From a6fffebc0be6a9beddc425e5420fba36b5f6cee1 Mon Sep 17 00:00:00 2001 From: "david.yaffe" Date: Thu, 22 Oct 2026 19:23:23 +0000 Subject: [PATCH] fix(Security): Apply patch update 0.9.3 to main --- CHANGELOG.md | 6 +++ quickwit/Cargo.lock | 68 +++++++++++++++---------------- quickwit/Cargo.toml | 2 +- quickwit/quickwit-ui/package.json | 2 +- 4 files changed, 42 insertions(+), 36 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 37f9a77250c..c79204f7711 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -23,6 +23,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ---> +# [0.9.3] + +### Security + +- Reject TLS certificate chains through the compromised emSign intermediates (rustls-webpki RUSTSEC-2026-0382, webpki-roots RUSTSEC-2026-0381, webpki-root-certs RUSTSEC-2026-0383). + # [0.9.2] ### Security diff --git a/quickwit/Cargo.lock b/quickwit/Cargo.lock index 5ffc85418c4..afa4c68f04d 100644 --- a/quickwit/Cargo.lock +++ b/quickwit/Cargo.lock @@ -7103,7 +7103,7 @@ dependencies = [ [[package]] name = "quickwit-actors" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7123,7 +7123,7 @@ dependencies = [ [[package]] name = "quickwit-aws" -version = "0.9.2" +version = "0.9.3" dependencies = [ "aws-config", "aws-runtime", @@ -7143,7 +7143,7 @@ dependencies = [ [[package]] name = "quickwit-cli" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "backtrace", @@ -7195,7 +7195,7 @@ dependencies = [ [[package]] name = "quickwit-cluster" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7222,7 +7222,7 @@ dependencies = [ [[package]] name = "quickwit-codegen" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "futures", @@ -7238,7 +7238,7 @@ dependencies = [ [[package]] name = "quickwit-codegen-example" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7265,7 +7265,7 @@ dependencies = [ [[package]] name = "quickwit-common" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-speed-limit", @@ -7316,7 +7316,7 @@ dependencies = [ [[package]] name = "quickwit-compaction" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7340,7 +7340,7 @@ dependencies = [ [[package]] name = "quickwit-config" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "bytes", @@ -7373,7 +7373,7 @@ dependencies = [ [[package]] name = "quickwit-control-plane" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7404,7 +7404,7 @@ dependencies = [ [[package]] name = "quickwit-datetime" -version = "0.9.2" +version = "0.9.3" dependencies = [ "itertools 0.15.0", "serde", @@ -7416,7 +7416,7 @@ dependencies = [ [[package]] name = "quickwit-directories" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7433,7 +7433,7 @@ dependencies = [ [[package]] name = "quickwit-doc-mapper" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "base64 0.23.0", @@ -7464,7 +7464,7 @@ dependencies = [ [[package]] name = "quickwit-index-management" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "futures", @@ -7485,7 +7485,7 @@ dependencies = [ [[package]] name = "quickwit-indexing" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "arc-swap", @@ -7551,7 +7551,7 @@ dependencies = [ [[package]] name = "quickwit-ingest" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7593,7 +7593,7 @@ dependencies = [ [[package]] name = "quickwit-integration-tests" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "aws-sdk-sqs", @@ -7632,7 +7632,7 @@ dependencies = [ [[package]] name = "quickwit-jaeger" -version = "0.9.2" +version = "0.9.3" dependencies = [ "async-trait", "itertools 0.15.0", @@ -7665,7 +7665,7 @@ dependencies = [ [[package]] name = "quickwit-janitor" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7698,7 +7698,7 @@ dependencies = [ [[package]] name = "quickwit-lambda-client" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7725,7 +7725,7 @@ dependencies = [ [[package]] name = "quickwit-lambda-server" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "base64 0.23.0", @@ -7749,7 +7749,7 @@ dependencies = [ [[package]] name = "quickwit-macros" -version = "0.9.2" +version = "0.9.3" dependencies = [ "proc-macro2", "quote", @@ -7758,7 +7758,7 @@ dependencies = [ [[package]] name = "quickwit-metastore" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7804,7 +7804,7 @@ dependencies = [ [[package]] name = "quickwit-metrics" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "atomic_float", @@ -7823,14 +7823,14 @@ dependencies = [ [[package]] name = "quickwit-metrics-inventory" -version = "0.9.2" +version = "0.9.3" dependencies = [ "quickwit-metrics", ] [[package]] name = "quickwit-opentelemetry" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7852,7 +7852,7 @@ dependencies = [ [[package]] name = "quickwit-proto" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "async-trait", @@ -7890,7 +7890,7 @@ dependencies = [ [[package]] name = "quickwit-query" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "base64 0.23.0", @@ -7918,7 +7918,7 @@ dependencies = [ [[package]] name = "quickwit-rest-client" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "bytes", @@ -7944,7 +7944,7 @@ dependencies = [ [[package]] name = "quickwit-search" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "assert-json-diff", @@ -7989,7 +7989,7 @@ dependencies = [ [[package]] name = "quickwit-serve" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "assert-json-diff", @@ -8067,7 +8067,7 @@ dependencies = [ [[package]] name = "quickwit-storage" -version = "0.9.2" +version = "0.9.3" dependencies = [ "ahash", "anyhow", @@ -8127,7 +8127,7 @@ dependencies = [ [[package]] name = "quickwit-telemetry-exporters" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "metrics", @@ -8150,7 +8150,7 @@ dependencies = [ [[package]] name = "quickwit-transport" -version = "0.9.2" +version = "0.9.3" dependencies = [ "anyhow", "arc-swap", diff --git a/quickwit/Cargo.toml b/quickwit/Cargo.toml index af613e7e89d..971138f51c9 100644 --- a/quickwit/Cargo.toml +++ b/quickwit/Cargo.toml @@ -42,7 +42,7 @@ members = [ ] [workspace.package] -version = "0.9.2" +version = "0.9.3" edition = "2024" homepage = "https://quickwit.io/" documentation = "https://quickwit.io/docs/" diff --git a/quickwit/quickwit-ui/package.json b/quickwit/quickwit-ui/package.json index c22a03cb580..b7afed0ac7b 100644 --- a/quickwit/quickwit-ui/package.json +++ b/quickwit/quickwit-ui/package.json @@ -1,6 +1,6 @@ { "name": "quickwit-ui", - "version": "0.9.2", + "version": "0.9.3", "license": "Apache-2.0", "private": true, "packageManager": "yarn@1.22.22",