-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 29 Dec 2025 18:23:22 +0100 Source: libcoap3 Binary: libcoap3-bin libcoap3-bin-dbgsym libcoap3-dev libcoap3t64 libcoap3t64-dbgsym Architecture: armel Version: 4.3.4-1.1+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Thorsten Alteholz Description: libcoap3-bin - C-Implementation of CoAP - example binaries API version 3 libcoap3-dev - C-Implementation of CoAP - development files API version 3 libcoap3t64 - C-Implementation of CoAP - libraries API version 3 Closes: 1121415 1122290 Changes: libcoap3 (4.3.4-1.1+deb13u2) trixie; urgency=medium . * CVE-2025-59391 (Closes: #1122290) fix OSCORE configuration file parsing issue * CVE-2025-65493 (Closes: 1121415) fix NULL pointer dereference * CVE-2025-65494 fix NULL pointer dereference * CVE-2025-65495 fix integer signedness * CVE-2025-65496 fix NULL pointer dereference * CVE-2025-65497 fix NULL pointer dereference * CVE-2025-65498 fix NULL pointer dereference * CVE-2025-65499 fix array index error * CVE-2025-65500 fix NULL pointer dereference * CVE-2025-65501 fix NULL pointer dereference Checksums-Sha1: e3fa12627e3b5aa1634437440adce00b2acd095f 196712 libcoap3-bin-dbgsym_4.3.4-1.1+deb13u2_armel.deb aacdce5be999da28535673e1fc5727f04c6d739f 69748 libcoap3-bin_4.3.4-1.1+deb13u2_armel.deb 4c4bfe9a94041ffbccb9df0ab716245d1c2ebc45 235948 libcoap3-dev_4.3.4-1.1+deb13u2_armel.deb abca1f6792ec0a777c9c5b40f11ea28497811e1c 10310 libcoap3_4.3.4-1.1+deb13u2_armel-buildd.buildinfo 0569771e7d95531a2a6d79d93fdb818109721710 1008440 libcoap3t64-dbgsym_4.3.4-1.1+deb13u2_armel.deb d2d8fd2cd45f545c4edeca88da9cc41330b0fe7f 298376 libcoap3t64_4.3.4-1.1+deb13u2_armel.deb Checksums-Sha256: c1fa4c89483087e9491d082de20de43f3ba0804e291b6bc896a28db797d91633 196712 libcoap3-bin-dbgsym_4.3.4-1.1+deb13u2_armel.deb 80bf00f596f8225c316c8e386df9fb7fcabdab042289315a9a6731c3317621b0 69748 libcoap3-bin_4.3.4-1.1+deb13u2_armel.deb af988c6b07f0c4503d2d658854c2dc2a05f87d711900ae7ad2162801c37c9353 235948 libcoap3-dev_4.3.4-1.1+deb13u2_armel.deb c2763a2fd581405c79e544955e7111e2db5880962158d70dc3a4f1db7ccfe961 10310 libcoap3_4.3.4-1.1+deb13u2_armel-buildd.buildinfo 7b5fc45a9a4772c8434e4072e957dce42c9a0713bdf00db785319694ea7365f8 1008440 libcoap3t64-dbgsym_4.3.4-1.1+deb13u2_armel.deb af60f22f105f9df529d7045a27298b7141ceb4d7ca38828267605b7eeb1c2ed6 298376 libcoap3t64_4.3.4-1.1+deb13u2_armel.deb Files: f2888d569764fc8ce87e29a91b157e69 196712 debug optional libcoap3-bin-dbgsym_4.3.4-1.1+deb13u2_armel.deb b2f9f0e980bcecb212abe1fe2a8872c1 69748 libs optional libcoap3-bin_4.3.4-1.1+deb13u2_armel.deb fb532adaa45740357951d6cf39094a08 235948 libdevel optional libcoap3-dev_4.3.4-1.1+deb13u2_armel.deb 1bc0389a40011f6e783798652d9dbbda 10310 libs optional libcoap3_4.3.4-1.1+deb13u2_armel-buildd.buildinfo b9249052bb9998746f5b767284052064 1008440 debug optional libcoap3t64-dbgsym_4.3.4-1.1+deb13u2_armel.deb 593f8752b59d577f123c6a90d63f0cf6 298376 libs optional libcoap3t64_4.3.4-1.1+deb13u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmlW8zEACgkQOQKMdMnE H5NvsQ/+ORLJySp4hOg8J/NT0EGHrB9I1W4mAX36DfsFX69SX4+s5gxekN/VHoDD 2RGmmphw2IKRGJ5A8oHosmcGqz+GDO6hD3qzEfKBrZUX5Pnise0Bj9NxnP9ch2vd 6bLvv64F17dIFacpnINxwB85h1F6B8vogUreaRXYs7132JeTnNI3Y6FkrETdWaVM CVU2MLZ0Gtg/2expAP9NYSZImCEBsI8OD2hwgR0PbUc/1DiiuRXUH+Mj/pbZZ7+0 HnTXPGbplBzG3DI2lrc/5JdzgZ3FBOa4qSsovNGqAhb6dhjhRztPzbF9udgf215h Ab6uic+/MSLOt5/UQRs7h6MfyspogVwgmvIrLNBjC4Moi1126+y9Kaem1e3MkMut QBlY9wTmp4NUI/g+K0x+DEc91VxtlYxXmc6htYgK9HbTENH24Dh04Lg5Mhv3OC3x zmP/q2AR5rRfyoIXr8nT7znZTjVhvkRShGZiCdpciTHAPuEvBFP8XtK+dd1HjfVh TEadDgC4e9X+jH6vplL2cJuJyS3nsfxk7DMNIzLuenXarnIR8EzQ78cvwQmTnrSk /6ckwRjGyPbRYa+0eF9+70Cbj1V+niV6wlrHUkXBNtPGFmGtJAzGUUzzRrc/C7sT emKhxIEQKY6qhjBnlj9+hDBw1ee1+w3QDdDFZ5Wr36P4EwIB7W8= =/+Uc -----END PGP SIGNATURE-----