability is disputed by the openssh maintainers, and is considered expected behavior. As long as scp is used within trusted servers, this vulnerability should not affect the image. https://security-tracker.debian.org/tracker/CVE-2019-6110 https://lists.mindrot.org/pipermail/openssh-unix-dev/2019-January/037475.html
Bulletin has no description...
ECHO-B63D-A3C9-BA66
Bulletin has no description...
ECHO-765E-25A4-4A31 This vulnerability is disputed by the openssh maintainers. https://security-tracker.debian.org/tracker/CVE-2018-15919 https://www.openwall.com/lists/oss-security/2018/08/24/1 https://www.openwall.com/lists/oss-security/2018/08/27/2
Bulletin has no description...
ECHO-9070-2F4F-EBC3 The CVE is disputed by upstream. It's part of 3 similar cve's, which are disputed by this article: https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf The guy who wrote the article also provides patches, 2 of them are in upstream, 3rd one only on his site. One of the patches does not completely solve it's cve (CVE-2023-31438). We should consider this not applicable in the meantime and come back to it later. https://security-tracker.debian.org/tracker/CVE-2023-31438 https://nvd.nist.gov/vuln/detail/CVE-2023-31438 https://github.com/systemd/systemd/pull/28886
Bulletin has no description...
ECHO-9A90-0CDD-D9C7 The CVE is disputed by upstream. Its part of 3 similar cve's, which are disputed by this article: https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf The guy who wrote the article also provides patches, 2 of them are in upstream, 3rd one only on his site. One of the patches does not completely solve its cve (CVE-2023-31438). We should consider this not applicable in the meantime and come back to it later. https://security-tracker.debian.org/tracker/CVE-2023-31437 https://nvd.nist.gov/vuln/detail/CVE-2023-31437
Bulletin has no description...
ECHO-BDD2-C207-BEF2 The CVE is disputed by upstream. It's part of 3 similar cve's, which are disputed by this article: https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf The guy who wrote the article also provides patches, 2 of them are in upstream, 3rd one only on his site. One of the patches does not completely solve it's cve (CVE-2023-31438). We should consider this not applicable in the meantime and come back to it later. https://security-tracker.debian.org/tracker/CVE-2023-31439 https://nvd.nist.gov/vuln/detail/CVE-2023-31439 https://github.com/systemd/systemd/pull/28885
Bulletin has no description...
ECHO-776A-C85C-3DA5 This vulnerability is only applicable in scenarios in which a terminal emulator with improper handling of escape codes; Terminal emulators in Echo's images employ proper escaping and sanitization to mitigate such risks. https://ubuntu.com/security/CVE-2018-1000021#notes https://security-tracker.debian.org/tracker/CVE-2018-1000021
Bulletin has no description...
ECHO-9410-1B2D-191E
Bulletin has no description...
ECHO-189B-1DA3-C996
Bulletin has no description...
ECHO-195A-A2DE-FF9A This vulnerability is disputed by the opensh maintainers and is considered expected behavior. https://security-tracker.debian.org/tracker/CVE-2016-20012 https://github.com/openssh/openssh-portable/pull/270 https://www.openwall.com/lists/oss-security/2018/08/24/1
Bulletin has no description...
ECHO-B55C-210A-6F81 Only relevant to systems running systemd along with selinux. https://security-tracker.debian.org/tracker/CVE-2013-4392 can be verified using the following command: ls /sys/fs/selinux If the directory does not exist, then selinux is not enabled. cat /proc/1/comm If the output is not systemd, then selinux is not enabled.
Bulletin has no description...
ECHO-FA5B-6CEC-3E77 the cve is dependent on LOG_UNKFAIL_ENAB in login.defs being no, which is not the default. https://security-tracker.debian.org/tracker/CVE-2007-5686 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=290803
Bulletin has no description...
ECHO-003F-2632-599C This vulnerability is disputed by the openssh maintainers, and is considered expected and necessary behavior. https://security-tracker.debian.org/tracker/CVE-2008-3234 https://access.redhat.com/security/cve/cve-2008-3234
Bulletin has no description...
ECHO-29CA-E62D-EEC0 This vulnerability is disputed by the git maintainers, and is considered expected and necessary behavior. https://lore.kernel.org/git/xmqq4k14qe9g.fsf%40gitster.g/ https://security-tracker.debian.org/tracker/CVE-2022-24975
Bulletin has no description...
ECHO-DF10-54DF-BA97 This vulnerability is not applicable as Echo images do not ship with libraries enabling S/KEY or OPIE authentication. https://security-tracker.debian.org/tracker/CVE-2007-2768 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=112279
Bulletin has no description...
ECHO-D342-7C67-297F This vulnerability is not applicable as Echo images do not ship with libraries enabling S/KEY or OPIE authentication. https://security-tracker.debian.org/tracker/CVE-2007-2243 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=436571
Bulletin has no description...
ECHO-A597-344D-59BE This is intended behaviour https://security-tracker.debian.org/tracker/CVE-2005-2541
Bulletin has no description...
ECHO-2892-A22F-F2D5 That's a policy violation, but not a security problem
Bulletin has no description...
ECHO-7300-0DF7-EF21
Bulletin has no description...
ECHO-29D0-BE66-1D36
Bulletin has no description...
ECHO-2C1D-6266-FCE5
Bulletin has no description...
ECHO-DECB-8594-A95C
Bulletin has no description...
ECHO-273B-FD6D-3AFE
Bulletin has no description...
ECHO-CC02-A477-2575
Bulletin has no description...
ECHO-5566-E5F1-09D5
Bulletin has no description...
ECHO-6AF9-FC0C-2334
Bulletin has no description...
ECHO-9546-A6BF-A698
Bulletin has no description...
ECHO-546D-3185-0D21
Bulletin has no description...
ECHO-6086-BF4F-3673
Bulletin has no description...
ECHO-C0A9-4423-AA59
Bulletin has no description...
ECHO-44C5-A0A5-783A
Bulletin has no description...
ECHO-F24E-40E5-BA8E
Bulletin has no description...
ECHO-4D87-77FE-13DC
Bulletin has no description...
ECHO-CF28-0EB1-0DB4
Bulletin has no description...
ECHO-9A35-993C-321E Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-B67F-2D5B-3AA3 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-C174-AB42-F783 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-45C0-9CD6-B1BD Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-7676-32A6-DC30 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
ECHO-DC50-EFE7-D2B4 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...