Fedora 40: ofono 2024-112fde4e1b Security Advisory Updates
Summary
oFono.org is a place to bring developers together around designing an
infrastructure for building mobile telephony (GSM/UMTS) applications.
oFono includes a high-level D-Bus API for use by telephony applications.
oFono also includes a low-level plug-in API for integrating with telephony
stacks, cellular modems and storage back-ends.
Update Information:
Update to v2.14
Change Log
* Sat Dec 28 2024 Artur Frenszek-Iwicki
References
[ 1 ] Bug #2303457 - CVE-2024-7547 ofono: oFono: Stack-based Buffer Overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2303457
[ 2 ] Bug #2303595 - CVE-2024-7546 ofono: ofono: Buffer Overflow Privilege Escalation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2303595
[ 3 ] Bug #2303597 - CVE-2024-7544 ofono: oFono: Heap-based Buffer Overflow Privilege Escalation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2303597
[ 4 ] Bug #2303598 - CVE-2024-7543 ofono: oFono: Heap-based Buffer Overflow Privilege Escalation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2303598
[ 5 ] Bug #2332134 - ofono-2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2332134
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-112fde4e1b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label