| Release | Version |
|---|---|
| bookworm | 2.1.3+dfsg1-2 |
| trixie | 2.2.1+dfsg1-1+deb13u1 |
| forky | 2.2.1+dfsg1-8 |
| sid | 2.2.1+dfsg1-8 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-91018 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | lwIP (Lightweight IP)has a double free vulnerability, which could cras ... |
| CVE-2026-8836 | vulnerable (no DSA) | fixed | fixed | fixed | A vulnerability was found in lwIP up to 2.2.1. Affected is the functio ... |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-112062 | vulnerable | vulnerable | vulnerable | vulnerable | lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability ... |
| CVE-2026-87121 | vulnerable | vulnerable | fixed | fixed | lwIPTCP/IP Stack MQTTis vulnerable to an out-of-bounds write, which ma ... |
| CVE-2026-15340 | vulnerable | vulnerable | vulnerable | vulnerable | lwIP SMTP client does not check the size of inputs, potentially allowi ... |
| Bug | Description |
|---|---|
| CVE-2020-22284 | A buffer overflow vulnerability in the zepif_linkoutput() function of ... |
| CVE-2020-22283 | A buffer overflow vulnerability in the icmp6_send_response_with_addrs_ ... |
| CVE-2020-8597 | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overf ... |
| DSA / DLA | Description |
|---|---|
| DLA-3655-1 | lwip - security update |