Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Fedora 37: FEDORA-2023-e72bf7b92e critical: rust-tokio-tungstenite fix

fedora
Calendar Grey October 3, 2023
Scroller Fedora
The rust-tokio-tungstenite package in Fedora has been updated with critical security fixes, crate updates, and performance enhancements for users to benefit from
- Update the axum crate to version 0.6.20

Summary

Tokio binding for Tungstenite, the Lightweight stream-based WebSocket

implementation.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.20.1-1 - Update to version 0.20.1; Fixes RHBZ#2203844 * Sat Jul 22 2023 Fedora Release Engineering - 0.18.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References

Fedora Update Notification FEDORA-2023-e72bf7b92e 2023-10-03 00:43:11.265398 Name : rust-tokio-tungstenite Product : Fedora 37 Version : 0.20.1 Release : 1.fc37 URL : Summary : Tokio binding for Tungstenite Description : Tokio binding for Tungstenite, the Lightweight stream-based WebSocket implementation.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-e72bf7b92e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-tokio-tungstenite
Product: Fedora 37
Version: 0.20.1
Release: 1.fc37
URL: Summary : Tokio binding for Tungstenite

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.