[SECURITY] [DSA 5836-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2024 https://www.debian.org/security/faq -...

CVE-2024-47148

creationtimestamp| type| source ---|---|--- 2024-12-26 12:07:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113719038894686088 2024-12-26 12:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le7halueoj2i 2024-12-26 14:03:48+00:00| seen|...

CVE-2024-12942

creationtimestamp| type| source ---|---|--- 2024-12-26 08:01:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113718072802078139 2024-12-26 08:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztflwyg2o 2024-12-26 09:52:56+00:00| seen|...

CVE-2024-12931

creationtimestamp| type| source ---|---|--- 2024-12-26 02:52:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113716859337895197 2024-12-26 03:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3t4mti2c 2024-12-26 04:51:56+00:00| seen|...

CVE-2024-1609

creationtimestamp| type| source ---|---|--- 2024-12-25 03:39:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113711379006140273 2024-12-25 04:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xrcewt2l 2024-12-25 06:17:23+00:00| seen|...

Mageia: Security Advisory (MGASA-2024-0397)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-56430

OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp...

CVE-2019-2483

...

CVE-2024-53162

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read...

CVE-2024-53152

creationtimestamp| type| source ---|---|--- 2024-12-24 11:49:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113707645609849060 2024-12-24 12:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2gdj4p3i2c 2024-12-24 14:24:24+00:00| seen|...

CVE-2024-53149 usb: typec: ucsi: glink: fix off-by-one in connector_status

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-53241

creationtimestamp| type| source ---|---|--- 2024-12-24 09:43:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113707151082355360 2024-12-24 10:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le27mmbjti2e 2024-12-24 11:53:39+00:00| seen|...

CVE-2024-12850

creationtimestamp| type| source ---|---|--- 2024-12-24 09:28:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113707092053678320 2024-12-24 10:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le27meyl7h2k 2024-12-24 11:53:39+00:00| seen|...

CVE-2024-9427

creationtimestamp| type| source ---|---|--- 2024-12-24 04:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzliem3642m 2024-12-24 06:02:15+00:00| seen| https://t.me/cvedetector/13550 2025-06-11 00:34:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18031...

CVE-2024-56363

creationtimestamp| type| source ---|---|--- 2024-12-23 17:28:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113703315103089292 2024-12-23 20:00:28+00:00| seen| https://t.me/cvedetector/13547...

CVE-2024-55539

Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent Linux before build 39185, Acronis Cyber Protect 16 Linux before build 39938...

CVE-2024-12902

creationtimestamp| type| source ---|---|--- 2024-12-23 10:28:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113701665986684770 2024-12-23 11:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldxsiluiq425 2024-12-23 13:19:09+00:00| seen|...

CVE-2024-55947

creationtimestamp| type| source ---|---|--- 2024-12-23 02:35:41+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg 2024-12-23 15:30:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113702851146280575 2024-12-23 18:20:00+00:00| seen|...

CVE-2024-12893

creationtimestamp| type| source ---|---|--- 2024-12-22 08:01:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113695425480271204 2024-12-22 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxw7mx325 2024-12-22 09:43:32+00:00| seen|...

CVE-2024-11349

creationtimestamp| type| source ---|---|--- 2024-12-21 04:32:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113688938401502566 2024-12-21 05:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h3c6q222 2024-12-21 06:58:13+00:00| seen|...