linux/meta-openembedded.git/meta-networking/recipes-devtools/libcoap, branch whinlatter

libcoap: patch CVE-2026-29013

2026-05-08T01:52:44+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-29013 Debian[1] also identified this as a fix. [1] https://security-tracker.debian.org/tracker/CVE-2026-29013 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

libcoap: set CVE version suffix

2026-01-20T04:45:11+00:00

CVE metrics currently report CVE-2025-34468 as open. CPE is <=4.3.5, while recipe version is 4.3.5a which is a higher version, however by default cve-check only compares numbers. Signed-off-by: Peter Marko Signed-off-by: Anuj Mittal

libcoap: ignore CVE-2025-50518

2026-01-06T12:37:55+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-50518 The vulnerability is disputed by upstream, because the vulnerability requires a user error, incorrect library usage. See also an upstream discussion in a related (rejected) PR: https://github.com/obgm/libcoap/pull/1726 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 598176e1cb6c928e322e26d358e8d01ba9d5af0a) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

libcoap: upgrade 4.3.5 -> 4.3.5a

2025-12-17T08:27:21+00:00

Changelog [1]: * Fixes the following CVEs CVE-2025-59391 CVE-2025-65494 CVE-2025-65495 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65499 CVE-2025-65500 CVE-2025-65501 * CVE-2025-50518 not fixed as user application error. * Support for Mbed TLS 3.6.3. * Support for RIOT update changes. * Fixes for later CI environment builds. * Critical reported bugs fixed. Add tag to SRC_URI for hash verification. License-Update: copyright years refreshed [2] [1] https://github.com/obgm/libcoap/blob/v4.3.5a/ChangeLog [2] https://github.com/obgm/libcoap/commit/993c12ac92ce6a24a409924fe78a5c0fe7246699 Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 6a9cc44a92a1fb817d68de3190219626dcf96d2d) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

meta-openembedded/all: adapt to UNPACKDIR changes

2025-06-25T13:44:52+00:00

Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj

libcoap: Add PACKAGECONFIG[wolfssl]

2025-06-20T17:34:11+00:00

Signed-off-by: Alex Kiernan Signed-off-by: Khem Raj

libcoap: Upgrade 4.3.4 -> 4.3.5

2025-06-20T17:34:11+00:00

Drop backport of CVE-2024-0962. Change summary for version 4.3.5: * Support for wolfSSL TLS library. * Support for DTLS1.3 (using wolfSSL). * Support for Mbed TLS 3.6.0. * Support for EC-JPAKE (Mbed TLS) * TinyDTLS version update. * Support for RIOT using SOCK i/f. * Support for LwIP 2.2.0. * Support for LwIP using NO_SYS set to 0. * Support for (Posix based) Zephyr. * Support for QNX builds. * Support for ESP32 xtensa builds. * Updated Contiki-NG support. * Support for multi-thread safe libcoap usage. * Support for defining binary PSK for coap-client and coap-server. * Support for Connection-ID (CID) (Mbed TLS, wolfSSL and TinyDTLS). * Added new define types for defining PKI parameters. * Support for user definable ENGINE for OpenSSL. * Support for using noTLS and TinyDTLS with WebSockets. * Support for providing list of compilation #defines. * Support for proxy code running within lbcoap. * Cleaned up support for building .h files. * Additional scan-build and pre-commit checks in build tests. * Updated CI build tests to use latest action versions. * Fixes CVE-2023-35862. * Reported bugs fixed. * Documentation added and updated (Doxygen and man). License-Update: Updated years Signed-off-by: Alex Kiernan Signed-off-by: Khem Raj

recipes: Fix variable assignment whitespace

2025-03-20T15:46:56+00:00

Signed-off-by: Richard Purdie Signed-off-by: Khem Raj

recipes: Fix variable assignment whitespace

2025-01-31T18:34:03+00:00

Recipes are much more readable with whitespace around the assignment operators. Fix various assignments in meta-openembedded recipes to show this is definitely the preferred formatting. This fixes recipes with larger numbers of issues but there are just under 100 other references left to fix. Signed-off-by: Richard Purdie Signed-off-by: Khem Raj

recipes: Start WORKDIR -> UNPACKDIR transition

2024-05-23T15:44:44+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj