Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 38: FEDORA-2023-cc21019773 Critical: Rust Crates Security Fixes

fedora
Calendar Grey May 7, 2023
Dist Fedora Esm H88
The latest Fedora 38 updates for Rust packages resolve critical security vulnerabilities in tokio, h2, and openssl with essential patches.
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005](https://rustsec.org/...

Summary

Configure Sequoia using a configuration file.

Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some

(potential or confirmed) security or soundness issues: - `tokio`:

[RUSTSEC-2023-0005](https://rustsec.org/advisories/RUSTSEC-2023-0005.html) -`h2`: [RUSTSEC-2023-0034](https://rustsec.org/advisories/RUSTSEC-2023-0034.html)

/ [CVE-2023-26964](https://nvd.nist.gov/vuln/detail/CVE-2023-26964) - `openssl`:

[RUSTSEC-2023-0022](https://rustsec.org/advisories/RUSTSEC-2023-0022.html),

[RUSTSEC-2023-0023](https://rustsec.org/advisories/RUSTSEC-2023-0023.html),

[RUSTSEC-2023-0024](https://rustsec.org/advisories/RUSTSEC-2023-0024.html) This

update contains rebuilds of all affected applications against the latest

versions of these crates, which have addressed all linked issues.

* Wed May 3 2023 Fabio Valentini - 0.6.0-3

- Rebuild for openssl crate >= v0.10.48 (RUSTSEC-2023-{0022,0023,0024})

su -c 'dnf upgrade --advisory FEDORA-2023-cc21019773' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 38
Version: 0.6.0
Release: 3.fc38
URL: Summary : Configure Sequoia using a configuration file

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here