[Git][security-tracker-team/security-tracker][master] lwip fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f9898adb by Moritz Muehlenhoff at 2026-10-05T14:11:46+02:00
lwip fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14848,7 +14848,7 @@ CVE-2026-91025 (The Booking Manager  WordPress plugin before 2.1.21 does not ver
 CVE-2026-91024 (The Booking Manager  WordPress plugin before 2.1.21 does not sanitize  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-91018 (lwIP (Lightweight IP)has a double free vulnerability, which could cras ...)
-	- lwip <unfixed> (bug #1148822)
+	- lwip 2.2.1+dfsg1-8 (bug #1148822)
 	[trixie] - lwip <no-dsa> (Minor issue)
 	[bookworm] - lwip <postponed> (Minor issue; needs an app-configured 6LoWPAN netif, no reverse dependencies)
 	NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=f873b6295933e4149a2132adf3e9a2d2a676a5ec
@@ -14910,7 +14910,7 @@ CVE-2026-87981 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does n
 CVE-2026-87979 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does not ver ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-87121 (lwIPTCP/IP Stack MQTTis vulnerable to an out-of-bounds write, which ma ...)
-	- lwip <unfixed> (bug #1148822; unimportant)
+	- lwip 2.2.1+dfsg1-8 (bug #1148822; unimportant)
 	NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=68b2c1191886578d40342846db6ab9a0099c2f40
 	NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=f89407ea711879c04d91c92b35d67be78bbaf0f1
 	NOTE: src/app/mqtt code not build in Debian binary packages



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9898adb34dde03224ef5342d730f90dce75a6b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9898adb34dde03224ef5342d730f90dce75a6b6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/3628ebfb/attachment.htm>