11305 matches found
ECHO-55FD-88F7-34CB
Bulletin has no description...
ECHO-A21C-C0F3-6D03
Bulletin has no description...
ECHO-0245-1475-7EF2
Bulletin has no description...
ECHO-8B75-128B-8EBD
Bulletin has no description...
ECHO-E3F8-3A4C-2238
Bulletin has no description...
ECHO-F408-762A-D587
Bulletin has no description...
ECHO-855F-2128-6E3E
Bulletin has no description...
ECHO-2628-E128-A8C1
Bulletin has no description...
ECHO-F007-0D0A-0B78
Bulletin has no description...
ECHO-F142-D9D7-0563
Bulletin has no description...
ECHO-7790-2EA8-7D0B
Bulletin has no description...
ECHO-3D78-4B3B-0A59
Bulletin has no description...
ECHO-B91C-97C9-B93D
Bulletin has no description...
ECHO-B709-48C4-0C80 The CVE reports that cJSONUtils_ApplyPatches() mutates the target when a patch fails part-way, "defeating the all-or-nothing behavior callers rely on". cJSON never offers that guarantee: cJSON_Utils.h documents "Note that ApplyPatches is NOT atomic on failure" and gives the Duplicate-then-swap recipe for callers that need atomicity. No memory-safety impact; the behaviour is the documented API contract. Upstream has not commented and Debian lists it unfixed with no fix in any suite.
Bulletin has no description...
ECHO-29EF-6520-8114
Bulletin has no description...
ECHO-A8FE-5BD2-DFA4
Bulletin has no description...
ECHO-C721-9C49-EC13
Bulletin has no description...
ECHO-5A4D-F9A3-722E
Bulletin has no description...
ECHO-2327-9760-E268 Claimed out-of-bounds write in dlx_rtype_to_howto() (bfd/elf32-dlx.c), reached from elf32_dlx_info_to_howto_rel() via the relocation type of a crafted ELF/DLX object. The DLX backend is not built. dlx_elf32_be_vec is selected only by the dlx-*-elf target triple (bfd/config.bfd), and that vec is the sole trigger for compiling elf32-dlx.lo (bfd/configure.ac); debian/rules passes an explicit per-architecture --enable-targets list and never --enable-targets=all. Verified against the shipped amd64 and arm64 debs: libbfd exports no dlx symbols, `objdump -b elf32-dlx` returns "invalid bfd target", `ld -m elf32dlx` is an unrecognised emulation, and a crafted EM_DLX (0x5aa5) object carrying relocation types past the end of the howto table is claimed by the generic elf32-big backend, which reports "architecture: UNKNOWN!" and every relocation as UNKNOWN. The function is never entered. Note that readelf prints DLX machine and relocation names from its own tables, independent of BFD, so its output is not evidence of the backend being present. Upstream also rejects the finding on its merits, even with DLX enabled. On the Red Hat bug that Debian's tracker carries as its only reference, maintainer Andrew Burgess concludes "I don't believe that this is actually a bug": DLX relocation types are a contiguous 0-9, not the non-contiguous space with extended types at 0x10000+ that the advisory describes; dlx_rtype_to_howto() already rejects r_type >= R_DLX_max (10); and types 6-9 have their own case arms, so the indexed access can only ever reach 0-5 of the 6-entry dlx_elf_howto_table. Patrick Monnerat adds that the advisory claims an out-of-bounds write while the procedure performs no indexed write at all. Both observations hold against the 2.45.50.20251201 source. Debian marks it unimportant (binutils not covered by security support) and ships no fix in any suite including forky/sid, so there is nothing to bump.
Bulletin has no description...
ECHO-7B00-1C82-CBFB
Bulletin has no description...
ECHO-8E1B-B2A9-C26D
Bulletin has no description...
ECHO-5D3C-0210-C193
Bulletin has no description...
ECHO-AF9C-763E-6A2B
Bulletin has no description...
ECHO-2055-6C03-D4B2
Bulletin has no description...
ECHO-F126-0745-5489
Bulletin has no description...
ECHO-ADAB-4650-FA5E
Bulletin has no description...
ECHO-B4F7-133A-6293
Bulletin has no description...
ECHO-57C1-ADEA-B0BF
Bulletin has no description...
ECHO-4DF1-D3CB-67CA
Bulletin has no description...
ECHO-AE6A-CB56-09E6
Bulletin has no description...
ECHO-166A-43F5-1C18
Bulletin has no description...
ECHO-BB87-47C0-0473
Bulletin has no description...
ECHO-6E23-CE84-C852
Bulletin has no description...
ECHO-08E8-B5D5-DBA7
Bulletin has no description...
ECHO-D2AD-9332-96C9
Bulletin has no description...
ECHO-9710-769A-B90B
Bulletin has no description...
ECHO-8C91-0553-6384
Bulletin has no description...
ECHO-94C1-7EED-D5A9
Bulletin has no description...
ECHO-23C9-2F44-73C2 Integer overflow of the escape_characters counter in print_string_ptr() (cJSON.c). The counter is a size_t and the wrap needs ~858,993,460 control characters, i.e. a 32-bit size_t; the CVE text itself limits it to 32-bit platforms. Echo builds cjson only for amd64 and arm64, where size_t is 64-bit and the overflow cannot occur. There is no upstream fix to carry. Refs: - https://security-tracker.debian.org/tracker/CVE-2026-16554 - https://cert.pl/en/posts/2026/07/CVE-2026-16554 details: | Same reasoning as libssh2 CVE-2026-58050: 32-bit-only arithmetic overflow, Echo ships 64-bit builds only. Re-evaluate if a 32-bit architecture is ever added to this spec.
Bulletin has no description...
ECHO-A285-B836-7FDB
Bulletin has no description...
ECHO-4FC2-90C7-AFE0
Bulletin has no description...
ECHO-11D6-76D1-7D99
Bulletin has no description...
ECHO-849D-6AAD-CE1B
Bulletin has no description...
ECHO-C880-B373-2EDD Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-3B36-2D36-ACBD
Bulletin has no description...
ECHO-EE46-3CFC-BDEA
Bulletin has no description...
ECHO-5865-D06C-84B7
Bulletin has no description...
ECHO-3E75-4E47-1525
Bulletin has no description...