-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 21 Dec 2025 10:23:22 +0100
Source: libcoap3
Architecture: source
Version: 4.3.5-2
Distribution: unstable
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1121415 1122290 1122433
Changes:
libcoap3 (4.3.5-2) unstable; urgency=medium
.
* add fonts-urw-base35 as dependency
(to install the missing URW Type 1 fonts, Closes: #1122433)
* add spelling.patch
* CVE-2025-59391 (Closes: #1122290)
fix OSCORE configuration file parsing issue
* CVE-2025-65493 (Closes: 1121415)
fix NULL pointer dereference
* CVE-2025-65494
fix NULL pointer dereference
* CVE-2025-65495
fix integer signedness
* CVE-2025-65496
fix NULL pointer dereference
* CVE-2025-65497
fix NULL pointer dereference
* CVE-2025-65498
fix NULL pointer dereference
* CVE-2025-65499
fix array index error
* CVE-2025-65500
fix NULL pointer dereference
* CVE-2025-65501
fix NULL pointer dereference
Checksums-Sha1:
37df3d0b137a36694302c21ef97f4cca873f18f1 2394 libcoap3_4.3.5-2.dsc
4f652109f730eb7494c0880fecd46b049fdabb47 588595 libcoap3_4.3.5.orig.tar.bz2
fb8043b167d1802d0b9c3d7a1d85ad890490127b 13064 libcoap3_4.3.5-2.debian.tar.xz
f57ce0d28eec371f130a4e6ce5d600d7fa0b82fa 11005 libcoap3_4.3.5-2_amd64.buildinfo
Checksums-Sha256:
fa7ef88cd5535cb128ab8fc4146f4773e8f65ac4f43e1a2d78f6b83a38692552 2394 libcoap3_4.3.5-2.dsc
a332b682ceacef4c3130b2fb17851db02020c3f64b8a562c1ffd8d9b8a9320d4 588595 libcoap3_4.3.5.orig.tar.bz2
e9055ead5a0560a9aa9ed55f27cc2a4abfbf93c23588f6e951401e01ee1d2a64 13064 libcoap3_4.3.5-2.debian.tar.xz
7ae1aeb4f4853dfa14b6957ef3537fbacb75977d69a2cb8c56630fb1eeac9a06 11005 libcoap3_4.3.5-2_amd64.buildinfo
Files:
86c14039f608e00c78a5b6f9f251dd4e 2394 libs optional libcoap3_4.3.5-2.dsc
86c5364cd4c5a7d7eb94e560ec777969 588595 libs optional libcoap3_4.3.5.orig.tar.bz2
39a6701735ce8d3535fd3f1d712a1fae 13064 libs optional libcoap3_4.3.5-2.debian.tar.xz
2f90d41c249978b7ca9835db8a35808d 11005 libs optional libcoap3_4.3.5-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=luqk
-----END PGP SIGNATURE-----
Attachment:
pgpCxS8omL_HN.pgp
Description: PGP signature