3 Commits

Author	SHA1	Message	Date
Peter Marko	ba84c52d55	libcoap: patch CVE-2024-31031 ... Pick commit [1] from [2] which fixes [3] as listed in [4]. [1] 214665ac4b [2] https://github.com/obgm/libcoap/pull/1352 [3] https://github.com/obgm/libcoap/issues/1351 [4] https://nvd.nist.gov/vuln/detail/CVE-2024-31031 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>	2025-08-02 13:37:04 -04:00
alperak	4e7573011d	libcoap: fix CVE-2024-0962 ... CVE-2024-0962: A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. Upstream-Status: Backport [https://github.com/obgm/libcoap/pull/1311] WARNING: libcoap-4.3.4-r0 do_cve_check: Found unpatched CVE (CVE-2024-0962) This vulnerability is only exist in 4.3.4. Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>	2024-04-14 08:38:42 -07:00
Wang Mingyu	b71cd660fc	libcoap: upgrade 4.3.3 -> 4.3.4 ... Changelog: =========== * Clean up use of tags. * Support for MacOS with Contiki-NG builds. * Support for Windows with OpenSSL 3.x builds. * Reported bugs fixed. * Documentation updated. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>	2023-10-23 08:05:01 -07:00