-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 21 Dec 2025 10:23:22 +0100 Source: libcoap3 Architecture: source Version: 4.3.5-2 Distribution: unstable Urgency: medium Maintainer: Debian IoT Maintainers <debian-iot-maintainers@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 1121415 1122290 1122433 Changes: libcoap3 (4.3.5-2) unstable; urgency=medium . * add fonts-urw-base35 as dependency (to install the missing URW Type 1 fonts, Closes: #1122433) * add spelling.patch * CVE-2025-59391 (Closes: #1122290) fix OSCORE configuration file parsing issue * CVE-2025-65493 (Closes: 1121415) fix NULL pointer dereference * CVE-2025-65494 fix NULL pointer dereference * CVE-2025-65495 fix integer signedness * CVE-2025-65496 fix NULL pointer dereference * CVE-2025-65497 fix NULL pointer dereference * CVE-2025-65498 fix NULL pointer dereference * CVE-2025-65499 fix array index error * CVE-2025-65500 fix NULL pointer dereference * CVE-2025-65501 fix NULL pointer dereference Checksums-Sha1: 37df3d0b137a36694302c21ef97f4cca873f18f1 2394 libcoap3_4.3.5-2.dsc 4f652109f730eb7494c0880fecd46b049fdabb47 588595 libcoap3_4.3.5.orig.tar.bz2 fb8043b167d1802d0b9c3d7a1d85ad890490127b 13064 libcoap3_4.3.5-2.debian.tar.xz f57ce0d28eec371f130a4e6ce5d600d7fa0b82fa 11005 libcoap3_4.3.5-2_amd64.buildinfo Checksums-Sha256: fa7ef88cd5535cb128ab8fc4146f4773e8f65ac4f43e1a2d78f6b83a38692552 2394 libcoap3_4.3.5-2.dsc a332b682ceacef4c3130b2fb17851db02020c3f64b8a562c1ffd8d9b8a9320d4 588595 libcoap3_4.3.5.orig.tar.bz2 e9055ead5a0560a9aa9ed55f27cc2a4abfbf93c23588f6e951401e01ee1d2a64 13064 libcoap3_4.3.5-2.debian.tar.xz 7ae1aeb4f4853dfa14b6957ef3537fbacb75977d69a2cb8c56630fb1eeac9a06 11005 libcoap3_4.3.5-2_amd64.buildinfo Files: 86c14039f608e00c78a5b6f9f251dd4e 2394 libs optional libcoap3_4.3.5-2.dsc 86c5364cd4c5a7d7eb94e560ec777969 588595 libs optional libcoap3_4.3.5.orig.tar.bz2 39a6701735ce8d3535fd3f1d712a1fae 13064 libs optional libcoap3_4.3.5-2.debian.tar.xz 2f90d41c249978b7ca9835db8a35808d 11005 libs optional libcoap3_4.3.5-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmlH5DZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRzGnEADFyQKwhEf/VcXBcWf/fSQTu5hI1Cro aeairAgzMMBO8bzRjszTUSVWGOgafHJSjpyZ9YrJuvlNwk85HjAlw4kc/WUARWNL Z+mvptR4yx4lDAwGRRevWNM/p6+a7A6UrVab2E65PgbxD91oWjDmc/j5+aJ7fwUW Vc7d6N5cWJ7UMMXkcwGatzPTc5qXfhZatklMeh7rUpwC6ZimiwKZJbpxR/EOPXcV bq4ApYw4tM9vAu2vUSQ69lfQoKSh3667oTmtbTYxWmBWES67xY9Xw3yR8/a1PDbc yrvii7VyXBKBXPxgFii2eEmzHsyS0UM//o6nh+l2QFqW+W0Pkb8IGcd6hyL0X+BY sKpHKsHxdfNAbk+xxy/Ccx4QqRYsW35JTFAf2WYUFyvueOw8E+RyVGcmQTkoIbZk VRmEtJmnuTqStd1tVux0PalFZGFZC51rZ49Muw1gLpfBx0gvF1lZ2c6KPPT198uQ O4bKzQZKuS8+NZbsaTQDoXETvQ3VswpBdSd9kpwVXgtI51yUibrUZRtybTesxv/+ 0+9LYYrgzXrLjxo0t1HBCpLtzArp8egcp4fVn0I8vPTQZgrsa4gcLHI7/iKbWnLJ oG5sw1QK4avZotUDbZYAaZq6Dz/nlmbcMDlJ7jdCpm9ynKYzlNlqTp/yAS9A6ErX B9ASvRmiheqSDg== =luqk -----END PGP SIGNATURE-----
