-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 May 2026 15:18:47 +0200 Source: lwip Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym Architecture: armhf Version: 2.2.1+dfsg1-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Joan Lledó Description: liblwip-dev - small implementation of the TCP/IP protocol suite - development f liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar Changes: lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium . * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid msgAuthenticationParameters length * A remote attacker can send a crafted msgAuthenticationParameters field to overflow a stack buffer in snmp_parse_inbound_frame(). * Re-enables the bounds check on msgAuthenticationParameters length in snmp_parse_inbound_frame() and clamps the copy length to SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled TLV value length * https://savannah.nongnu.org/bugs/?68194 Checksums-Sha1: 5fbd931c8e455f9ca92df1953537457126294f3b 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_armhf.deb 606bb5dff6795a6ff68c0e08fbe9826d1fdf2185 302180 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_armhf.deb 4359b5b29fd142b5914c84511e1772ecb292e31c 161064 liblwip0t64_2.2.1+dfsg1-1+deb13u1_armhf.deb 7839cc6fbd45143507afbdb8045fc7d4916dff05 7524 lwip_2.2.1+dfsg1-1+deb13u1_armhf-buildd.buildinfo Checksums-Sha256: c8c3213aee27f73762a2d37eeaec4a1da40a4e11442ddcca0afd6d64ac557ef3 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_armhf.deb ed65970d54e4cb4b00951c509b1b12c6894dc8fbcf0640f5fdb548ffd333db2c 302180 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_armhf.deb 2258433e6e56970b52c3735a2d5d93a5a4710729bc3282567893ea441c5fcb56 161064 liblwip0t64_2.2.1+dfsg1-1+deb13u1_armhf.deb adcf0a388f7c6b849e9a1c522bfcd35f5899366e2d7cf964ef5fde5fe881adee 7524 lwip_2.2.1+dfsg1-1+deb13u1_armhf-buildd.buildinfo Files: 63bcd0574638cc21040457a46f45254e 248068 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_armhf.deb a83cec42030352ab9e0c25f6bd2ed483 302180 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_armhf.deb 43497078e453c31930a6bae644f52a08 161064 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_armhf.deb db809819e6ca1efea3647bf612c6c9f9 7524 libs optional lwip_2.2.1+dfsg1-1+deb13u1_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmpZ+KYACgkQutMAkCxK bL25Wg/9HpXv0vuONrz5YUP+VygG/WZu0Tf3YFOqXJmcILXRfcsXgsa3f6xGK0Un JAH5S7gdQYrl9eaY7+u6KBMTScWaVA7XcJfEC5reKtEkD3Mf4H+om2gTnKEicqOZ Xjnwhk3R0Bn/lvrans9QIenhqBAdI5qUjevFqdyQZE15ptSxvVDY78D3uFb/7LKE 3zoReu+U0vi5BIqOWBQX7GnU7nBQShcvjNM+S3T/Y3TknPE9fgxM1gpHvXJzOI2a /pLwGWIVKiEKCanGcushkknJju7tNKs8tK9GOEr/3/aS4RytDrbPNthefPX4+uEf NHAhtsZYKUb6VHbDlugiZxxJdXCJ4maZWfR/hescAc52uZGjf5epRt5FKrHtKdMH dOIJQ//qX7DQD56+ednZ/BwFyj2TQ//pRFsYhnuoJpOWX+O2j7s64dKPnNqSGL6v nYw6cU5EAvIWy4eKwy+4Ttia9awhIRbo0sQ2CxyGbOSBR1f5ByuRX+Y731qW1kRH nLzOfxImt24kCfKTzFIVOEWnBENMnVB/cpSsE2X/UXFLX5BuToSoXh2WR6MuSsaS Ivmt2ZpKYQPbXhkLROKIShZ2pwZ9PllmiOsep2QLgZq2Y6TdQEr/Z1v7L9f049VV R7Fm27YZq8tOEjV+s2RxV/Q4FjOTWbvj57DYHzAhdYX9ThnrFYI= =VBwo -----END PGP SIGNATURE-----