Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 40: Critical Rust Scheduler Update FEDORA-2024-ce2936b568

fedora
Calendar Grey May 26, 2024
Dist Fedora Esm H88
Anticipated security notice for Fedora 40 highlighting rust-scx_rusty with essential updates and patches.
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries)

Summary

A multi-domain, BPF / user space hybrid scheduler used within sched_ext,

which is a Linux kernel feature which enables implementing kernel thread

schedulers in BPF and dynamically loading them.

https://github.com/sched-ext/scx/tree/main

Update Information:

This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix incomplete debug information for the Rust standard library (and the resulting low-quality stack traces). Additionally, builds will have picked up fixes for some minor low-priority security and / or safety fixes in crate dependencies that had not yet been handled via a separate (targeted) rebuild: h2 v0.3.26+ (denial-of-service): https://rustsec.org/advisories/RUSTSEC-2024-0332.html glib v0.19.4+ and backports (UB): core/pull/1343 hashbrown v0.14.5+ (UB): https://github.com/rust-lang/hashbrown/pull/511 rustls v0.22.4+, v0.21.11+ (denial-of-service): https://rustsec.org/advisories/RUSTSEC-2024-0336.html

Topics%20covered

Topics Covered

security advisory update critical Fedora Rust scheduler

Change Log

* Thu May 23 2024 Fabio Valentini - 0.5.4-2 - Rebuild with Rust 1.78 to fix incomplete debuginfo and backtraces

References

Fedora Update Notification FEDORA-2024-ce2936b568 2024-05-26 01:25:15.719720 Name : rust-scx_rusty Product : Fedora 40 Version : 0.5.4 Release : 2.fc40 URL : Summary : A multi-domain, BPF / user space hybrid scheduler Description : A multi-domain, BPF / user space hybrid scheduler used within sched_ext, which is a Linux kernel feature which enables implementing kernel thread schedulers in BPF and dynamically loading them. https://github.com/sched-ext/scx/tree/main

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ce2936b568' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-scx_rusty
Product: Fedora 40
Version: 0.5.4
Release: 2.fc40
URL: Summary : A multi-domain, BPF / user space hybrid scheduler

Topics%20covered

Topics Covered

security advisory update critical Fedora Rust scheduler

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.