libcoap3 (4.3.5-2) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/debian-iot-team/libcoap3.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/sid
Path: debian/changelog
Repo size: 2138112
Browser: https://salsa.debian.org/debian-iot-team/libcoap3
Last scan: 2026-01-01 22:37:03+00
Next scan: 2026-01-09 22:55:00+00
CI pipeline status: success

Debian changelog in Git:

libcoap3 (4.3.5-2) unstable; urgency=medium

  * add fonts-urw-base35 as dependency
    (to install the missing URW Type 1 fonts, Closes: #1122433)
  * add spelling.patch
  * CVE-2025-59391 (Closes: #1122290)
    fix OSCORE configuration file parsing issue
  * CVE-2025-65493 (Closes: 1121415)
    fix NULL pointer dereference
  * CVE-2025-65494
    fix NULL pointer dereference
  * CVE-2025-65495
    fix integer signedness
  * CVE-2025-65496
    fix NULL pointer dereference
  * CVE-2025-65497
    fix NULL pointer dereference
  * CVE-2025-65498
    fix NULL pointer dereference
  * CVE-2025-65499
    fix array index error
  * CVE-2025-65500
    fix NULL pointer dereference
  * CVE-2025-65501
    fix NULL pointer dereference

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 21 Dec 2025 10:23:22 +0100

This branch is even with tag debian/4.3.5-2