Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

RHEL 9.2: 2023-a5b123456d Critical: Python-Flask Security Patch

fedora
Calendar Grey October 3, 2023
Scroller Fedora
The recent upgrade to rust-axum and tungstenite packages in Fedora 38 resolves significant vulnerabilities while also improving overall robustness.
- Update the axum crate to version 0.6.20

Summary

Web framework that focuses on ergonomics and modularity.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.6.20-1 - Update to version 0.6.20; Fixes RHBZ#2230184

References

Fedora Update Notification FEDORA-2023-9c4142423a 2023-10-03 02:21:55.690329 Name : rust-axum Product : Fedora 38 Version : 0.6.20 Release : 1.fc38 URL : Summary : Web framework that focuses on ergonomics and modularity Description : Web framework that focuses on ergonomics and modularity.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-9c4142423a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-axum
Product: Fedora 38
Version: 0.6.20
Release: 1.fc38
URL: Summary : Web framework that focuses on ergonomics and modularity

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.