Your message dated Mon, 05 Oct 2026 11:36:07 +0000
with message-id <[email protected]>
and subject line Bug#1148822: fixed in lwip 2.2.1+dfsg1-8
has caused the Debian Bug report #1148822,
regarding lwip: CVE-2026-87121 CVE-2026-91018
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1148822: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1148822
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: lwip
Version: 2.2.1+dfsg1-7
Severity: important
Tags: security upstream
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerabilities were published for lwip.
CVE-2026-87121[0]:
| lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write,
| which may allow an attacker to gain full code execution on the
| device.
CVE-2026-91018[1]:
| lwIP (Lightweight IP) has a double free vulnerability, which could
| crash the system, cause a DoS, memory corruption, or allow code
| execution on the victim system.
If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-87121
https://www.cve.org/CVERecord?id=CVE-2026-87121
https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=f89407ea711879c04d91c92b35d67be78bbaf0f1
[1] https://security-tracker.debian.org/tracker/CVE-2026-91018
https://www.cve.org/CVERecord?id=CVE-2026-91018
https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=f873b6295933e4149a2132adf3e9a2d2a676a5ec
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: lwip
Source-Version: 2.2.1+dfsg1-8
Done: Joan Lledó <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lwip, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Joan Lledó <[email protected]> (supplier of updated lwip package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 05 Oct 2026 12:42:18 +0200
Source: lwip
Architecture: source
Version: 2.2.1+dfsg1-8
Distribution: unstable
Urgency: medium
Maintainer: Joan Lledó <[email protected]>
Changed-By: Joan Lledó <[email protected]>
Closes: 1148822
Changes:
lwip (2.2.1+dfsg1-8) unstable; urgency=medium
.
* patches/posixlib:
* Guard DHCP routing hooks with __GNU__ and rename
to lwip_unix_hurd_hooks
* Rename lwip_hooks.{c,h} to lwip_unix_hurd_hooks.{c,h}
* Wrap hook definitions and source compilation in __GNU__ /
CMAKE_SYSTEM_NAME checks so they are only active on GNU/Hurd
* Add NULL check for src in dhcp_ip4_route_src and skip
already-configured interfaces
* Document the known limitation with multiple unconfigured interfaces
* Remove patch timestamps
* patches/fix_armhf_riscv64
* Add headers
* patches/in_pktinfo
* Remove patch timestamps
* patches/CVE_2026_87121. Closes: #1148822
* Fix CVE-2026-87121: Validate the MQTT packet length before writing to
rx_buffer, preventing an out-of-bounds write.
* patches/CVE_2026_91018
* Fix CVE-2026-91018: Avoid double-freeing the input pbuf when 6LoWPAN
FRAG1 IPHC decompression fails.
Checksums-Sha1:
43c3752be526a5cb5c8c75309ef33763b731df2a 2086 lwip_2.2.1+dfsg1-8.dsc
8d67fd903b7faef8767c4acf63d9be9269a43d7b 23732 lwip_2.2.1+dfsg1-8.debian.tar.xz
3e6cae9b07ec412dcff4d23679f1575075ca5f1e 6965
lwip_2.2.1+dfsg1-8_source.buildinfo
Checksums-Sha256:
90fd607740a7bf986c8c51e8021ba3e589d4cf27ecf9df0efd907b79ed7f2f28 2086
lwip_2.2.1+dfsg1-8.dsc
2426e8e181592e368e8b9472f0c9c47acb510804d8f443b648a2dc51020904c5 23732
lwip_2.2.1+dfsg1-8.debian.tar.xz
6bee3fde198d4d723761d194f9e5b5439da4f522606040c9f5d118bd63b9b3a0 6965
lwip_2.2.1+dfsg1-8_source.buildinfo
Files:
d6d67aee73ace02846f7c6a126548978 2086 libs optional lwip_2.2.1+dfsg1-8.dsc
93d4d09595c81f14bf1eed95181f8cc6 23732 libs optional
lwip_2.2.1+dfsg1-8.debian.tar.xz
a6d1368d5c3a82723eeda3c82a35fd3b 6965 libs optional
lwip_2.2.1+dfsg1-8_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJLBAEBCgA1FiEEitwNudTbNE2R94iMoZnXa8pGkeMFAmrDiGMXHGpsbGVkb21A
bWVtYmVyLmZzZi5vcmcACgkQoZnXa8pGkePRmA/+OM1K/542+owaFdYI/pSKteds
xnZhWx8P6YY7GOUoHjAd74TbO6MCR37PN1pBRrGLjdtzmzmwwkD0CNlx1oah9FlA
jWETAAm303jJ84TfISFHy9OvY8APcWS262sMe0Mq4eTJKbmEQ/KMGqFF0XMey8Ha
v8AoEmF2PeOtsarA6mQrCwanehrpxahlK9IRdTY2f3MHthJE3COjuQrjZfK350Id
dqqqmZ0IKtnBfNWW0/4jgP/4GYzpbZrb2JvOH2zjvxNHSbrWA6MtR/8lamEOrWnk
17DcVGz8nPMM6POpQXlgVqsb9P6B3on5JBUaPfkNdxG9b1Ove3CgIAquGVLS47oE
XcEvMzZi9QVrUNxNUTO4j7cT0QsCaP0t9U009HzqB8QkWWsyNbRuO4iy80v9KgVm
PiGel4bdPZsVIQl57XxwpniRE3oDI5s6BUjCG7WAa2zSzq9OKATVJs12f25XoSm+
O/divghkAx0a5dBDtywkOF6ohS1qmgZUva1QowH4QPjT9GxBefS0B3pQnIAlXcH8
Apu7GjMu4UtwPP7K20TvFKot2YoR4aQ7enWVHlhAwW1oenjgoTUyk7TjLCB0AUDT
rYJiQqj6CxZgI1Veqzzt+5K08UVCcWZ5wQMgeoYrtylcgxlFvp2ypysp0thwGq6n
sHDGC8AO1ELxmopHado=
=KrXj
-----END PGP SIGNATURE-----
pgp41GysPbqmR.pgp
Description: PGP signature
--- End Message ---
