11209 matches found
ECHO-0491-17C2-E2EB
Bulletin has no description...
ECHO-3143-27BF-6FFE
Bulletin has no description...
ECHO-67D9-CC7B-91B4
Bulletin has no description...
ECHO-D6CD-CD8E-DA88
Bulletin has no description...
ECHO-3CC9-F4C3-075B
Bulletin has no description...
ECHO-A7A1-BDCD-AE94
Bulletin has no description...
ECHO-FC12-8CFC-86BD
Bulletin has no description...
ECHO-B895-01C2-E619
Bulletin has no description...
ECHO-BF99-96EE-AF6B
Bulletin has no description...
ECHO-54D2-F1B2-3225
Bulletin has no description...
ECHO-0686-51D9-9B76
Bulletin has no description...
ECHO-E2EA-59E2-C0ED
Bulletin has no description...
ECHO-919A-A239-AE70
Bulletin has no description...
ECHO-BCEA-B2C1-C923
Bulletin has no description...
ECHO-4B42-7181-AE02
Bulletin has no description...
ECHO-6EBB-9F48-FA3F
Bulletin has no description...
ECHO-8F2B-52FE-E862
Bulletin has no description...
ECHO-F3AD-64AF-B0A6
Bulletin has no description...
ECHO-EA76-3334-496A
Bulletin has no description...
ECHO-C41C-0D0A-92AD Low-severity (CVSS 3.1 2.5, CWE-754, Debian "unimportant") error-reporting quirk: 7-Zip 22.01 silently returns OK for an xz file with reserved bits set in the stream flags instead of flagging it. No memory-safety impact. NVD's affected-version data is pinned to exactly 22.01 and states "Some later versions are unaffected"; remediated upstream by version currency, not by a separate patch, so there is nothing to backport. Verified against the reporter's PoC (boofish/semantic-bugs pocs/poc2.xz) on this build's 25.01 binaries: the standalone 7za/7zr hard-error (exit 2, "Is not archive") and 7zz/7z no longer silently accept it (now emit "Warnings: 1"), so the reported silent-acceptance behavior does not reproduce.
Bulletin has no description...
ECHO-358C-A231-063B
Bulletin has no description...
ECHO-3114-E2A8-C7CD
Bulletin has no description...
ECHO-4F58-A58D-8E80
Bulletin has no description...
ECHO-EEFB-B682-DC9B Low-severity (CVSS 3.1 2.5, CWE-754, Debian "unimportant") error-reporting quirk: 7-Zip 22.01 silently returns OK for an xz file with reserved bits set in the block flags instead of flagging it. No memory-safety impact. NVD's affected-version data is pinned to exactly 22.01 and states "Some later versions are unaffected"; remediated upstream by version currency, not by a separate patch, so there is nothing to backport. Verified against the reporter's PoC (boofish/semantic-bugs pocs/poc1.xz) on this build's 25.01 binaries: the standalone 7za/7zr hard-error (exit 2, "Is not archive") and 7zz/7z no longer silently accept it (now emit "Warnings: 1"), so the reported silent-acceptance behavior does not reproduce.
Bulletin has no description...
ECHO-5AA5-E5E2-E8EE
Bulletin has no description...
ECHO-7B47-8F62-C1EF
Bulletin has no description...
ECHO-F5E5-F521-DDD7
Bulletin has no description...
ECHO-2815-A409-45DA
Bulletin has no description...
ECHO-EBB4-90FC-823E
Bulletin has no description...
ECHO-A259-9BA0-438C
Bulletin has no description...
ECHO-6187-52BC-032F
Bulletin has no description...
ECHO-853A-6A0E-121B
Bulletin has no description...
ECHO-05DF-8BBF-FF45
Bulletin has no description...
ECHO-FD3C-4E33-381C
Bulletin has no description...
ECHO-53F2-3303-E31B Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E02F-8060-F000 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-CA58-2059-36E1 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-FC0E-CA5A-02AC
Bulletin has no description...
ECHO-9E9B-2656-EC45
Bulletin has no description...
ECHO-DCB3-F5F0-1F95
Bulletin has no description...
ECHO-E174-EE41-E2AE
Bulletin has no description...
ECHO-638F-24BB-6848
Bulletin has no description...
ECHO-B2EC-DE08-80F1
Bulletin has no description...
ECHO-5860-4D3A-E18C
Bulletin has no description...
ECHO-3DF1-1EAF-4827
Bulletin has no description...
ECHO-622E-26D9-8299 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-4AC7-1B21-4254 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-6728-A303-47FD
Bulletin has no description...