Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Fedora 39 Update FEDORA-2023-91a66898d2: Critical Rust-Tungstenite Fix

fedora
Calendar Grey September 29, 2023
Scroller Fedora
Correction for rust-tungstenite version 0.20.1 resolves significant problems in the Fedora 39 release FEDORA-2023-91a66898d2.
- Update the axum crate to version 0.6.20

Summary

Lightweight stream-based WebSocket implementation.

Update Information:

- Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port warp from tungstenite v0.18 to v0.20. Version 0.20.1 of the tungstenite crate includes a fix for CVE-2023-43669. No dependent applications need to be rebuilt since none of them use the WebSocket functionality of axum or warp.

Change Log

* Sun Sep 24 2023 Fabio Valentini - 0.20.1-1 - Update to version 0.20.1; Fixes RHBZ#2186184

References

Fedora Update Notification FEDORA-2023-91a66898d2 2023-09-29 00:18:30.090040 Name : rust-tungstenite Product : Fedora 39 Version : 0.20.1 Release : 1.fc39 URL : Summary : Lightweight stream-based WebSocket implementation Description : Lightweight stream-based WebSocket implementation.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-91a66898d2' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-tungstenite
Product: Fedora 39
Version: 0.20.1
Release: 1.fc39
URL: Summary : Lightweight stream-based WebSocket implementation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.