[SECURITY] Fedora 41 Update: suricata-7.0.8-1.fc41

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

CISA: Suspicious UAS Identification Poster

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Suspicious UAS Identification Postcard

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CVE-2024-57877

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NTARMPOE Currently poeset doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will b...

CVE-2024-57876

In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request sideband message, the drmdpmsttopologymgr::upreqrecv/downreprecv states could...

CVE-2024-57872 scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: pltfrm: Dellocate HBA during ufshcdpltfrmremove This will ensure that the scsi host is cleaned up properly using scsihostdevrelease. Otherwise, it may lead to memory leaks...

CVE-2024-57838

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

CVE-2024-55881

creationtimestamp| type| source ---|---|--- 2025-01-11 13:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5rvfru25 2025-01-11 13:44:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtoclm4m2h 2025-01-11 14:55:25+00:00| seen|...

CVE-2024-47408

In the Linux kernel, the following vulnerability has been resolved: net/smc: check smcdv2extoffset when receiving proposal msg When receiving proposal msg in server, the field smcdv2extoffset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcdv2extoffset...

CVE-2024-52319

creationtimestamp| type| source ---|---|--- 2025-01-11 13:06:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1309 2025-01-11 13:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs4jcswb22...

CVE-2024-54455

creationtimestamp| type| source ---|---|--- 2025-01-11 13:06:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1306 2025-01-11 13:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5blbot2f...

CVE-2024-57793

creationtimestamp| type| source ---|---|--- 2025-01-11 13:06:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1300 2025-01-11 13:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6emaiw2k 2025-01-11 14:55:17+00:00| seen|...

CVE-2024-53680

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for...

CVE-2024-42171

creationtimestamp| type| source ---|---|--- 2025-01-11 07:04:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1274 2025-01-11 07:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfh5wwwime22 2025-01-11 07:48:59+00:00| seen|...

CVE-2025-23109

creationtimestamp| type| source ---|---|--- 2025-01-11 03:43:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113807654396857326 2025-01-11 04:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgtv3mhqx2d 2025-01-11 04:43:46+00:00| seen|...

CVE-2025-0105

creationtimestamp| type| source ---|---|--- 2025-01-11 03:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgql6ldlp2l 2025-01-11 04:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta4ld372w 2025-01-11 04:04:05+00:00| seen|...

CVE-2024-12505

creationtimestamp| type| source ---|---|--- 2025-01-11 02:58:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113807478184539528 2025-01-11 03:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1261 2025-01-11 03:15:59+00:00| seen|...

openSUSE: Security Advisory for gstreamer (SUSE-SU-2025:0069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-9188 Specially constructed queries cause cross platform scripting leaking administrator tokens

Specially constructed queries cause cross platform scripting leaking administrator tokens...

CVE-2024-47520

Summary of CVE-2024-47520 (Arista NGFW/ETM): A user with advanced reporting application access rights can perform actions beyond authorization. Documented as part of Arista Security Advisory 0105, the issue is tied to the reporting component and allows privilege misuse by users with limited admin...