Commit Graph
6 Commits
Author SHA1 Message Date
Jaipaul Cheernam f4e34250ad libcoap: fix build with OpenSSL 4.0
OpenSSL 4.0 removes ENGINE API entirely. Backport upstream fix
that guards all ENGINE references with version check.

Upstream-Status: Backport [https://github.com/obgm/libcoap/commit/5ea8b7d5e956]
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:16 -07:00
Ankur Tyagi dce4faa77a libcoap: add UPSTREAM_CHECK_GITTAGREGEX variable
Fixes:
$ devtool latest-version libcoap
...
INFO: Current version: 4.3.5b
INFO: Latest version: 4.3.5
INFO: Latest version's commit: 851533c3cf63d16984d370ce39d586ecb3694971

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 22:32:05 -07:00
Peter Marko b171dc9922 libcoap: set status for CVE-2023-51847
Reuse investigation of Debian security group.
As mentioned by [1], this was never present in any release because it
was introduces in 4.3.5 development, however also fixed before release.

[1] https://security-tracker.debian.org/tracker/CVE-2023-51847

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-07-20 23:08:12 -07:00
Khem Raj 8f3df8b447 recipes: Convert licenses to SPDX expressions
- Automatically convert all licenses to valid SPDX license expressions
  using convert-spdx-licenses.py

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-07-20 22:35:47 -07:00
Gyorgy Sarvari 39e99ad532 libcoap: mark CVE-2026-29013 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-29013

The current recipe version contains the fix referenced by the
NVD report. Mark the CVE as patched, because NVD tracks it without
version info.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Gyorgy Sarvari f896922914 libcoap: upgrade 4.3.5a -> 4.3.5b
Contains fix fox CVE-2026-29013

Shortlog:
https://github.com/obgm/libcoap/compare/v4.3.5a...v4.3.5b

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00