[From nobody Tue Mar 10 08:37:07 2026 Received: (at 1128651-close) by bugs.debian.org; 10 Mar 2026 08:35:40 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 95; hammy, 150; neutral, 118; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:43650) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1vzsZ2-003FIx-0y for 1128651-close@bugs.debian.org; Tue, 10 Mar 2026 08:35:40 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1vzsZ1-00DHUX-2z for 1128651-close@bugs.debian.org; Tue, 10 Mar 2026 08:35:39 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=rPxvKbHYmOke6hM07Ck4fOBVylVZap/EJ08vvcEi2pM=; b=FPt/VSJxxgZsFMZltIn+khL3xd P5d3vDLcTZDprmigD3MsQKsPRCqWx9dSEo1IzpMFlUTO7+lSANqI6FvBO71bO//Ky6spmdynS9GF/ JY4VU0ID7GBymb1uALpFgnK7owbZPcvRZRWUqfXmoRWU7BtC+hv2nEnvH+Ryx7T47voD3e8FtkMeM +91C4p+faX1/WR/A3VX3fyxX29sr7wLzcYQfPoff1GVZi09ak9hAD2Mjs8qeYr1GqGPqMZcvkVbRs sXYmnJG9rteve45zo7poYAyEAhcJT2DuglGWyMUUcCf1sXntZ3Z1VHeQiqp8gMRlD0fq9W0FoS2gU vkx6fFZA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1vzsZ1-0000000FOFI-0V6M; Tue, 10 Mar 2026 08:35:39 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1128651-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang Debian: DAK Debian-Changes: erlang_27.3.4.8+dfsg-1_source.changes Debian-Source: erlang Debian-Version: 1:27.3.4.8+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1128651: fixed in erlang 1:27.3.4.8+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1629148335400593595==" Message-Id: <E1vzsZ1-0000000FOFI-0V6M@fasolo.debian.org> Date: Tue, 10 Mar 2026 08:35:39 +0000 --===============1629148335400593595== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang Source-Version: 1:27.3.4.8+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1128651@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Mar 2026 10:07:09 +0300 Source: erlang Architecture: source Version: 1:27.3.4.8+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1128651 Changes: erlang (1:27.3.4.8+dfsg-1) unstable; urgency=3Dmedium . * New upstream release. * Fix CVE-2026-21620: a bug which allows TFTP to specify a file to download outside the TFTP root directory (closes: #1128651). Checksums-Sha1: 2e450bdce2c6a5957b8554dd216bd5dd4cdc9bc3 4910 erlang_27.3.4.8+dfsg-1.dsc e3c4b759d5a52d47d11636133da4c770f1b52b20 47615816 erlang_27.3.4.8+dfsg.orig.= tar.xz 1540e69a71c42026cf3ca16d9e5069adad6971f9 57936 erlang_27.3.4.8+dfsg-1.debian= .tar.xz c896119121b541d66312c5f08a0b470decb8f4e5 31187 erlang_27.3.4.8+dfsg-1_amd64.= buildinfo Checksums-Sha256: eb6f3ff080379d2580f050e197917c938dd51f6c1bc0845238f9bfc8dee7e054 4910 erlang= _27.3.4.8+dfsg-1.dsc 1712c29280d1916e68bee181af95064565c4b90333ea00b82d6c2de318a14e58 47615816 er= lang_27.3.4.8+dfsg.orig.tar.xz da5feee2a0b853e195b6f3d706310649126740a823f6326c5d9be87a5ec70619 57936 erlan= g_27.3.4.8+dfsg-1.debian.tar.xz f6827c9bcde889642eaafb4e6502f9917e6edecc3ba4c31c83ce2bc98c35a3ac 31187 erlan= g_27.3.4.8+dfsg-1_amd64.buildinfo Files: 653b5b59df48d70f548b2ebd23625d1d 4910 interpreters optional erlang_27.3.4.8+= dfsg-1.dsc e749aaf5b6eb6fabfa30dd122cb90692 47615816 interpreters optional erlang_27.3.= 4.8+dfsg.orig.tar.xz 9a29e54a524cc727fc65a3ef65933d68 57936 interpreters optional erlang_27.3.4.8= +dfsg-1.debian.tar.xz 681ebedfd68c7479cf8fabfb933f62d4 31187 interpreters optional erlang_27.3.4.8= +dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmmvyxEACgkQTyrk60tj 54coHQ//VEJuUro9Rj4VW5DQIqbsM6QOYnmhWH5VIeAS1VNJR5yHs76ksILEk/wp Zkq/57c7iV3sPle8+w9QyEl0J1y6MJoyK4uKxswpRl7IrjzIw+j+x8bBWXtuV66U LKfEj2qtS1KCjn3EfMxK6r5I8mbNJHJbw7cnbrw519XrkyL661SRrobOu9NELawi rnV0eJ31QOOw+EXk8k4Ap+G1smXrPLbpOMPD7yZsqe74uUZLijdZi6uB3P4UxnHK wxJ2FlzHl33OPDXC9eeMf3O4zRev9r4RmrTxqx2j3H1QhP5HXEDOJG3Im9wu7usq 1dgqWwJsVatPn+q7v07EJn3IaflbBtPbG7pLj7N6709nnYvpXcxiNV1rq3Xpr14i Yklt9fD/M3T9miqrDM98xXKJ/Kl8dXmKXGHbE8c06YEf5mFV79LBLU/ZQh2N3bK2 U9TRZ5b6gImChWgapv5zoMNSQ46X5qe9l4aZSEfEEZRjXMUioz2oBfNDishQ6I8f K5mfaF0CJx/yvNAKNXmgJYhdcOnpB4PRsKi5L9W+Y8YqMvJlX4TRfV82eOyz40Jb hOkdhUAb11PjUg9bIg07cQloLWCY9nsaG0m3IIfgXF5+sQxM4+a90bOjq7yULI6D Hgw5aFuGW5tMSoYc5slZICRxIUo5KKH0yXwDq07iHcerXXizzDM=3D =3D+qvP -----END PGP SIGNATURE----- --===============1629148335400593595== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaa/X2wAKCRCb9qggYcy5 IecoAQDqSAsvtGTtzkXUnm+dA5rOeQbyAlwvQZJIAV9rnqytAwEAmwxUNja28PL1 PtOYR775eA7ZDMXbrL0OmFT+mIhfdQ4= =VQ5+ -----END PGP SIGNATURE----- --===============1629148335400593595==-- ]