Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 616
Alerts This Week
Warning Icon 1 616

Fedora 38 Update: FEDORA-2023-cc21019773 Critical Soundness Fix

fedora
Calendar Grey May 7, 2023
Dist Fedora Esm H88
The latest patch revisions for rust-below in Fedora 38 address identified vulnerabilities across various crates, enhancing overall system security.
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005](https://rustsec.org/...

Summary

below is an interactive tool to view and record historical system data. It has

support for:

- information regarding hardware resource utilization

- viewing the cgroup hierarchy

- cgroup and process information

- pressure stall information (PSI)

- record mode to record system data

- replay mode to replay historical system data

- live mode to view live system data

- dump subcommand to report script-friendly information (e.g. JSON and CSV)

below does not have support for cgroup1.

The name "below" stems from the fact that the below developers rejected many of

atop's design and style decisions.

Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some

(potential or confirmed) security or soundness issues: - `tokio`:

[RUSTSEC-2023-0005](https://rustsec.org/advisories/RUSTSEC-2023-0005.html) -`h2`: [RUSTSEC-2023-0034](https://rustsec.org/advisories/RUSTSEC-2023-0034.html)

/ [CVE-2023-26964](https://nvd.nist.gov/vuln/detail/CVE-2023-26964) - `openssl`:

[RUSTSEC-2023-0022](https://rustsec.org/advisories/RUSTSEC-2023-0022.html),

[RUSTSEC-2023-0023](https://rustsec.org/advisories/RUSTSEC-2023-0023.html),

[RUSTSEC-2023-0024](https://rustsec.org/advisories/RUSTSEC-2023-0024.html) This

update contains rebuilds of all affected applications against the latest

versions of these crates, which have addressed all linked issues.

* Wed May 3 2023 Fabio Valentini - 0.6.3-4

- Rebuild for tokio crate >= v1.24.2 (RUSTSEC-2023-0005)

su -c 'dnf upgrade --advisory FEDORA-2023-cc21019773' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 38
Version: 0.6.3
Release: 4.fc38
URL: Summary : Interactive tool to view and record historical system data

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.