Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 43 Rust-Reqsign-Aws-V4 Critical Update for AWS SigV4 2026-ffaebbf2f0

fedora
Calendar Grey July 6, 2026
Dist Fedora Esm H88
Critical advisory for Fedora 43 fixes two important security issues in rust-reqsign-aws-v4 application. Essential update recommended.
Update quick-xml for two security advisories, rebuild dependents, and update sandogasa to the latest https://rustsec.org/advisories/RUSTSEC-2026-0194.html https://rustsec.org/advis...

Summary

AWS SigV4 signing implementation for reqsign.

Update Information:

Update quick-xml for two security advisories, rebuild dependents, and update sandogasa to the latest https://rustsec.org/advisories/RUSTSEC-2026-0194.html https://rustsec.org/advisories/RUSTSEC-2026-0195.html sandogasa v0.15.3 ebranch base-distro guard — resolve/file-requests now know EPEL must not replace RHEL/CentOS Stream packages: deps present in the base at a too-old version are blocked with clear options (alternate package via --override, or lower the requirement) instead of becoming CANTFIX branch requests; file-requests re-checks the base before filing New sandogasa-sourcehut crate — sr.ht GraphQL client; sandogasa-report gains a Sourcehut section (patches, tickets, commits split yours vs third-party, git_emails attribution) ebranch check-crate — human report on stderr alongside --koji/--copr machine output, so build scripts stay pipeable dbranch rebuild — creates debian/gbp.conf when the Debian branch has none and handles the modern single-line salsa...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory fedora critical DoS rust-reqsign-aws-v4 sandogasa

Change Log

* Fri Jul 3 2026 Michel Lind - 3.0.1-2 - Allow building against quick-xml 0.41

References


[ 1 ] Bug #2494601 - rust-quick-xml-0.41.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2494601

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ffaebbf2f0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-reqsign-aws-v4
Product: Fedora 43
Version: 3.0.1
Release: 2.fc43
URL: https://crates.io/crates/reqsign-aws-v4
Summary: AWS SigV4 signing implementation for reqsign

Topics%20covered

Topics Covered

security advisory fedora critical DoS rust-reqsign-aws-v4 sandogasa

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here