Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Fedora 37: FEDORA-2023-37ae269843 Critical: Rust-Below Issues

fedora
Calendar Grey May 18, 2023
Dist Fedora Esm H88
Important patch released for rust-below in Fedora 37 to fix safety concerns in tokio, h2, and openssl libraries.
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005](https://rustsec.org/...

Summary

below is an interactive tool to view and record historical system data. It has

support for:

- information regarding hardware resource utilization

- viewing the cgroup hierarchy

- cgroup and process information

- pressure stall information (PSI)

- record mode to record system data

- replay mode to replay historical system data

- live mode to view live system data

- dump subcommand to report script-friendly information (e.g. JSON and CSV)

below does not have support for cgroup1.

The name "below" stems from the fact that the below developers rejected many of

atop's design and style decisions.

Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some

(potential or confirmed) security or soundness issues: - `tokio`:

[RUSTSEC-2023-0005](https://rustsec.org/advisories/RUSTSEC-2023-0005.html) -`h2`: [RUSTSEC-2023-0034](https://rustsec.org/advisories/RUSTSEC-2023-0034.html)

/ [CVE-2023-26964](https://nvd.nist.gov/vuln/detail/CVE-2023-26964) - `openssl`:

[RUSTSEC-2023-0022](https://rustsec.org/advisories/RUSTSEC-2023-0022.html),

[RUSTSEC-2023-0023](https://rustsec.org/advisories/RUSTSEC-2023-0023.html),

[RUSTSEC-2023-0024](https://rustsec.org/advisories/RUSTSEC-2023-0024.html) This

update contains rebuilds of all affected applications against the latest

versions of these crates, which have addressed all linked issues.

* Wed May 3 2023 Fabio Valentini - 0.6.3-4

- Rebuild for tokio crate >= v1.24.2 (RUSTSEC-2023-0005)

su -c 'dnf upgrade --advisory FEDORA-2023-37ae269843' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 37
Version: 0.6.3
Release: 4.fc37
URL: Summary : Interactive tool to view and record historical system data

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here