-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: i386
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 eef8cf7b67643d59448f100e488fb5a8af5ee03e 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_i386.deb
 9da9ce79a7955764eeeaa832d06b5f3c94214a75 264016 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_i386.deb
 7eac81fa980c98f985e642ce86e167e1c36026b3 185636 liblwip0t64_2.2.1+dfsg1-1+deb13u1_i386.deb
 b4db5219581a51c08ffc73d76f2ae5958d4dc43e 7556 lwip_2.2.1+dfsg1-1+deb13u1_i386-buildd.buildinfo
Checksums-Sha256:
 ed61d645f586a74311561d8a3a82b608628b5086b301563254e4b5d0f31a72a0 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_i386.deb
 fab8f5fc55d74135b2ee8c01b2012f40cf477204d0d9dee1cf2b6020e9f280f2 264016 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_i386.deb
 089a12027b4584434a8c831d7e9c2c369808af8cc892fa3ebc0e24fc2f59f199 185636 liblwip0t64_2.2.1+dfsg1-1+deb13u1_i386.deb
 7d2ea025986360734a19c2103e7d46cae85b0e66bc100f0152e3bc92421c4d20 7556 lwip_2.2.1+dfsg1-1+deb13u1_i386-buildd.buildinfo
Files:
 038c1430b17dcbefdfb0e95cc3d285ab 248068 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_i386.deb
 80a2e9c6e58077a70624eab7b585a2e7 264016 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_i386.deb
 fa79d3b38ddbad19819d38dd5095a018 185636 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_i386.deb
 6109d6e3f7f91c76380fa919c5740a01 7556 libs optional lwip_2.2.1+dfsg1-1+deb13u1_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Kkt0
-----END PGP SIGNATURE-----