linux/meta-openembedded.git/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5a.bb, branch master

libcoap: upgrade 4.3.5a -> 4.3.5b

2026-04-20T14:35:34+00:00

Contains fix fox CVE-2026-29013 Shortlog: https://github.com/obgm/libcoap/compare/v4.3.5a...v4.3.5b Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

libcoap: set CVE version suffix

2026-01-20T16:16:57+00:00

CVE metrics currently report CVE-2025-34468 as open. CPE is <=4.3.5, while recipe version is 4.3.5a which is a higher version, however by default cve-check only compares numbers. Signed-off-by: Peter Marko Signed-off-by: Khem Raj

libcoap: ignore CVE-2025-50518

2025-12-17T03:57:34+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-50518 The vulnerability is disputed by upstream, because the vulnerability requires a user error, incorrect library usage. See also an upstream discussion in a related (rejected) PR: https://github.com/obgm/libcoap/pull/1726 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

libcoap: upgrade 4.3.5 -> 4.3.5a

2025-12-04T14:06:46+00:00

Changelog [1]: * Fixes the following CVEs CVE-2025-59391 CVE-2025-65494 CVE-2025-65495 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65499 CVE-2025-65500 CVE-2025-65501 * CVE-2025-50518 not fixed as user application error. * Support for Mbed TLS 3.6.3. * Support for RIOT update changes. * Fixes for later CI environment builds. * Critical reported bugs fixed. Add tag to SRC_URI for hash verification. License-Update: copyright years refreshed [2] [1] https://github.com/obgm/libcoap/blob/v4.3.5a/ChangeLog [2] https://github.com/obgm/libcoap/commit/993c12ac92ce6a24a409924fe78a5c0fe7246699 Signed-off-by: Peter Marko Signed-off-by: Khem Raj