Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 39 Release: Critical Fix for rust-tokio-tungstenite WebSocket Issue

fedora
Calendar Grey September 29, 2023
Dist Fedora Esm H88
The new iteration of rust-tokio-tungstenite available for Fedora 39 fortifies security measures and streamlines dependency handling.
- Update the axum crate to version 0.6.20

Summary

Tokio binding for Tungstenite, the Lightweight stream-based WebSocket

implementation.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Topics%20covered

Topics Covered

security advisory Fedora security fix critical update dependency management WebSocket rust-tokio-tungstenite

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.20.1-1 - Update to version 0.20.1; Fixes RHBZ#2203844

References

Fedora Update Notification FEDORA-2023-91a66898d2 2023-09-29 00:18:30.090040 Name : rust-tokio-tungstenite Product : Fedora 39 Version : 0.20.1 Release : 1.fc39 URL : Summary : Tokio binding for Tungstenite Description : Tokio binding for Tungstenite, the Lightweight stream-based WebSocket implementation.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-91a66898d2' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-tokio-tungstenite
Product: Fedora 39
Version: 0.20.1
Release: 1.fc39
URL: Summary : Tokio binding for Tungstenite

Topics%20covered

Topics Covered

security advisory Fedora security fix critical update dependency management WebSocket rust-tokio-tungstenite

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here