11209 matches found
ECHO-F93C-A222-1D5F
Bulletin has no description...
ECHO-1B69-DA77-CF10
Bulletin has no description...
ECHO-596C-E319-C555
Bulletin has no description...
ECHO-2762-76FB-9BB0
Bulletin has no description...
ECHO-6169-5CD8-C8E3
Bulletin has no description...
ECHO-8EF5-F166-2C7C
Bulletin has no description...
ECHO-7713-E30D-2172
Bulletin has no description...
ECHO-0FB2-7321-1CCF
Bulletin has no description...
ECHO-DE4E-A8B3-75FF
Bulletin has no description...
ECHO-BC31-8F22-CDD1
Bulletin has no description...
ECHO-0DCB-59D0-C54E
Bulletin has no description...
ECHO-9007-A803-F9BE
Bulletin has no description...
ECHO-0CF8-801A-4D33
Bulletin has no description...
ECHO-42AA-021E-F029
Bulletin has no description...
ECHO-6344-F98F-134D
Bulletin has no description...
ECHO-0E98-3AE9-088F
Bulletin has no description...
ECHO-711A-0C08-CC2A
Bulletin has no description...
ECHO-DF47-6FEB-99C5
Bulletin has no description...
ECHO-C5BC-F0E3-77A6
Bulletin has no description...
ECHO-6434-F033-74EC
Bulletin has no description...
ECHO-99E3-A778-74DF
Bulletin has no description...
ECHO-4250-102D-5ACC
Bulletin has no description...
ECHO-98F3-0922-9FC4
Bulletin has no description...
ECHO-9B5E-AF86-3789
Bulletin has no description...
ECHO-A985-43D5-9A0C GHSA-r44j-crv5-q35m / NVD's own CPE match pins this to the single exact version percona-toolkit:3.6.0, with no version range -- the advisory is "unreviewed" and carries no upper bound, so CPE-based scanners (Trivy/Grype/Wiz) treat it as affecting every later version too. The vulnerable code (weak SHA-256-as-KDF password hashing in src/go/pt-secure-collect/encrypt.go) was replaced with a proper HKDF derivation upstream in commit 78f20304 ("Use KDF instead of hash"), first shipped in v3.7.0 and present in our v3.7.1 build. Independent of the version question, this package never builds pt-secure-collect at all -- only pt-online-schema-change (a separate Perl tool); the build step explicitly drops the manifypods->gotools coupling so Go tools are never compiled.
Bulletin has no description...
ECHO-A2CC-0616-7D9C
Bulletin has no description...
ECHO-D9AC-EE9E-FEE7
Bulletin has no description...
ECHO-2659-0BA9-3FC9
Bulletin has no description...
ECHO-71BA-BFE4-F745
Bulletin has no description...
ECHO-B635-0855-4184
Bulletin has no description...
ECHO-0047-EC7B-FCBF
Bulletin has no description...
ECHO-DF6C-93A8-A05F
Bulletin has no description...
ECHO-8EA0-BEC4-5690
Bulletin has no description...
ECHO-EFCB-3DC7-0E3A
Bulletin has no description...
ECHO-7E7A-642B-3D93
Bulletin has no description...
ECHO-1BEC-B363-184F
Bulletin has no description...
ECHO-12EC-6DE8-9D31
Bulletin has no description...
ECHO-35B6-EE31-5332
Bulletin has no description...
ECHO-D50A-B210-0B96
Bulletin has no description...
ECHO-5D31-5398-16AE
Bulletin has no description...
ECHO-0552-974E-A56F
Bulletin has no description...
ECHO-8A61-4F63-3D4E
Bulletin has no description...
ECHO-4763-5F2E-D077
Bulletin has no description...
ECHO-CB32-BF12-247B
Bulletin has no description...
ECHO-7A2E-CB2B-130A
Bulletin has no description...
ECHO-DE4D-FF42-A260
Bulletin has no description...
ECHO-5709-3ABA-FE4F
Bulletin has no description...
ECHO-F8BD-4FBE-2661
Bulletin has no description...