Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 38: 2023-9c4142423a Critical - Rust-Tokio-Tungstenite Security Fix

fedora
Calendar Grey October 3, 2023
Dist Fedora Esm H88
Essential patch for rust-tokio-tungstenite on Fedora 38 addresses vulnerabilities and enhances app performance.
- Update the axum crate to version 0.6.20

Summary

Tokio binding for Tungstenite, the Lightweight stream-based WebSocket

implementation.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Topics%20covered

Topics Covered

security advisory fedora critical security fix application update rust

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.20.1-1 - Update to version 0.20.1; Fixes RHBZ#2203844 * Sat Jul 22 2023 Fedora Release Engineering - 0.18.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References

Fedora Update Notification FEDORA-2023-9c4142423a 2023-10-03 02:21:55.690329 Name : rust-tokio-tungstenite Product : Fedora 38 Version : 0.20.1 Release : 1.fc38 URL : Summary : Tokio binding for Tungstenite Description : Tokio binding for Tungstenite, the Lightweight stream-based WebSocket implementation.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-9c4142423a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-tokio-tungstenite
Product: Fedora 38
Version: 0.20.1
Release: 1.fc38
URL: Summary : Tokio binding for Tungstenite

Topics%20covered

Topics Covered

security advisory fedora critical security fix application update rust

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here