diff mbox series

[meta-networking,6/6] libcoap: set status for CVE-2023-51847

Message ID 20260720192732.28245-6-peter.marko@siemens.com
State Under Review
Headers show
Series [meta-oe,1/6] grpc: set status for CVE-2023-33953 and CVE-2024-37168 | expand

Commit Message

Marko, Peter July 20, 2026, 7:27 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Reuse investigation of Debian security group.
As mentioned by [1], this was never present in any release because it
was introduces in 4.3.5 development, however also fixed before release.

[1] https://security-tracker.debian.org/tracker/CVE-2023-51847

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb b/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb
index 7ea3eba1b0..7252be8b1e 100644
--- a/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb
+++ b/meta-networking/recipes-devtools/libcoap/libcoap_4.3.5b.bb
@@ -63,5 +63,6 @@  PACKAGE_BEFORE_PN += "\
 FILES:${PN}-bin = "${bindir}"
 FILES:${PN}-dev += "${datadir}/${BPN}/examples"
 
+CVE_STATUS[CVE-2023-51847] = "fixed-version: both introduced and fixed in 4.3.5"
 CVE_STATUS[CVE-2025-50518] = "disputed: happens only when library is used incorrectly"
 CVE_STATUS[CVE-2026-29013] = "fixed-version: fixed in 4.3.5b"