-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 May 2026 15:18:47 +0200
Source: lwip
Binary: liblwip-dev liblwip0t64 liblwip0t64-dbgsym
Architecture: s390x
Version: 2.2.1+dfsg1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Joan Lledó <jlledom@member.fsf.org>
Description:
 liblwip-dev - small implementation of the TCP/IP protocol suite - development f
 liblwip0t64 - small implementation of the TCP/IP protocol suite - shared librar
Changes:
 lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium
 .
   * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
       msgAuthenticationParameters length
     * A remote attacker can send a crafted msgAuthenticationParameters field
       to overflow a stack buffer in snmp_parse_inbound_frame().
     * Re-enables the bounds check on msgAuthenticationParameters length in
       snmp_parse_inbound_frame() and clamps the copy length to
       SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
       TLV value length
     * https://savannah.nongnu.org/bugs/?68194
Checksums-Sha1:
 3d4a02b56839a4c9e8af6900702f472c8b4389f0 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_s390x.deb
 97010b55a707823877c1afff0009de0c59126096 295720 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_s390x.deb
 87be1010061e4eee696a44ce20b6ee9d36126939 170688 liblwip0t64_2.2.1+dfsg1-1+deb13u1_s390x.deb
 d0f45e9f5af2d241a9fab4373844d323dd5ddd75 7520 lwip_2.2.1+dfsg1-1+deb13u1_s390x-buildd.buildinfo
Checksums-Sha256:
 98bb509ef0a939f850e7c3e991d7d84de5d7d5b037a6d37875f44bf40d7ad71e 248068 liblwip-dev_2.2.1+dfsg1-1+deb13u1_s390x.deb
 4f542814f3babd1d5a8a45692b110d96166a5590c358b05fefd40d9cca456e36 295720 liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_s390x.deb
 e7a627078508759918b72b2709636845b438e206a0962450f1f01d6297039898 170688 liblwip0t64_2.2.1+dfsg1-1+deb13u1_s390x.deb
 d2103b9d322dfee37f373645198f0d07d780e12fe148cd1c2faf38a5632c4186 7520 lwip_2.2.1+dfsg1-1+deb13u1_s390x-buildd.buildinfo
Files:
 7ddebf35ac870ef7edb675a268120e41 248068 libdevel optional liblwip-dev_2.2.1+dfsg1-1+deb13u1_s390x.deb
 16b5c00eac06890f3ef4348dbd353a72 295720 debug optional liblwip0t64-dbgsym_2.2.1+dfsg1-1+deb13u1_s390x.deb
 5e73ed08ba7b05a8b9272b1a59c88798 170688 libs optional liblwip0t64_2.2.1+dfsg1-1+deb13u1_s390x.deb
 587f3ee108c6c8feb0289c7add1f3d35 7520 libs optional lwip_2.2.1+dfsg1-1+deb13u1_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=SyIN
-----END PGP SIGNATURE-----