libcoap3 (4.3.5-4build1) stonking; urgency=medium

  * No-change rebuild against libssl4

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Thu, 23 Jul 2026 14:28:49 +0000

libcoap3 (4.3.5-4) unstable; urgency=medium

  * support openssl 4.0 (Closes: #1138305)
    (thanks to Ravi Kant Sharma for pointing to the upstream commit)

 -- Thorsten Alteholz <debian@alteholz.de>  Mon, 22 Jun 2026 10:23:22 +0200

libcoap3 (4.3.5-3) unstable; urgency=medium

  * CVE-2026-29013 (Closes: #1134340)
    fix out-of-bounds read
  * CVE-2025-34468 (Closes: #1124407)
    fix stack-based buffer overflow
  * debian/contol: bump standard to 4.7.4 (no changes)

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 19 Apr 2026 10:23:22 +0200

libcoap3 (4.3.5-2) unstable; urgency=medium

  * add fonts-urw-base35 as dependency
    (to install the missing URW Type 1 fonts, Closes: #1122433)
  * add spelling.patch
  * CVE-2025-59391 (Closes: #1122290)
    fix OSCORE configuration file parsing issue
  * CVE-2025-65493 (Closes: 1121415)
    fix NULL pointer dereference
  * CVE-2025-65494
    fix NULL pointer dereference
  * CVE-2025-65495
    fix integer signedness
  * CVE-2025-65496
    fix NULL pointer dereference
  * CVE-2025-65497
    fix NULL pointer dereference
  * CVE-2025-65498
    fix NULL pointer dereference
  * CVE-2025-65499
    fix array index error
  * CVE-2025-65500
    fix NULL pointer dereference
  * CVE-2025-65501
    fix NULL pointer dereference

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 21 Dec 2025 10:23:22 +0100

libcoap3 (4.3.5-1) unstable; urgency=medium

  * Team upload (Closes: #1111914)
  * New upstream release.
    This release contains fixes for:
        CVE-2023-51847, CVE-2024-46304, CVE-2024-31031
        CVE-2024-0962
    (Closes: #1084981)
    (Closes: #1070362)
    (Closes: #1061704)
  * debian/control: add myself to Uploader:
                    thanks Carsten for taking care of this
                    package all the years
                    (Closes: #1062655)
  * debian/contol: bump standard to 4.7.2 (no changes)

 -- Thorsten Alteholz <debian@alteholz.de>  Mon, 25 Aug 2025 19:23:22 +0200

libcoap3 (4.3.4-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062257

 -- Benjamin Drung <bdrung@debian.org>  Thu, 29 Feb 2024 18:39:26 +0000

libcoap3 (4.3.4-1) unstable; urgency=medium

  * [bd299e2] New upstream version 4.3.4

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sat, 28 Oct 2023 06:11:11 +0200

libcoap3 (4.3.3-1) unstable; urgency=medium

  * [982e6ed] d/watch: Add compression typ
  * [0f2bff8] New upstream version 4.3.3
  * [31bc595] Drop patch queue
  * [12db7be] d/rules: Don't clean out all files named Makefile
  * [ea81a89] d/rules: Also only remove coap_config.h in $(topdir)
  * [5097258] d/copyright: Update copyright data
  * [28e579a] d/control: Update package descriptions
  * [1070935] d/copyright: Drop non needed file

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sun, 17 Sep 2023 01:05:31 +0530

libcoap3 (4.3.1-2) unstable; urgency=medium

  * [ff7e712] Rebuild patch queue from patch-queue branch
    Added patch:
    CVE-2023-30362-Fix-buffer-overflow-in-coap_send_internal.patch
    (Closes: #1040594)
  * [2d091bc] d/control: Update Standards-Version to 4.6.2
    No further changes needed.

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sat, 08 Jul 2023 13:07:15 +0200

libcoap3 (4.3.1-1) unstable; urgency=medium

  [ Debian Janitor ]
  * [67731af] Set upstream metadata fields: Repository.

  [ Carsten Schoenert ]
  * [99a9767] New upstream version 4.3.1
  * [3daaf3d] Rebuild patch queue from patch-queue branch
    Added patches:
    Modeline-Correct-vim-modline-syntax.patch
    Spelling-Fix-minor-spelling-and-typos.patch
    Dropped patch (applied upstream):
    pkg-config-Don-t-use-hard-coded-binary.patch
  * [c91abcf] d/control: Update some build dependencies
  * [b87ad73] d/control: Update Standards-Version to 4.6.1
    No further changes needed.
  * [baf2a70] d/u/metadata: Add some more data

 -- Carsten Schoenert <c.schoenert@t-online.de>  Mon, 28 Nov 2022 11:51:55 +0100

libcoap3 (4.3.0-2) unstable; urgency=medium

  * [e1af96c] Rebuild patch queue from patchqueue branch
    Added patch: pkg-config-Don-t-use-hard-coded-binary.patch
    (Closes: #996652)

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sun, 17 Oct 2021 09:18:09 +0200

libcoap3 (4.3.0-1) unstable; urgency=medium

  * [54d24e4] d/gbp.conf: Adjust to unstable
  * [d523e17] d/control: Update Standards-Version to 4.6.0
    No further changes needed.
  * [8dc446d] d/libcoap3.lintian-overrides: Small typo fixes
  * [21e33a3] d/libcoap3-bin.lintian-overrides: Catch up issue more generic

 -- Carsten Schoenert <c.schoenert@t-online.de>  Fri, 17 Sep 2021 20:45:39 +0200

libcoap3 (4.3.0-1~exp1) experimental; urgency=medium

  * [2648182] New upstream version 4.3.0
  * [0cc065f] Remove patch queue
    No need any more for a patch queue right now.
  * [6c00820] d/libcoap3.docs: Also install the file README
  * [e71020f] d/rules: Add new default configure options
  * [d316b54] d/rules: Don't remove all files named *Makefile
  * [a391b91] d/libcoap3-dev.doc: New sequencer to get examples installed
  * [3c70fd8] d/control: Adding Rules-Requires-Root entry
  * [3a0f766] d/libcoap3-bin.lintian-overrides: Ignore one advice

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sun, 27 Jun 2021 09:21:15 +0200

libcoap3 (4.3.0~rc2-1) experimental; urgency=medium

  * initial packaging (Closes: #987417)
  * [afafa79] New upstream version 4.3.0~rc2

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sat, 24 Apr 2021 08:50:07 +0200
