-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 05 Oct 2026 12:42:18 +0200 Source: lwip Architecture: source Version: 2.2.1+dfsg1-8 Distribution: unstable Urgency: medium Maintainer: Joan Lledó <jlledom@member.fsf.org> Changed-By: Joan Lledó <jlledom@member.fsf.org> Closes: 1148822 Changes: lwip (2.2.1+dfsg1-8) unstable; urgency=medium . * patches/posixlib: * Guard DHCP routing hooks with __GNU__ and rename to lwip_unix_hurd_hooks * Rename lwip_hooks.{c,h} to lwip_unix_hurd_hooks.{c,h} * Wrap hook definitions and source compilation in __GNU__ / CMAKE_SYSTEM_NAME checks so they are only active on GNU/Hurd * Add NULL check for src in dhcp_ip4_route_src and skip already-configured interfaces * Document the known limitation with multiple unconfigured interfaces * Remove patch timestamps * patches/fix_armhf_riscv64 * Add headers * patches/in_pktinfo * Remove patch timestamps * patches/CVE_2026_87121. Closes: #1148822 * Fix CVE-2026-87121: Validate the MQTT packet length before writing to rx_buffer, preventing an out-of-bounds write. * patches/CVE_2026_91018 * Fix CVE-2026-91018: Avoid double-freeing the input pbuf when 6LoWPAN FRAG1 IPHC decompression fails. Checksums-Sha1: 43c3752be526a5cb5c8c75309ef33763b731df2a 2086 lwip_2.2.1+dfsg1-8.dsc 8d67fd903b7faef8767c4acf63d9be9269a43d7b 23732 lwip_2.2.1+dfsg1-8.debian.tar.xz 3e6cae9b07ec412dcff4d23679f1575075ca5f1e 6965 lwip_2.2.1+dfsg1-8_source.buildinfo Checksums-Sha256: 90fd607740a7bf986c8c51e8021ba3e589d4cf27ecf9df0efd907b79ed7f2f28 2086 lwip_2.2.1+dfsg1-8.dsc 2426e8e181592e368e8b9472f0c9c47acb510804d8f443b648a2dc51020904c5 23732 lwip_2.2.1+dfsg1-8.debian.tar.xz 6bee3fde198d4d723761d194f9e5b5439da4f522606040c9f5d118bd63b9b3a0 6965 lwip_2.2.1+dfsg1-8_source.buildinfo Files: d6d67aee73ace02846f7c6a126548978 2086 libs optional lwip_2.2.1+dfsg1-8.dsc 93d4d09595c81f14bf1eed95181f8cc6 23732 libs optional lwip_2.2.1+dfsg1-8.debian.tar.xz a6d1368d5c3a82723eeda3c82a35fd3b 6965 libs optional lwip_2.2.1+dfsg1-8_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJLBAEBCgA1FiEEitwNudTbNE2R94iMoZnXa8pGkeMFAmrDiGMXHGpsbGVkb21A bWVtYmVyLmZzZi5vcmcACgkQoZnXa8pGkePRmA/+OM1K/542+owaFdYI/pSKteds xnZhWx8P6YY7GOUoHjAd74TbO6MCR37PN1pBRrGLjdtzmzmwwkD0CNlx1oah9FlA jWETAAm303jJ84TfISFHy9OvY8APcWS262sMe0Mq4eTJKbmEQ/KMGqFF0XMey8Ha v8AoEmF2PeOtsarA6mQrCwanehrpxahlK9IRdTY2f3MHthJE3COjuQrjZfK350Id dqqqmZ0IKtnBfNWW0/4jgP/4GYzpbZrb2JvOH2zjvxNHSbrWA6MtR/8lamEOrWnk 17DcVGz8nPMM6POpQXlgVqsb9P6B3on5JBUaPfkNdxG9b1Ove3CgIAquGVLS47oE XcEvMzZi9QVrUNxNUTO4j7cT0QsCaP0t9U009HzqB8QkWWsyNbRuO4iy80v9KgVm PiGel4bdPZsVIQl57XxwpniRE3oDI5s6BUjCG7WAa2zSzq9OKATVJs12f25XoSm+ O/divghkAx0a5dBDtywkOF6ohS1qmgZUva1QowH4QPjT9GxBefS0B3pQnIAlXcH8 Apu7GjMu4UtwPP7K20TvFKot2YoR4aQ7enWVHlhAwW1oenjgoTUyk7TjLCB0AUDT rYJiQqj6CxZgI1Veqzzt+5K08UVCcWZ5wQMgeoYrtylcgxlFvp2ypysp0thwGq6n sHDGC8AO1ELxmopHado= =KrXj -----END PGP SIGNATURE-----
