-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: riscv64
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 ba332e9b169c377381fd52ac2068a36b320facf1 248072 liblwip-dev_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 2536e04e8293b2d8d2bf7ce27107acfc2ee839ff 293580 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 a8672de94761f71295d3fed7a55840386b886f22 183384 liblwip0t64_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 4665c33203a5d4f11f52a4207102064bc7cf48d8 7608 lwip_2.2.1+dfsg1-1+deb13u1_riscv64-buildd.buildinfo
Checksums-Sha256:
 747afc58d75ff003e2c0c83540ecf58cfb4efcb38b76972377c3e58e1b634220 248072 liblwip-dev_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 636f41948d31869102e1b2736e75ebd55f37f1ed2e8b75695990b8700fd919a3 293580 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 69736cee78a9ab8d30a90f425709f72bd159c194b9fd9106c51b6c0225e28720 183384 liblwip0t64_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 43e0279bcc8987e537742d2c10b741c802d426a98df2b0d9d1590cd49a8bba17 7608 lwip_2.2.1+dfsg1-1+deb13u1_riscv64-buildd.buildinfo
Files:
 95bd1dce4030fe157fcf1f67f1a45c7e 248072 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 c2a2c0efb08d8caed111b556ce138e60 293580 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 cf6a71cc39f44dfe9d0d85500d3e34a0 183384 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_riscv64.deb
 6061398bf3df71748b164cd57edad6cb 7608 libs optional lwip_2.2.1+dfsg1-1+deb13u1_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmpaDgEACgkQ7SlJcp2g
6OLpQA/6A2MwCVtapygSkoSNQeI2y9+dZdON5rYSAvWGKjZskprbswDvHb05PH5I
s/moN3lODfPdkzsZcxIBRK9KcbQ+h8U8xZInp8XeFX3qHmQU3xh3vkcqLTk7vFzd
s10PpO3hc/cFcc5eQmR+TpYxAB4SeFSts9pG7RDgBBjyo/87SRRwXrLrnvc91auy
MoSuvIB8TbzkKBgNgmQAzpT5AssZl43gXEE2yT50a5DpcHxYx8E+ge7PZnTazcCi
ttJIxPYjGbh5VHXGqfK08+UBTiAyYRYl5fkRYkBZ3NzyvUnX/iUn9+o0S0Y8z+o+
CZzm2AN/ie+SGV3eVZ9HQwsAOVf+UR4kkokjQJJGWrQWpbefYZvONLWJIRE/glhs
EVOIFvKDXR5hfUM95/Zd3WaI15tBpI/BJznEQqmIMu5rAGrEmxczVJiGW/m9eCnS
sQ3vHMD8cmRgNd6mz9/ZB9qrCgSOiLUxq3oG/ixzvtcYprP/wm8fYpL2CzGiHPXK
hxokKopvA+R1Bb2BNh7cLwxirOOlBgKk6b2lp18jk7kH/WtC4Q4BJYTUU9tw5WDl
dxpVO7Yh0stEYLhSZjnwkSWw8rU4yXDw6/ni6kSUS8qnSQjFdgsDLAjyPxVmShFx
h/mfi/bpcmqZL4wi3v+lVAD38NSYn15HU7GlaWaTdeCbAJaECQY=
=PcBB
-----END PGP SIGNATURE-----