Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 41: FEDORA-2024-2096f5d14c moderate: rust-brotli-decompressor update

fedora
Calendar Grey October 12, 2024
Dist Fedora Esm H88
Fedora upgrades rust-brotli-decompressor to version 4.0.1, addressing security vulnerabilities and discontinuing i686 architecture support.
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13

Summary

A brotli decompressor that with an interface avoiding the rust stdlib.

This makes it suitable for embedded devices and kernels. It is designed

with a pluggable allocator so that the standard lib's allocator may be

employed. The default build also includes a stdlib allocator and stream

interface. Disable this with --features=no-stdlib. Alternatively,

--features=unsafe turns off array bounds checks and memory

initialization but provides a safe interface for the caller. Without

adding the --features=unsafe argument, all included code is safe. For

compression in addition to this library, download

https://github.com/dropbox/rust-brotli.

Update Information:

Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packages. Drop i686 support in rust-libcramjam and python-cramjam.

Topics%20covered

Topics Covered

security advisory security update Fedora patch decompression rust-brotli-decompressor rust-brotli

Change Log

* Tue Sep 24 2024 Benjamin A. Beasley - 4.0.1-1 - Update to 4.0.1 (close RHBZ#2272915) - Reduce the debuginfo level as a workaround for very slow test compilation.

References


[ 1 ] Bug #2272914 - rust-brotli-6.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272914 [ 2 ] Bug #2272915 - rust-brotli-decompressor-4.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272915 [ 3 ] Bug #2273733 - rust-async-compression-0.4.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=2273733 [ 4 ] Bug #2316061 - rust-brotli-7.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2316061 [ 5 ] Bug #2316120 - rust-async-compression-0.4.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2316120

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2096f5d14c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: rust-brotli-decompressor
Product: Fedora 41
Version: 4.0.1
Release: 1.fc41
URL: Summary : Brotli decompressor with no_std support

Topics%20covered

Topics Covered

security advisory security update Fedora patch decompression rust-brotli-decompressor rust-brotli

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here