ZDI-24-1381: Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability

Read Time:17 Second

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-9730.

Read More

ZDI-24-1335: SonicWALL Connect Tunnel Link Following Denial-of-Service Vulnerability

Read Time:18 Second

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of SonicWALL Connect Tunnel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2024-45315.

Read More

rust-hyper-rustls-0.27.3-1.fc39 rust-reqwest-0.12.8-1.fc39 rust-rustls-native-certs-0.8.0-1.fc39 rust-rustls-native-certs0.7-0.7.3-1.fc39 rust-tonic-0.12.3-1.fc39 rust-tonic-build-0.12.3-1.fc39 rust-tonic-types-0.12.3-1.fc39 rust-tower-0.5.1-1.fc39 rust-tower-http-0.6.1-1.fc39 rust-tower-http0.5-0.5.2-1.fc39 rust-tower0.4-0.4.13-1.fc39

Read Time:57 Second

FEDORA-2024-ff98facbc6

Packages in this update:

rust-hyper-rustls-0.27.3-1.fc39
rust-reqwest-0.12.8-1.fc39
rust-rustls-native-certs0.7-0.7.3-1.fc39
rust-rustls-native-certs-0.8.0-1.fc39
rust-tonic-0.12.3-1.fc39
rust-tonic-build-0.12.3-1.fc39
rust-tonic-types-0.12.3-1.fc39
rust-tower0.4-0.4.13-1.fc39
rust-tower-0.5.1-1.fc39
rust-tower-http0.5-0.5.2-1.fc39
rust-tower-http-0.6.1-1.fc39

Update description:

Update the hyper-rustls crate to version 0.27.3.
Update the reqwest crate to version 0.12.8.
Update the rustls-native-certs crate to version 0.8.0 and add a compat package for version 0.7.
Update the tonic, tonic-build, and tonic-types crates to version 0.12.3.
Update the tower crate to version 0.5.1 and add a compat package for version 0.4.
Update the tower-http crate to version 0.6.1 and add a compat package for version 0.5.

Read More

rust-hyper-rustls-0.27.3-1.fc40 rust-reqwest-0.12.8-1.fc40 rust-rustls-native-certs-0.8.0-1.fc40 rust-rustls-native-certs0.7-0.7.3-1.fc40 rust-tonic-0.12.3-1.fc40 rust-tonic-build-0.12.3-1.fc40 rust-tonic-types-0.12.3-1.fc40 rust-tower-0.5.1-1.fc40 rust-tower-http-0.6.1-1.fc40 rust-tower-http0.5-0.5.2-1.fc40 rust-tower0.4-0.4.13-1.fc40

Read Time:57 Second

FEDORA-2024-bf524bf5c0

Packages in this update:

rust-hyper-rustls-0.27.3-1.fc40
rust-reqwest-0.12.8-1.fc40
rust-rustls-native-certs0.7-0.7.3-1.fc40
rust-rustls-native-certs-0.8.0-1.fc40
rust-tonic-0.12.3-1.fc40
rust-tonic-build-0.12.3-1.fc40
rust-tonic-types-0.12.3-1.fc40
rust-tower0.4-0.4.13-1.fc40
rust-tower-0.5.1-1.fc40
rust-tower-http0.5-0.5.2-1.fc40
rust-tower-http-0.6.1-1.fc40

Update description:

Update the hyper-rustls crate to version 0.27.3.
Update the reqwest crate to version 0.12.8.
Update the rustls-native-certs crate to version 0.8.0 and add a compat package for version 0.7.
Update the tonic, tonic-build, and tonic-types crates to version 0.12.3.
Update the tower crate to version 0.5.1 and add a compat package for version 0.4.
Update the tower-http crate to version 0.6.1 and add a compat package for version 0.5.

Read More

rust-hyper-rustls-0.27.3-1.fc41 rust-reqwest-0.12.8-1.fc41 rust-rustls-native-certs-0.8.0-1.fc41 rust-rustls-native-certs0.7-0.7.3-1.fc41 rust-tonic-0.12.3-1.fc41 rust-tonic-build-0.12.3-1.fc41 rust-tonic-types-0.12.3-1.fc41 rust-tower-0.5.1-1.fc41 rust-tower-http-0.6.1-1.fc41 rust-tower-http0.5-0.5.2-1.fc41 rust-tower0.4-0.4.13-1.fc41

Read Time:57 Second

FEDORA-2024-347164df1c

Packages in this update:

rust-hyper-rustls-0.27.3-1.fc41
rust-reqwest-0.12.8-1.fc41
rust-rustls-native-certs0.7-0.7.3-1.fc41
rust-rustls-native-certs-0.8.0-1.fc41
rust-tonic-0.12.3-1.fc41
rust-tonic-build-0.12.3-1.fc41
rust-tonic-types-0.12.3-1.fc41
rust-tower0.4-0.4.13-1.fc41
rust-tower-0.5.1-1.fc41
rust-tower-http0.5-0.5.2-1.fc41
rust-tower-http-0.6.1-1.fc41

Update description:

Update the hyper-rustls crate to version 0.27.3.
Update the reqwest crate to version 0.12.8.
Update the rustls-native-certs crate to version 0.8.0 and add a compat package for version 0.7.
Update the tonic, tonic-build, and tonic-types crates to version 0.12.3.
Update the tower crate to version 0.5.1 and add a compat package for version 0.4.
Update the tower-http crate to version 0.6.1 and add a compat package for version 0.5.

Read More

rust-hyper-rustls-0.27.3-1.fc42 rust-reqwest-0.12.8-1.fc42 rust-rustls-native-certs-0.8.0-1.fc42 rust-rustls-native-certs0.7-0.7.3-1.fc42 rust-tonic-0.12.3-1.fc42 rust-tonic-build-0.12.3-1.fc42 rust-tonic-types-0.12.3-1.fc42 rust-tower-0.5.1-1.fc42 rust-tower-http-0.6.1-1.fc42 rust-tower-http0.5-0.5.2-1.fc42 rust-tower0.4-0.4.13-1.fc42

Read Time:57 Second

FEDORA-2024-04061a7ae3

Packages in this update:

rust-hyper-rustls-0.27.3-1.fc42
rust-reqwest-0.12.8-1.fc42
rust-rustls-native-certs0.7-0.7.3-1.fc42
rust-rustls-native-certs-0.8.0-1.fc42
rust-tonic-0.12.3-1.fc42
rust-tonic-build-0.12.3-1.fc42
rust-tonic-types-0.12.3-1.fc42
rust-tower0.4-0.4.13-1.fc42
rust-tower-0.5.1-1.fc42
rust-tower-http0.5-0.5.2-1.fc42
rust-tower-http-0.6.1-1.fc42

Update description:

Update the hyper-rustls crate to version 0.27.3.
Update the reqwest crate to version 0.12.8.
Update the rustls-native-certs crate to version 0.8.0 and add a compat package for version 0.7.
Update the tonic, tonic-build, and tonic-types crates to version 0.12.3.
Update the tower crate to version 0.5.1 and add a compat package for version 0.4.
Update the tower-http crate to version 0.6.1 and add a compat package for version 0.5.

Read More

News, Advisories and much more

Exit mobile version