libcoap3 (4.3.5-4ubuntu1) stonking; urgency=medium

  * Fix build with OpenSSL 4 (LP: #2154852)
    - d/p/support-openssl-4.patch

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Mon, 24 Aug 2026 12:20:31 +0200

libcoap3 (4.3.5-4) unstable; urgency=medium

  * support openssl 4.0 (Closes: #1138305)
    (thanks to Ravi Kant Sharma for pointing to the upstream commit)

 -- Thorsten Alteholz <debian@alteholz.de>  Mon, 22 Jun 2026 10:23:22 +0200

libcoap3 (4.3.5-3) unstable; urgency=medium

  * CVE-2026-29013 (Closes: #1134340)
    fix out-of-bounds read
  * CVE-2025-34468 (Closes: #1124407)
    fix stack-based buffer overflow
  * debian/contol: bump standard to 4.7.4 (no changes)

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 19 Apr 2026 10:23:22 +0200

libcoap3 (4.3.5-2) unstable; urgency=medium

  * add fonts-urw-base35 as dependency
    (to install the missing URW Type 1 fonts, Closes: #1122433)
  * add spelling.patch
  * CVE-2025-59391 (Closes: #1122290)
    fix OSCORE configuration file parsing issue
  * CVE-2025-65493 (Closes: 1121415)
    fix NULL pointer dereference
  * CVE-2025-65494
    fix NULL pointer dereference
  * CVE-2025-65495
    fix integer signedness
  * CVE-2025-65496
    fix NULL pointer dereference
  * CVE-2025-65497
    fix NULL pointer dereference
  * CVE-2025-65498
    fix NULL pointer dereference
  * CVE-2025-65499
    fix array index error
  * CVE-2025-65500
    fix NULL pointer dereference
  * CVE-2025-65501
    fix NULL pointer dereference

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 21 Dec 2025 10:23:22 +0100

libcoap3 (4.3.5-1) unstable; urgency=medium

  * Team upload (Closes: #1111914)
  * New upstream release.
    This release contains fixes for:
        CVE-2023-51847, CVE-2024-46304, CVE-2024-31031
        CVE-2024-0962
    (Closes: #1084981)
    (Closes: #1070362)
    (Closes: #1061704)
  * debian/control: add myself to Uploader:
                    thanks Carsten for taking care of this
                    package all the years
                    (Closes: #1062655)
  * debian/contol: bump standard to 4.7.2 (no changes)

 -- Thorsten Alteholz <debian@alteholz.de>  Mon, 25 Aug 2025 19:23:22 +0200

libcoap3 (4.3.4-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062257

 -- Benjamin Drung <bdrung@debian.org>  Thu, 29 Feb 2024 18:39:26 +0000

libcoap3 (4.3.4-1) unstable; urgency=medium

  * [bd299e2] New upstream version 4.3.4

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sat, 28 Oct 2023 06:11:11 +0200

libcoap3 (4.3.3-1) unstable; urgency=medium

  * [982e6ed] d/watch: Add compression typ
  * [0f2bff8] New upstream version 4.3.3
  * [31bc595] Drop patch queue
  * [12db7be] d/rules: Don't clean out all files named Makefile
  * [ea81a89] d/rules: Also only remove coap_config.h in $(topdir)
  * [5097258] d/copyright: Update copyright data
  * [28e579a] d/control: Update package descriptions
  * [1070935] d/copyright: Drop non needed file

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sun, 17 Sep 2023 01:05:31 +0530

libcoap3 (4.3.1-2) unstable; urgency=medium

  * [ff7e712] Rebuild patch queue from patch-queue branch
    Added patch:
    CVE-2023-30362-Fix-buffer-overflow-in-coap_send_internal.patch
    (Closes: #1040594)
  * [2d091bc] d/control: Update Standards-Version to 4.6.2
    No further changes needed.

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sat, 08 Jul 2023 13:07:15 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libcoap3-doc`.
