-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: ppc64el
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 264470e7c0d07e0053f7583239c71c6750ba8936 248072 liblwip-dev_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 d5149188ea287801447816f6584a8ad9cef59c3b 304152 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 4ba0ac796c108cc88e71fb6b253a880479577f86 184032 liblwip0t64_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 1637fec68a11528c178ab3c667a9a627a82e2bf9 7663 lwip_2.2.1+dfsg1-1+deb13u1_ppc64el-buildd.buildinfo
Checksums-Sha256:
 14733650f51159bd62a615e093a52dc9230918de57935d84aa230164765859e9 248072 liblwip-dev_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 becfd701d80d735f4c25331ce1bbfadb337fce3d65d8d6fdfda64d3f31685b54 304152 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 016e0c059337188ec51d0e14aec7819596213294d3895cd7591b5b063897c64b 184032 liblwip0t64_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 6b3a9eb70b224a24a7d79c1a905d12b346c80fa00bd077dad20ff55f3a08408c 7663 lwip_2.2.1+dfsg1-1+deb13u1_ppc64el-buildd.buildinfo
Files:
 807daadb41e2f9b4d62b53c0700997fd 248072 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 46b3969955842a1e5782673c56ae60bb 304152 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 74dc392bc339184b566d2f444efa5137 184032 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_ppc64el.deb
 3061bdefa0ebc97dd8c0364e958fed96 7663 libs optional lwip_2.2.1+dfsg1-1+deb13u1_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3UDR
-----END PGP SIGNATURE-----