[From nobody Tue Mar 17 09:07:03 2026 Received: (at 1130912-close) by bugs.debian.org; 17 Mar 2026 09:04:34 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_NONE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 95; hammy, 150; neutral, 157; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:60760) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w2QLq-00DAkZ-0H for 1130912-close@bugs.debian.org; Tue, 17 Mar 2026 09:04:34 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w2QLo-0059gG-2S for 1130912-close@bugs.debian.org; Tue, 17 Mar 2026 09:04:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=SH9NHfmdTmQHJBmSGTBzAA3pFGIoRMY4OUlHQwHHeGU=; b=BLB3TuPuyx5VkjhA8lvASxHoh9 sVdoLswHtjfqZRspou6x3Y5ImVbv4F91mmuen78XlIiHlLVtUDRn0UxR/dl/+1yRjK7wr19TOj/qd hRiryFb/q+m9VdVZXQgsS9uin2Ev5/FoROdfCN7mtz5lJIWXiYGFkBz4awNTs3cWmuxgqryhnC2V1 MXlzdQET3mqDP9titTxAjh2iX7kBrAqoloPcAVSXvq6qMEv/WKVmryFTPwq7Wk6MvGDIko+IksCvk LpSBnwXzuolLF6HvjXZEYuMAbuSw4xqU5KsC+rdOQl5r4X5t2m/DfjCEvWOXSdDnWOU4bDBd7QwA9 gQp2oOzQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w2QLl-00000002gHz-2t1x; Tue, 17 Mar 2026 09:04:29 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1130912-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang Debian: DAK Debian-Changes: erlang_27.3.4.9+dfsg-1_source.changes Debian-Source: erlang Debian-Version: 1:27.3.4.9+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1130912: fixed in erlang 1:27.3.4.9+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4850163211371554203==" Message-Id: <E1w2QLl-00000002gHz-2t1x@fasolo.debian.org> Date: Tue, 17 Mar 2026 09:04:29 +0000 --===============4850163211371554203== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang Source-Version: 1:27.3.4.9+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1130912@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Mar 2026 11:33:23 +0300 Source: erlang Architecture: source Version: 1:27.3.4.9+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1130912 Changes: erlang (1:27.3.4.9+dfsg-1) unstable; urgency=3Dmedium . * New upstream release (closes: #1130912). * Fix CVE-2026-23941: Inconsistent interpretation of HTTP Contents-Length header by inets httpd module. * Fix CVE-2026-23942: Improper limitation of a pathname to a restricted directory by ssh_sftpd module. * Fix CVE-2026-23943: Improper handling of highly compressed Data (compression bomb) by ssh_transport modules. Checksums-Sha1: d4dbbab0c1d49cd1bd33d046ba1ff5aa99e2aa68 4910 erlang_27.3.4.9+dfsg-1.dsc d4d298740bfc01cf7ccddf34afc9cd52f2d844f6 47622820 erlang_27.3.4.9+dfsg.orig.= tar.xz 5a89f1784bcdcf68c44f7faeb802fabfc5d376a6 58064 erlang_27.3.4.9+dfsg-1.debian= .tar.xz fff4d3996a0fd9e0973500d0bc3c27ac0bdec2d8 31200 erlang_27.3.4.9+dfsg-1_amd64.= buildinfo Checksums-Sha256: b9c3d88ee1e8f3db098fbab52498907cd4014802ec88efb7798d7751223ea9c4 4910 erlang= _27.3.4.9+dfsg-1.dsc b59ee725f0088a4ef5536a783c153f17c8719025815209402ba355b969d57189 47622820 er= lang_27.3.4.9+dfsg.orig.tar.xz f49d5b744d678da868fe06a67826925a16f42d3114b9eb5e5756ad94deb57475 58064 erlan= g_27.3.4.9+dfsg-1.debian.tar.xz 7bfff2a84ca2e43183c5e9636e07a6248df50e879b517fb6c7a4fe9f68daf372 31200 erlan= g_27.3.4.9+dfsg-1_amd64.buildinfo Files: a4c5d9d52b4a1528ad09821bce6a0da6 4910 interpreters optional erlang_27.3.4.9+= dfsg-1.dsc 77a31804f31bd02cb517708846945f25 47622820 interpreters optional erlang_27.3.= 4.9+dfsg.orig.tar.xz a57957a0d7f86aabdabae0cc6f32bec5 58064 interpreters optional erlang_27.3.4.9= +dfsg-1.debian.tar.xz 9cbbe20dd5341083f1c6752148bc0e0b 31200 interpreters optional erlang_27.3.4.9= +dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmm5FHcACgkQTyrk60tj 54dWXg/9HoiUfgSdehVn26uJm7QVqtnjF8FJiGYREOHVuZT4rnvn5+KEqTbSmEa1 kfaL8l6i3uaGGXhSxYqVELX9EOa26WaUuPBe82quP+ATdSBNiydaB8dEOZ39AHWc BaHBS66cTtwvEs7Q9HtVu4pjpMuDry0feBB/EQJBDcV6r7XtMO/l6GfdL5cY2sjS Ci6Bj3LWMYHaGR3xEjjWc8apuBiitUDfhz6bYDiOI43Gui4nY486IkbkztAW8BhY 4XqRI/WbsKGHoDM82yYwjaYmfOyYWJNJWXXpB4rJ1TcEhSANwTYtj8b/GQzw9heE 2HtMCgkjgpsW+mGvDH/LWEYv+H62J9UOUU6ZyQFcjDZXZNW4gTzNuTe1xrqSNZ0A 73eJi0IoD72ThVKHBOYZ40rWyUBuEcbc/oxzYYEVFsQxzhMkYP7RT9jpty/fNMjv GWGgwNw4ap8SQWXGOzw0ToI5OfNB7bE2iITzxAO35YeuWgRIel7V9OglqyAR4208 7JFaxNFBCoQEtOmR2ROXZV774j1njshRBvD8nbR3i6mdPRIC+J2txeqs5DXj2j55 n6JLLMefD71EQdY4z2r4pbff5Gu1ALjL4RrtvQyaPG+yu9TYHI+RnRo0jVZzbUMF pOj67mBe0/0Cl4kAb6LmRIQ79zV2uSwndeu7RSjwk6gY0LfMu6M=3D =3DR4w0 -----END PGP SIGNATURE----- --===============4850163211371554203== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCabkZHQAKCRCb9qggYcy5 IRTnAQCqGvQ8lXci32tizh+XMoS53u9FyKvK1C9utlzJd3kIaQD9EQ5l4Qrs0Nfi b5Xx9QMTIlBpgQFB9U6cKwo5gUkPfAg= =M7/S -----END PGP SIGNATURE----- --===============4850163211371554203==-- ]