[Git][security-tracker-team/security-tracker][master] Add CVE-2025-34468/libcoap3

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
739dab9a by Salvatore Bonaccorso at 2025-12-31T21:30:37+01:00
Add CVE-2025-34468/libcoap3

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -253,7 +253,10 @@ CVE-2025-49334 (Authorization Bypass Through User-Controlled Key vulnerability i
 CVE-2025-49028 (Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho Zept ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2025-34468 (libcoap versions up to and including 4.3.5, prior to commit 30db3ea, c ...)
-	TODO: check
+	- libcoap3 <unfixed>
+	NOTE: https://github.com/obgm/libcoap/pull/1737
+	NOTE: Fixed by: https://github.com/obgm/libcoap/commit/30db3eaa1f0464722ebea2ca2d5084aebfbd344d (develop)
+	NOTE: Fixed by: https://github.com/obgm/libcoap/commit/cc9aba6e01973b7cc06b7b20d0986411e5f5e2ef (v4.3.5a)
 CVE-2025-34467 (ZwiiCMSversions prior to13.7.00 contain a denial-of-service vulnerabil ...)
 	NOT-FOR-US: ZwiiCMS
 CVE-2025-23757 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/739dab9a4a4496b8da4eaf84a0aa03a8a679caef

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/739dab9a4a4496b8da4eaf84a0aa03a8a679caef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251231/37b06a1e/attachment.htm>