-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: arm64
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 77e11fa09eed7020f3452cde09bca4d8ba7442f3 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_arm64.deb
 41ac9e5caba0d190d771b2ae4133cde35b0c780c 293104 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_arm64.deb
 a710ec62636c94a4bb4e1af1f7bbcd8fc32b1438 167056 liblwip0t64_2.2.1+dfsg1-1+deb13u1_arm64.deb
 a766406c86eb30964c558cee7bafe6d2ba77c502 7642 lwip_2.2.1+dfsg1-1+deb13u1_arm64-buildd.buildinfo
Checksums-Sha256:
 9bb1a3e18df31011ef084ddb7fd1f38e93cca1fa0bcec8723e5a50d053383cfb 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_arm64.deb
 15470cf6928ef521046178080b43f7fcd76ab6f5210f6421b8345a5228721855 293104 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_arm64.deb
 f052ee8a0b74e109cc421340169e1157f4d618052665ce9a88d977c7d8e4936b 167056 liblwip0t64_2.2.1+dfsg1-1+deb13u1_arm64.deb
 994401e6cbf7f5cc9b725131acc72df893385929621937374c04cfe3f40d1db8 7642 lwip_2.2.1+dfsg1-1+deb13u1_arm64-buildd.buildinfo
Files:
 d1f74225fbbe214fab4e49701d285b27 248068 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_arm64.deb
 43d35e7ad4b3597edd190abd4b91515a 293104 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_arm64.deb
 f833515847c3ee4d2cdd82e35fd95930 167056 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_arm64.deb
 f98269c7274f0d3ef8ea6df9d3580219 7642 libs optional lwip_2.2.1+dfsg1-1+deb13u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=jrus
-----END PGP SIGNATURE-----