Skip to content

Monocoque

v0.1.0 Security

This release includes 5 security fixes for security teams reviewing exposed deployments.

Published 1mo Streaming & Message Queues
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 5 known CVEs

Affected surfaces

crypto_tls

Summary

AI summary

Fix/security curve encryption and harden ZMTP security with timing side‑channel fixes.

Full changelog

What's Changed

  • Feat/production ready by @vorjdux in https://github.com/vorjdux/monocoque/pull/62
  • docs: merge PERFORMANCE.md into performance.md, remove duplicate by @vorjdux in https://github.com/vorjdux/monocoque/pull/63
  • Feat/production ready by @vorjdux in https://github.com/vorjdux/monocoque/pull/64
  • docs: remove mid-development artifacts, keep only useful references by @vorjdux in https://github.com/vorjdux/monocoque/pull/65
  • Feat/production ready by @vorjdux in https://github.com/vorjdux/monocoque/pull/66
  • Feat/production ready by @vorjdux in https://github.com/vorjdux/monocoque/pull/67
  • Feat/production ready by @vorjdux in https://github.com/vorjdux/monocoque/pull/68
  • fix: post-audit N-1/N-3/N-5/N-6 corrections in CurveZMQ and ZAP by @vorjdux in https://github.com/vorjdux/monocoque/pull/69
  • fix(curve): add ZMTP framing to CURVE handshake and variable-size INI… by @vorjdux in https://github.com/vorjdux/monocoque/pull/70
  • Fix/security curve encryption by @vorjdux in https://github.com/vorjdux/monocoque/pull/71
  • fix(security): wire CURVE cipher in try_reconnect, PUB, and XPUB sockets by @vorjdux in https://github.com/vorjdux/monocoque/pull/72
  • fix(security): encrypt SUB/XSUB subscription events, reject CURVE-mod… by @vorjdux in https://github.com/vorjdux/monocoque/pull/73
  • fix: harden ZMTP security - timing side-channels, key zeroization, de… by @vorjdux in https://github.com/vorjdux/monocoque/pull/74
  • fix: guard against u64->usize overflow in CURVE frame length parsing by @vorjdux in https://github.com/vorjdux/monocoque/pull/75
  • Fix/security hardening by @vorjdux in https://github.com/vorjdux/monocoque/pull/76
  • fix: resolve all CI failures (clippy, rustfmt, fuzz, docs, audit) by @vorjdux in https://github.com/vorjdux/monocoque/pull/77
  • fix: move audit.toml to .cargo/audit.toml where cargo-audit reads it by @vorjdux in https://github.com/vorjdux/monocoque/pull/78
  • Fix/ci failures by @vorjdux in https://github.com/vorjdux/monocoque/pull/79

Full Changelog: https://github.com/vorjdux/monocoque/commits/v0.1.0

Security Fixes

  • Fix/security curve encryption
  • fix(security): wire CURVE cipher in try_reconnect, PUB, and XPUB sockets
  • fix(security): encrypt SUB/XSUB subscription events, reject CURVE-mod…
  • fix: harden ZMTP security - timing side‑channels, key zeroization
  • Fix/security hardening
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Monocoque

Get notified when new releases ship.

Sign up free

About Monocoque

All releases →

Related context

Related tools

Beta — feedback welcome: [email protected]