Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora 39: FEDORA-2024-450b75e4a0 Moderate: libcoap Integer Overflow

fedora
Calendar Grey May 3, 2024
Dist Fedora Esm H88
This release tackles CVE-2024-31032 affecting libcoap in Fedora 39, strengthening defenses through an important fix.
Patch to fix CVE-2024-31031

Summary

The Constrained Application Protocol (CoAP) is a specialized web transfer

protocol for use with constrained nodes and constrained networks in the Internet

of Things. The protocol is designed for machine-to-machine (M2M) applications

such as smart energy and building automation.

libcoap implements a lightweight application-protocol for devices with

constrained resources such as computing power, RF range, memory, bandwidth,

or network packet sizes. This protocol, CoAP, was standardized in the IETF

working group "CoRE" as RFC 7252.

Update Information:

Patch to fix CVE-2024-31031

Change Log

* Wed Apr 24 2024 Peter Robinson - 4.3.4a-2 - Patch to fix CVE-2024-31031

References


[ 1 ] Bug #2275804 - CVE-2024-31031 libcoap: unsigned integer overflow vulnerability in coap_pdu.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2275804

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-450b75e4a0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: libcoap
Product: Fedora 39
Version: 4.3.4a
Release: 2.fc39
Summary: C library implementation of CoAP

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here