Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

RHEL 9.2: 2023-a5b123456d Critical: Python-Flask Security Patch

fedora
Calendar Grey October 3, 2023
Dist Fedora Esm H88
The recent upgrade to rust-axum and tungstenite packages in Fedora 38 resolves significant vulnerabilities while also improving overall robustness.
- Update the axum crate to version 0.6.20

Summary

Web framework that focuses on ergonomics and modularity.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Topics%20covered

Topics Covered

security advisory security issue fedora software update web application framework rust crate tokio tungstenite

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.6.20-1 - Update to version 0.6.20; Fixes RHBZ#2230184

References

Fedora Update Notification FEDORA-2023-9c4142423a 2023-10-03 02:21:55.690329 Name : rust-axum Product : Fedora 38 Version : 0.6.20 Release : 1.fc38 URL : Summary : Web framework that focuses on ergonomics and modularity Description : Web framework that focuses on ergonomics and modularity.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-9c4142423a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-axum
Product: Fedora 38
Version: 0.6.20
Release: 1.fc38
URL: Summary : Web framework that focuses on ergonomics and modularity

Topics%20covered

Topics Covered

security advisory security issue fedora software update web application framework rust crate tokio tungstenite

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here