-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: armel
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 26465f7bbaf4f470e4ebb10de1f05c76d724f3ce 248064 liblwip-dev_2.2.1+dfsg1-1+deb13u1_armel.deb
 3abce6cf67310120a65733984a4ad92557b0f71c 297380 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_armel.deb
 b1d08ce19107aa5457e429885ab618484aab7cca 161544 liblwip0t64_2.2.1+dfsg1-1+deb13u1_armel.deb
 5a8ce2fa941478a670683f58ab2921bccc7f181b 7510 lwip_2.2.1+dfsg1-1+deb13u1_armel-buildd.buildinfo
Checksums-Sha256:
 30f11f9ba408394d4d370f7d4c962bc32cf9148f0cfcf14003546ef34c0d6091 248064 liblwip-dev_2.2.1+dfsg1-1+deb13u1_armel.deb
 c8674fe49ed602defc246d2c23f038e70581c7566535380b29b04dd719286825 297380 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_armel.deb
 75e6345500a3427b6367f2b4fde6a18ee985bb7c9b6277ae906e7e60bb4c0980 161544 liblwip0t64_2.2.1+dfsg1-1+deb13u1_armel.deb
 e366f1136fb5b8e2ad266e4b8b2878ca0964a46de985d1657ca837de46778fd0 7510 lwip_2.2.1+dfsg1-1+deb13u1_armel-buildd.buildinfo
Files:
 58e46b201f21928cb50d01e6d507e173 248064 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_armel.deb
 633e0a3cb7f1ee5e77c659567279c3c9 297380 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_armel.deb
 ab53996843d365f6749f893b50d0a45f 161544 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_armel.deb
 989774fb7406d93cadd0f89f0b85e14c 7510 libs optional lwip_2.2.1+dfsg1-1+deb13u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmpZ+HkACgkQvzDqKQSG
l8Wz8w/9GAO6SrxPKD4baIXV+mF2LZpJB7N+66emEobnhpQZSWu7h7P2G0hhx6C0
Zwrppk4eJevUTgA5smbXvbCV06c/YiwB4Ienncwis7Ff+FxTvB5LppYPXy51idAZ
UrJA5VZ2QMsG8gRTBgU1b/cACPSC86VUjAiiL/sp5cSrq8x3KZy0Nv46sFc2wLlT
nJqNdTbaWhXYgOTrDXQ9iLnfhkmH9XpVWUznojG7nmkNoxN07guZM43UyuNs17JK
C5UNE8GX918zU4QAGgRTKruUcnjAVOqeSklkReMuNfbfEpDa2CQqBr8TGfu2sRIF
Ww1nsBo3qz4T9z7vEYO+St5fOKjxuVeif71gjqSoFKTgrAwYser0UrcRFcHsu3CL
iDM5v3oNV4Hx3hEklFYPyOQDbflushnf1uhIwTUdQGGxMdksa6tlVRW1FF1rN2Wz
HTD+JWimBR2d1eQ94mIedEnmXzhLY+gnB0q0B7Tw4cjByrUln4d2exJN0CzTc7b9
8JaBcKNhH48Ugx9xjK/DcRhBminXXNyrAhLkVxkV9ZPZ0qC1KsBx2dryNFU4YtEu
iIIZtSGi5c82mcTD0514JJllPXnhnh9LBT5i7Mo2Xub6tlyIy520ZgTpYgdFglY2
rgTNe762G7S+u76DybD70Lg1rNDXP/kEmOPrIBs6Ab3dLI9zHUI=
=tZ6Q
-----END PGP SIGNATURE-----