lwip (2.1.2+dfsg1-4ubuntu0.1~esm1) focal-security; urgency=medium

  * SECURITY UPDATE: buffer overflow via PPP EAP bounds-check bypass
    - debian/patches/CVE-2020-8597.patch: correct the rhostname bounds
      check in src/netif/ppp/eap.c.
    - CVE-2020-8597
  * SECURITY UPDATE: buffer overflow via ICMPv6 chained pbuf copy
    - debian/patches/CVE-2020-22283_pre1.patch: bound the ICMPv6 error data
      size and define IP6_MIN_MTU_LENGTH in src/core/ipv6/icmp6.c,
      src/include/lwip/opt.h and src/include/lwip/prot/ip6.h,icmp6.h.
    - debian/patches/CVE-2020-22283_1.patch: copy chained pbufs correctly
      in src/core/ipv6/icmp6.c.
    - debian/patches/CVE-2020-22283_2.patch: avoid copying too much data in
      src/core/ipv6/icmp6.c.
    - CVE-2020-22283
  * SECURITY UPDATE: buffer overflow in zepif output copy
    - debian/patches/CVE-2020-22284.patch: copy possibly chained output
      pbufs properly in src/netif/zepif.c.
    - CVE-2020-22284
  * SECURITY UPDATE: stack-based buffer overflow in SNMPv3 USM parser
    - debian/patches/CVE-2026-8836.patch: enforce the maximum authentication
      parameter length when parsing inbound SNMPv3 messages in
      src/apps/snmp/snmp_msg.c.
    - CVE-2026-8836

 -- Shafayat Hossain Majumder <shafayat.majumder@canonical.com>  Wed, 10 Jun 2026 13:26:24 -0400

lwip (2.1.2+dfsg1-4) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.
  * Use the uploaded orig tarball

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 26 Jan 2020 14:23:06 +0100

lwip (2.1.2+dfsg1-3) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.
  * Include orig tarball

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 26 Jan 2020 12:36:10 +0100

lwip (2.1.2+dfsg1-2) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 26 Jan 2020 10:53:32 +0100

lwip (2.1.2+dfsg1-1) unstable; urgency=medium

  * Update Standards version to 4.4.1
  * Clean lintian error: source-is-missing
    * Repack: remove doxygen documentation from orig
    * Generate doxygen output on build
  * Clean lintian warnings about copyright
  * Clean minor lintian messages
  * Add upstream signing key for uscan verification

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 18 Jan 2020 12:38:25 +0100

lwip (2.1.2-5.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No-change source-only upload to allow testing migration.

 -- Boyuan Yang <byang@debian.org>  Fri, 04 Oct 2019 13:31:52 -0400

lwip (2.1.2-5) unstable; urgency=medium

  [ Samuel Thibault ]
  * Set Joan Lledó as maintainer.
  * watch: Generalize pattern.

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 28 Sep 2019 07:33:21 +0200

lwip (2.1.2-4) unstable; urgency=medium

  [ Joan Lledó ]
  * Add support for kFreeBSD
    * debian/patches/cmake:
      * Remove the OS restriction to Linux and Hurd
    * debian/patches/port:
      * Detect kFreeBSD
      * Disable htons() and pals for kFreeBSD
      * Declare some socket options when missing:
        *TCP_KEEPIDLE, TCP_KEEPINTVL and TCP_KEEPCNT
      * Make kFreeBSD use standard error codes

 -- Samuel Thibault <sthibault@debian.org>  Wed, 28 Aug 2019 09:25:34 +0200

lwip (2.1.2-3) unstable; urgency=medium

  [ Joan Lledó ]
  * debian/patches/patch9350:
    * Remove _HAVE_SA_LEN macros
      * Some macros related to sa_len field were written to this
        file by mistake
  * debian/patches/port:
    * Fix bug on thrad handling
      * In the Hurd, pthread_cond_timedwait() returns EINTR when
        the thread has been cancelled
    * Move some #includes in cc.h from max_sockets to port:
      * <sys/ioctl.h>
      * <fcntl.h>
      * <net/if.h>
      * <sys/types.h>
    * Fix build error on some architectures
      * sio module: memset struct sigaction to 0
        * Use memset to set all struct sigaction fields to 0
          instead of doing it field by field, since fields depend
          on the architecture
  * debian/patches/max_sockets:
    * Remove #includes in cc.h moved to port patch

 -- Samuel Thibault <sthibault@debian.org>  Sun, 18 Aug 2019 19:25:35 +0200

lwip (2.1.2-2) unstable; urgency=medium

  [ Joan Lledó ]
  * debian/patches/max_sockets:
    * Update required after making changes in debian/patches/port
  * debian/patches/patch9807:
    * New patch: Add new function tcpip_callback_wait() in tcpip.c
      * To call a function inside the tcpip thread and wait
        for it to return
  * debian/patches/port:
    * Fix bug: Don't abort the whole stack on error
    * Fix some locking issues
    * Rename macro HURD_LWIP_LWIPOPTS_H to UNIX_LWIP_LWIPOPTS_H
    * Add Unix port interface files
      * To make compilation of userspace programs in Linux easier
    * Detect 64bit systems
      * Macros in lwipopts.h must have different values in
        64bit systems
  * debian/patches/series:
    * Add new patch debian/patches/patch9807

  [ Samuel Thibault ]
  * Upload to unstable.

 -- Samuel Thibault <sthibault@debian.org>  Sat, 10 Aug 2019 00:45:08 +0200

lwip (2.1.2-1) experimental; urgency=medium

  [ Joan Lledó ]
  * New upstream release.
  * debian/patches/autoconf: Removed, replaced by cmake.
  * debian/patches/bug-36167: Removed, already upstream.
  * debian/patches/errno: Likewise.
  * debian/patches/getpeername_dual: Likewise.
  * debian/patches/poll: Likewise.
  * debian/patches/posix: Removed, merged into port patch.
  * debian/patches/cmake: New patch, implements cmake build system.
  * debian/patches/max_sockets: Adapted to 2.1.2.
  * debian/patches/patch9350: Cherry-picked from upstream.
  	* It allows using external socket headers.
  * debian/patches/port: Adapted to 2.1.2.
  	* It now includes external socket headers.
  * debian/patches/series: List of patches updated.
  * debian/patches/rules: Adapted to use cmake.

  [ Samuel Thibault ]
  * control: Add cmake build-dep.

 -- Samuel Thibault <sthibault@debian.org>  Sun, 31 Mar 2019 20:36:34 +0200

lwip (2.0.3-3) unstable; urgency=medium

  [ Samuel Thibault ]
  * Mark liblwip-doc Multi-Arch: foreign.
  * copyright: Make some licence names more precise.

  [ Joan Lledó ]
  * Update patches: Fixing interruptibility and thread safety. Convert to DOS
    format to mach lwip sources.
  * getpeername_dual: Cherry-pick upstream fix for dual-stack sockets.

 -- Samuel Thibault <sthibault@debian.org>  Sun, 04 Nov 2018 00:25:58 +0100

lwip (2.0.3-2) unstable; urgency=medium

  * Fix shipping lwip/priv/{tcp,tcpip}_priv.h.

 -- Samuel Thibault <sthibault@debian.org>  Mon, 11 Jun 2018 00:47:22 +0200

lwip (2.0.3-1) unstable; urgency=medium

  * Initial release (Closes: Bug#884641)

 -- Samuel Thibault <sthibault@debian.org>  Tue, 01 May 2018 01:52:18 +0200
