Stay Secure with the Latest Linux Advisories

security advisorymoderatefedora

Fedora 36: FEDORA-2023-abc12d34ef High: Rust-Tokio Async Fix

Rebuild against websocket 0.26.5 for CVE-2022-35922 / RUSTSEC-2022-0035.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-dfa24fa7d4 2022-08-15 01:24:42.138300 --------------------------------------------------------------------------------Name : rust-ffsend Product : Fedora 35 Version : 0.2.71 Release : 3.fc35 URL : Summary : Easily and securely share files from the command line Description : Easily and securely share files from the command line. A fully featured Firefox Send client. --------------------------------------------------------------------------------Update Information: Rebuild against websocket 0.26.5 for CVE-2022-35922 / RUSTSEC-2022-0035. --------------------------------------------------------------------------------ChangeLog: * Sat Aug 6 2022 Fabio Valentini - 0.2.71-3 - Rebuild with websocket 0.26.5 for CVE-2022-35922 / RUSTSEC-2022-0035. --------------------------------------------------------------------------------References: [ 1 ] Bug #2115227 - CVE-2022-35922 rust-websocket-base: rust-webscket: untrusted websocket connections can cause an out-of-memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2115227 [ 2 ] Bug #2115228 - CVE-2022-35922 rust-websocket: rust-webscket: untrusted websocket connections can cause an out-of-memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2115228 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-dfa24fa7d4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Patch for rust-ffsend addressing CVE-2022-35922 and enhancing websocket performance on Fedora 35.. rust-ffsend update, file sharing fix, websocket update. . Severity: Important. LinuxSecurity.com Team

Aug 14, 2022 •Important Fedora