Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 40: Critical libcoap Update Addressing CVE-2024-31031 Released

fedora
Calendar Grey May 3, 2024
Dist Fedora Esm H88
Update released for CVE-2024-31031 affecting Fedora 40's libcoap library, aimed at improving both security measures and overall system efficiency.
Patch to fix CVE-2024-31031

Summary

The Constrained Application Protocol (CoAP) is a specialized web transfer

protocol for use with constrained nodes and constrained networks in the Internet

of Things. The protocol is designed for machine-to-machine (M2M) applications

such as smart energy and building automation.

libcoap implements a lightweight application-protocol for devices with

constrained resources such as computing power, RF range, memory, bandwidth,

or network packet sizes. This protocol, CoAP, was standardized in the IETF

working group "CoRE" as RFC 7252.

Update Information:

Patch to fix CVE-2024-31031

Topics%20covered

Topics Covered

security advisory Fedora patching libcoap unsigned integer overflow C library update

Change Log

* Wed Apr 24 2024 Peter Robinson - 4.3.4a-2 - Patch to fix CVE-2024-31031

References


[ 1 ] Bug #2275804 - CVE-2024-31031 libcoap: unsigned integer overflow vulnerability in coap_pdu.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2275804

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-75863445ff' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libcoap
Product: Fedora 40
Version: 4.3.4a
Release: 2.fc40
URL: https://libcoap.net/
Summary: C library implementation of CoAP

Topics%20covered

Topics Covered

security advisory Fedora patching libcoap unsigned integer overflow C library update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here