From b171dc9922defbdef0f72c6fe16b19c968576618 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Mon, 20 Jul 2026 21:27:32 +0200 Subject: [PATCH] libcoap: set status for CVE-2023-51847 Reuse investigation of Debian security group. As mentioned by [1], this was never present in any release because it was introduces in 4.3.5 development, however also fixed before release. [1] https://security-tracker.debian.org/tracker/CVE-2023-51847 Signed-off-by: Peter Marko Signed-off-by: Khem Raj --- meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb b/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb index 16f45c57fd..e8864dcf34 100644 --- a/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb +++ b/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb @@ -63,5 +63,6 @@ PACKAGE_BEFORE_PN += "\ FILES:${PN}-bin = "${bindir}" FILES:${PN}-dev += "${datadir}/${BPN}/examples" +CVE_STATUS[CVE-2023-51847] = "fixed-version: both introduced and fixed in 4.3.5" CVE_STATUS[CVE-2025-50518] = "disputed: happens only when library is used incorrectly" CVE_STATUS[CVE-2026-29013] = "fixed-version: fixed in 4.3.5b"