Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 37: FEDORA-2023-e72bf7b92e Moderate: rust-tungstenite Security Fix

fedora
Calendar Grey October 3, 2023
Dist Fedora Esm H88
The Fedora 37 update for rust-tungstenite resolves CVE-2023-43669 by providing new crate versions, eliminating the need for application recompilation.
- Update the axum crate to version 0.6.20

Summary

Lightweight stream-based WebSocket implementation.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Topics%20covered

Topics Covered

security advisory Fedora WebSocket CVE-2023-43669 rust-tungstenite

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.20.1-1 - Update to version 0.20.1; Fixes RHBZ#2186184 * Sat Jul 22 2023 Fedora Release Engineering - 0.18.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References

Fedora Update Notification FEDORA-2023-e72bf7b92e 2023-10-03 00:43:11.265398 Name : rust-tungstenite Product : Fedora 37 Version : 0.20.1 Release : 1.fc37 URL : Summary : Lightweight stream-based WebSocket implementation Description : Lightweight stream-based WebSocket implementation.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-e72bf7b92e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: rust-tungstenite
Product: Fedora 37
Version: 0.20.1
Release: 1.fc37
URL: Summary : Lightweight stream-based WebSocket implementation

Topics%20covered

Topics Covered

security advisory Fedora WebSocket CVE-2023-43669 rust-tungstenite

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here