-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: amd64
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 ef5acc2299f68330a849af93b13ae45fb56a6db8 248076 liblwip-dev_2.2.1+dfsg1-1+deb13u1_amd64.deb
 ea1f3183a8fba66b58df7b24a1fd1e3d41822aef 296916 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_amd64.deb
 a91ffb62044fa3dbb5c0a4370f1ec51a9dca8bfc 176292 liblwip0t64_2.2.1+dfsg1-1+deb13u1_amd64.deb
 6dfad46d81abc9d8b9af732b706af8ad0b2f28e5 7658 lwip_2.2.1+dfsg1-1+deb13u1_amd64-buildd.buildinfo
Checksums-Sha256:
 4052b3116869c084324c6c76e32bd9e797ebe4da5318027254037c9bbdf1bae0 248076 liblwip-dev_2.2.1+dfsg1-1+deb13u1_amd64.deb
 9a52d7613c66571c9114fde1840d4ebef51b7c891209ff4b5f37b1f52ab5b4b4 296916 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_amd64.deb
 3d8d6e2fd143f60bafcf50235f8ca89b204a9cc9df138b2ba5eae5664d9c62ad 176292 liblwip0t64_2.2.1+dfsg1-1+deb13u1_amd64.deb
 91338ee9407b547b13dcf230f8a17c6963996ec1f26ef9570629a1975d7e3c59 7658 lwip_2.2.1+dfsg1-1+deb13u1_amd64-buildd.buildinfo
Files:
 51d9b003a3657c22f385ef1193b3cc2a 248076 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_amd64.deb
 bed065454bd00155353e998876de5a39 296916 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_amd64.deb
 65c7fff28415f16996e6c6cee7b90276 176292 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_amd64.deb
 7748134b1db8974dbbd016f2bd596598 7658 libs optional lwip_2.2.1+dfsg1-1+deb13u1_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=tfjU
-----END PGP SIGNATURE-----