[From nobody Fri Jun 19 11:23:06 2026 Received: (at 1136649-close) by bugs.debian.org; 19 Jun 2026 10:20:35 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 150; neutral, 264; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:47294) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1waWKx-006Onv-2r for 1136649-close@bugs.debian.org; Fri, 19 Jun 2026 10:20:35 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1waWKw-004GDF-0g for 1136649-close@bugs.debian.org; Fri, 19 Jun 2026 10:20:34 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=HYOU5RTKkn0VBoFd8rNgtIMUfTUGoBPEN61rA+pRdWE=; b=EUnKfRSEWSUnZZL8w+UAudrsao BlOwFyBrbO1vLjjRlWEGFG6Z36j2ka/dvsbfZpKDKBTFvhEQa4vD75bI327kRRQKUIZ0WJH8b1F7c 2ZyyGdZ2NnVgR/WrYCYQUjMOqerhGuTr2Z4BtISDgyuERN4M0+j+rvWSZHG37CAB5Yw6zYqJbkgcH YgmE6jhs+y7C6rCQvhdpJiBPXZUBaWRd3oor9JJluDRUZt+1OU0b9QsZTS87SbJ9HGKtpvc8P7Wvx omo6F7nsa4kPHtw2CukfHaNkOWx2soVPEs0FpIoaQGpvdGF0tbn+KnugDV1yYS0hYGu/WJ4zY9EdD 7wq+I1vg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1waWKv-0000000CKqO-173I; Fri, 19 Jun 2026 10:20:33 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1136649-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang-cowlib Debian: DAK Debian-Changes: erlang-cowlib_2.17.1-1_source.changes Debian-Source: erlang-cowlib Debian-Version: 2.17.1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136649: fixed in erlang-cowlib 2.17.1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3111696807176571077==" Message-Id: <E1waWKv-0000000CKqO-173I@fasolo.debian.org> Date: Fri, 19 Jun 2026 10:20:33 +0000 X-CrossAssassin-Score: 3 --===============3111696807176571077== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang-cowlib Source-Version: 2.17.1-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang-cowlib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136649@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang-cowlib packa= ge) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 19 Jun 2026 13:06:40 +0300 Source: erlang-cowlib Architecture: source Version: 2.17.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1064932 1073092 1136446 1136649 Changes: erlang-cowlib (2.17.1-1) unstable; urgency=3Dmedium . * New upstream release (closes: #1064932). - Fix for CVE-2026-7790: Uncontrolled Resource Consumption vulnerability in ninenines cowlib application, cow_http_te module (closes: #1136446). - Fix for CVE-2026-43970: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib application (closes: #1136649). * Drop a no longer necessary patch. * Drop build dependency on markdown (closes: #1073092). * Add myself to uploaders. * Bump debhelper compatibility level to 13. * Bump standards version to 4.7.4. * Bump debian/watch version to 4. Checksums-Sha1: 5110b3ad1c5547a97ed92b5dc17bae4c2e42a4b2 2030 erlang-cowlib_2.17.1-1.dsc 728b60ffabd6d372d8ce659956d52bde4f3b546b 214393 erlang-cowlib_2.17.1.orig.ta= r.gz aee0e581e53ea3b1cf384b3d1725870cb0c20a58 2636 erlang-cowlib_2.17.1-1.debian.= tar.xz 73b73f4a48713864543d675697994ffc2213c976 6768 erlang-cowlib_2.17.1-1_amd64.b= uildinfo Checksums-Sha256: 0cf6618aced555360622c754d4086b2fab41af32e80268cce9d8ed76e1426474 2030 erlang= -cowlib_2.17.1-1.dsc 5f373a2f9421480db17381c29d4bddbbeb5e45849a14a579b04060fb7be94327 214393 erla= ng-cowlib_2.17.1.orig.tar.gz d517cf10e494ab79f2eea9f82c07c80f672b5c23c399d3eafe73aa44a3e8d115 2636 erlang= -cowlib_2.17.1-1.debian.tar.xz 0420663387ff95865e7f1327d6c0c5563174780d9e2430163b4e62a3ea0a37dd 6768 erlang= -cowlib_2.17.1-1_amd64.buildinfo Files: 1044d8166833211f7980a7c77f691dd6 2030 devel optional erlang-cowlib_2.17.1-1.= dsc a2ded2efa86fe07e7606a74299958b0b 214393 devel optional erlang-cowlib_2.17.1.= orig.tar.gz 28c18be2f5ca753eaf4dbd96c3309fca 2636 devel optional erlang-cowlib_2.17.1-1.= debian.tar.xz 9fa8d1436e87379b92a03b83393ea709 6768 devel optional erlang-cowlib_2.17.1-1_= amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmo1FQUACgkQTyrk60tj 54ehJBAAqWxJzfuV2j+aapmzPMGNyiLgypzObvQkR3gBgee5CJI/Yu106Sn6e2FD WtGvM1XQnr0sprnPM5Nnnun2j+lMEXj+uZPUMxgnNsWAvf8SLH1sM+u7CYnujtus t9/1j5Zd+inXDfAD3mLc0haNfDNGVFkQPXDbhVhTtb6ngJUXc2tduklRzx7RAso9 8I2uWsUZ520nfrQqUxsPDKemGdNy5wrB/ZKgMlud5NpmlsZrJjq+Lo5qHzQU6gRS LrLgfNraVE8iiqV42SqAZyA1femn6nzRDCuMWB1iT20U3yNi5hKRMC6HKCIOCVx7 lcUL/lbYoXxk+N/OXb/TjGoNi8PehvDwCBCek6aQRjDBZRVmz/C2lrgXRv+rkLv8 MMPjSF0L4CsPQX20kKR4/cSXHriympkYvi0mFUMWMGW8R/lhbVs5v6QclxVGjMdy ljuXm9KFsyO7m7YxHwxAxi8vEsmWl3x3Roqf6Pv+rcnbvgwz16xzWL3/BYNHUF46 nxFk77UJKDK8RAAbCqavR1hIjL/b7ZEKqj7Vp8FPJGwbLZ4WHS7QPsEYMLtlg6jR 6nSB1QrKuL2xFvnz1a0Mjfn0ZwHsYCyXovWLRBQt8OH5fek5NrDIpWjJGGsxPbrb XIu/xacKbM4B8rYoe8Slcglk8ahbaCHVYX+GDUgmXzpu6xBn3Ck=3D =3D4fGI -----END PGP SIGNATURE----- --===============3111696807176571077== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajUX8QAKCRCb9qggYcy5 IW4MAP9Muvgnffb6m5Hx9sBRJvAqDLNEwhLEM1X4Eg5RWUBSDgEA6MPo/pExNRaT mC0wGyq4U/IwRHj8jgAz29HkD9bw7QE= =Qocf -----END PGP SIGNATURE----- --===============3111696807176571077==-- ]