Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
89
security advisorydenial of servicefedoraFedora 44 cpp-httplib Major DoS Vulnerability with Potential Code Execution
Update to 0.48.0 (rhbz#2481109) Security fixes Complete the IP-host certificate identity fix from v0.47.0 for the Mbed TLS and wolfSSL backends. An IP-literal host is now authenticated only via a matching iPAddress SAN, never via the certificate's Common. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1b15ac058b 2026-07-03 00:54:50.177237+00:00 -------------------------------------------------------------------------------- Name : cpp-httplib Product : Fedora 44 Version : 0.48.0 Release : 1.fc44 URL : https://github.com/yhirose/cpp-httplib Summary : A C++11 single-file header-only cross platform HTTP/HTTPS library Description : A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code! -------------------------------------------------------------------------------- Update Information: Update to 0.48.0 (rhbz#2481109) Security fixes Complete the IP-host certificate identity fix from v0.47.0 for the Mbed TLS and wolfSSL backends. An IP-literal host is now authenticated only via a matching iPAddress SAN, never via the certificate's Common Name (RFC 9110) — matching what the OpenSSL backend already enforces through X509_check_ip. Previously these backends fell back to the CN when no IP SAN matched, and recognized IPv4 only; now IPv6 (16-byte) iPAddress SANs are matched as well, and the CN fallback is skipped for both IPv4 and IPv6 literal hosts (#2476) Improvements Replace the strtod-based from_chars for double with a hand-written, locale-independent parser. The only double parsed by the library is the HTTP quality value; strtod reads the decimal separator from the global C locale, so an embedder calling setlocale(LC_ALL, "") into a comma-decimal locale would mis-parse q-values. The new parser always treats . as the decimal separator and is allocation-free (Fix #2475) Fix OpenSSL 4.0 deprecation warnings: fetch CA storeobjects via the thread-safe X509_STORE_get1_objects() (OpenSSL 3.3+) and extract the subject CN via X509_NAME_get_index_by_NID()/X509_NAME_get_entry() instead of the deprecated X509_STORE_get0_objects() and X509_NAME_get_text_by_NID(). Older OpenSSL, BoringSSL, and LibreSSL keep using the get0 path. Verified warning-free against OpenSSL 4.0.1, 3.6.2, and 3.0 Behavior changes decode_query_component() now uses strict hex parsing for percent-escapes, consistent with decode_uri_component() and decode_path_component(). A % followed by non-hex characters (e.g. a sign or whitespace such as %-1, %+5, % 5) is passed through literally instead of being accepted as a valid escape (#2472) Source: https://github.com/yhirose/cpp-httplib/releases/tag/v0.48.0 Update to 0.47.0 (rhbz#2481109, CVE-2026-46527, CVE-2026-45372, CVE-2026-45352) Security fixes Fix TLS certificate chain verification bypass for IP-literal hosts on the Mbed TLS and wolfSSL backends: with server certificate verification enabled, SSLClient skipped chain validation entirely (any untrusted certificate with a matching IP SAN was accepted), and WebSocketClient on Mbed TLS skipped verification altogether. Chain verification now stays enabled for IP hosts, and certificate identity is verified post-handshake against IP SANs on all backends. SNI is no longer sent for IP hosts on Mbed TLS and wolfSSL, per RFC 6066 (CVE-2026-54919) New features Add Server::set_start_handler(): a callback invoked when the server is ready to accept connections, useful when running the server in a background thread (#2467) Add Client/SSLClient/WebSocketClient::enable_system_ca(bool) to opt into loading system CA certificates alongside a custom CA. The default is unchanged: a custom CA remains exclusive. The setting carries over to clients created for HTTPS redirects (#2471) Add WebSocketClient::set_hostname_addr_map() to connect to a specific IP address while keeping the original hostname for the handshake and certificate verification (#2463) Behavior changes The request body is now readafter route matching and the pre-request handler, so both the regular handler and ContentReader paths behave the same: route matching → pre-request handler → body read → handler. A request rejected by the pre-request handler (e.g. failed per-route authentication via req.matched_route) no longer buffers the body at all. Note: code that referenced req.body or body- derived form fields inside the pre-request handler will now see an empty body; inspect headers, path, query parameters, or matched_route instead WebSocketClient with a custom CA no longer merges system CA certificates (it previously always merged them). This matches SSLClient behavior; call enable_system_ca(true) to load system CA certificates alongside the custom CA Range request headers are now ignored for streaming responses of unknown length instead of producing an invalid response (#2465) Bug fixes Fix SSLClient::set_ca_cert_store() breaking custom-CA exclusivity: system CA certificates were silently merged into the user-provided store, broadening the trust set. Also fix Client::load_ca_cert_store() not carrying CA certificates over to clients created for HTTPS redirects Fix WebSocketClient dropping the query string from the URL during the upgrade handshake, so query parameters (e.g. auth tokens) are sent (#2468) Fix a use-after-free when reconnecting a WebSocketClient after set_ca_cert_store(), and a memory leak in the Mbed TLS and wolfSSL set_ca_cert_store() backends Fix MSVC warning C4309 (truncation of constant value) in SHA padding code (#2464) Cast to unsigned char before ctype calls in is_hex and is_token_char to avoid undefined behavior with negative char values (#2469) Source: https://github.com/yhirose/cpp-httplib/releases/tag/v0.47.0 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 24 2026 Petr Menšík - 0.48.0-1 - Update to 0.48.0 (rhbz#2481109) * Wed Jun 24 2026 Petr Menšík - 0.47.0-1 - Update to 0.47.0 (rhbz#2481109, CVE-2026-46527, CVE-2026-45372, CVE-2026-45352) *Tue May 19 2026 Petr Menšík - 0.45.0-1 - Update to 0.45.0 (rhbz#2450591) * Fri Mar 27 2026 Petr Menšík - 0.39.0-1 - Update to 0.39.0 (rhbz#2450591) * Fri Mar 27 2026 Petr Menšík - 0.38.0-3 - Record upstream tag format in spec * Mon Mar 23 2026 Petr Menšík - 0.38.0-2 - Helper definitions of upstream and signed files -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452170 - CVE-2026-33745 cpp-httplib: cpp-httplib: Information disclosure of credentials via cross-origin HTTP redirects [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2452170 [ 2 ] Bug #2481109 - cpp-httplib-0.48.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2481109 [ 3 ] Bug #2483726 - CVE-2026-46527 cpp-httplib: cpp-httplib: Denial of Service via malformed X-Forwarded-For header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2483726 [ 4 ] Bug #2483733 - CVE-2026-45372 cpp-httplib: cpp-httplib: Arbitrary code execution via improper HTTP header processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2483733 [ 5 ] Bug #2483736 - CVE-2026-45352 cpp-httplib: cpp-httplib: Denial of Service due to unbounded memory allocation via negative chunk-size [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2483736 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1b15ac058b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 44's cpp-httplib update addresses critical security issues, enhancingapplication security against potential attacks.. cpp-httplib security update. . Severity: Critical. LinuxSecurity.com Team
Jul 02, 2026
•Critical
Fedora
89
security advisoryfedoraimportantFedora 44 python-urllib3 Update Under Advisory 2026-48989df336
Update to 2.7.0 (rhbz#2467787). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-48989df336 2026-05-19 16:18:59.081722+00:00 -------------------------------------------------------------------------------- Name : python-urllib3 Product : Fedora 44 Version : 2.7.0 Release : 1.fc44 URL : https://github.com/urllib3/urllib3 Summary : HTTP library with thread-safe connection pooling, file post, and more Description : urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: \u2022 Thread safety. \u2022 Connection pooling. \u2022 Client-side SSL/TLS verification. \u2022 File uploads with multipart encoding. \u2022 Helpers for retrying requests and dealing with HTTP redirects. \u2022 Support for gzip, deflate, brotli, and zstd encoding. \u2022 Proxy support for HTTP and SOCKS. \u2022 100% test coverage. -------------------------------------------------------------------------------- Update Information: Update to 2.7.0 (rhbz#2467787) -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2026 Lumir Balhar - 2.7.0-1 - Update to 2.7.0 (rhbz#2467787) * Wed Apr 8 2026 Miro Hron\u010dok - 2.6.3-3 - Allow building with setuptools-scm 10+ -------------------------------------------------------------------------------- References: [ 1 ] Bug #2467787 - python-urllib3-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2467787 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-48989df336' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key.More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update to python-urllib3 version 2.7.0 for Fedora 44 improves thread safety and connection pooling.. python urllib3 update, Fedora 44 security, HTTP client library, software package management. . Severity: Important. LinuxSecurity.com Team
May 19, 2026
•Important
Fedora
89
security advisoryfedoraimportantFedora 44 libsoup3 Important Credential Leakage Patch CVE-2026-1539
Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-55dabf3975 2026-03-30 00:14:59.309220+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 44 Version : 3.6.6 Release : 6.fc44 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 19 2026 Milan Crha - 3.6.6-6 - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect) - Resolves: rhbz#2433867 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433867 - CVE-2026-1539 libsoup3: libsoup: Credential leakage via HTTP redirects [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433867 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2026-55dabf3975' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 30, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 43 cpp-httplib Critical Denial of Service Fix FEDORA-2026-c2049f7220
Update to 0.37.0 (rhbz#2441656) Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663) Update to 0.35.0 Payload size limit bypass via gzip decompression in ContentReader (streaming). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c2049f7220 2026-03-21 00:54:25.948557+00:00 -------------------------------------------------------------------------------- Name : cpp-httplib Product : Fedora 43 Version : 0.37.1 Release : 2.fc43 URL : httplib Summary : A C++11 single-file header-only cross platform HTTP/HTTPS library Description : A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code! -------------------------------------------------------------------------------- Update Information: Update to 0.37.0 (rhbz#2441656) Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663) Update to 0.35.0 Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies (CVE-2026-28435, rhbz#2444638) Default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header (CVE-2026-28434, rhbz#2444636) httplib/compare/v0.32.0...v0.37.0 -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 12 2026 Petr Men\u0161k - 0.37.1-2 - Build for 32 bits again * Thu Mar 12 2026 Petr Men\u0161k - 0.37.1-1 - Update to 0.37.1 (rhbz#2445943) - Fixes Denial of Service via malformed Content-Length header (CVE-2026-31870) - httplib/security/advisories/GHSA-39q5-hh6x-jpxx - httplib/releases/tag/v0.37.1 * Mon Mar 9 2026 Petr Men\u0161k - 0.37.0-1 - Update to 0.37.0 (rhbz#2441656) - Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2441656 - cpp-httplib-0.37.0 isavailable https://bugzilla.redhat.com/show_bug.cgi?id=2441656 [ 2 ] Bug #2444636 - CVE-2026-28434 cpp-httplib: default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444636 [ 3 ] Bug #2444638 - CVE-2026-28435 cpp-httplib: payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444638 [ 4 ] Bug #2445663 - CVE-2026-29076 cpp-httplib: cpp-httplib: Denial of Service via crafted HTTP POST request [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2445663 [ 5 ] Bug #2446926 - CVE-2026-31870 cpp-httplib: cpp-httplib: Denial of Service via malformed Content-Length header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2446926 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c2049f7220' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Critical updates for Fedora cpp-httplib address Denial of Service threats from crafted HTTP requests. Secure your system now.. cpp-httplib update, Fedora software, Denial of Service threat, http security, C++ library. . Severity: Critical. LinuxSecurity.com Team
Mar 21, 2026
•Critical
Fedora
89
security advisorydenial of servicefedoraFedora 42: cpp-httplib Critical Denial of Service Issues 2026-3b0e5b457d
Update to 0.30.1 Denial of service (DOS) using zip bomb (CVE-2026-22776) CRLF injection in http headers (CVE-2026-21428) Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust (CVE-2025-66577) https://github.com/yhirose/cpp-httplib/releases/tag/v0.30.1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3b0e5b457d 2026-01-22 01:14:01.609543+00:00 -------------------------------------------------------------------------------- Name : cpp-httplib Product : Fedora 42 Version : 0.30.1 Release : 5.fc42 URL : https://github.com/yhirose/cpp-httplib Summary : A C++11 single-file header-only cross platform HTTP/HTTPS library Description : A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code! -------------------------------------------------------------------------------- Update Information: Update to 0.30.1 Denial of service (DOS) using zip bomb (CVE-2026-22776) CRLF injection in http headers (CVE-2026-21428) Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust (CVE-2025-66577) https://github.com/yhirose/cpp-httplib/releases/tag/v0.30.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 13 2026 Petr Men\u0161k - 0.30.1-5 - Switch to GCC 15 test fix with active PR * Tue Jan 13 2026 Petr Men\u0161k - 0.30.1-4 - Drop 32 bit support like upstream did * Mon Jan 12 2026 Petr Men\u0161k - 0.30.1-3 - fixup! Fix tests in last release * Mon Jan 12 2026 Petr Men\u0161k - 0.30.1-2 - Fix tests in last release * Mon Jan 12 2026 Petr Men\u0161k - 0.30.1-1 - Update to 0.30.1 (rhbz#2406686) * Sat Aug 30 2025 Orion Poplawski - 0.26.0-1 - Update to 0.26.0 (CVE-2025-53629) * Wed Jul 23 2025 Fedora Release Engineering - 0.20.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri May 9 2025 Orion Poplawski - 0.20.1-1 - Update to0.20.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2364284 - CVE-2025-46728 cpp-httplib: cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2364284 [ 2 ] Bug #2379431 - CVE-2025-53629 cpp-httplib: cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2379431 [ 3 ] Bug #2419548 - CVE-2025-66570 cpp-httplib: cpp-httplib Untrusted HTTP Header Handling [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2419548 [ 4 ] Bug #2419631 - CVE-2025-66577 cpp-httplib: cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2419631 [ 5 ] Bug #2426699 - CVE-2026-21428 cpp-httplib: cpp-httplib: Server-Side Request Forgery via header injection [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2426699 [ 6 ] Bug #2428893 - CVE-2026-22776 cpp-httplib: cpp-httplib: Denial of Service due to excessive memory usage from compressed HTTP request bodies [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2428893 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3b0e5b457d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Critical Fedora 42 update for cpp-httplib addresses denial of service and header injection issues. Immediate action advised.. cpp-httplib, Fedora 42, denial ofservice, http headers, security advisory. . Severity: Critical. LinuxSecurity.com Team
Jan 22, 2026
•Critical
Fedora
89
security advisoryfedoracriticalFedora 42: mingw-libsoup Critical Out-of-Bounds Read CVE-2025-11021
Backport fix for CVE-2025-11021.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-6c78aad721 2025-12-23 01:27:05.654584+00:00 -------------------------------------------------------------------------------- Name : mingw-libsoup Product : Fedora 42 Version : 2.74.3 Release : 14.fc42 URL : https://wiki.gnome.org/Projects/libsoup Summary : MinGW library for HTTP and XML-RPC functionality Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it). This is the MinGW build of Libsoup -------------------------------------------------------------------------------- Update Information: Backport fix for CVE-2025-11021. -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 14 2025 Sandro Mani - 2.74.3-14 - Backport fix for CVE-2025-11021 * Thu Jul 24 2025 Fedora Release Engineering - 2.74.3-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2399631 - CVE-2025-11021 mingw-libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399631 [ 2 ] Bug #2399634 - CVE-2025-11021 mingw-libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399634 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6c78aad721' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 23, 2025
•Critical
Fedora
197
security advisorydebianinformation disclosureDebian 11: DLA-3998-1 critical: python-urllib3 authorization bypass
Multiple vulnerabilities were found in python-urllib3, an HTTP library with thread-safe connection pooling for Python, which could lead to information disclosure or authorization bypass. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3998-1
Dec 21, 2024
•Critical
Debian LTS
89
security advisoryfedoracriticalUbuntu 21.04: 2021-b93facd28a Urgent: Upgrade libtiny_http to 0.9.1
- Update the tiny_http crate to version 0.8.2. - Introduce a compat package for tiny_http versions 0.6.x. Both versions contain a fix for RUSTSEC-2020-0031 / CVE-2020-35884, and the only dependent application (drg) has been rebuilt against the version containing the fix.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-c824326120 2021-12-13 00:58:52.679415 --------------------------------------------------------------------------------Name : rust-tiny_http Product : Fedora 34 Version : 0.8.2 Release : 1.fc34 URL : Summary : Low level HTTP server library Description : Low level HTTP server library. --------------------------------------------------------------------------------Update Information: - Update the tiny_http crate to version 0.8.2. - Introduce a compat package for tiny_http versions 0.6.x. Both versions contain a fix for RUSTSEC-2020-0031 / CVE-2020-35884, and the only dependent application (drg) has been rebuilt against the version containing the fix. --------------------------------------------------------------------------------ChangeLog: * Sat Dec 4 2021 Fabio Valentini 0.8.2-1 - Update to version 0.8.2 * Fri Jul 23 2021 Fedora Release Engineering - 0.6.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-c824326120' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 12, 2021
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!