[From nobody Fri Jun 19 11:23:06 2026 Received: (at submit) by bugs.debian.org; 13 May 2026 20:43:20 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-10.9 required=4.0 tests=BAYES_00,FOURLA, FROMDEVELOPER,MD5_SHA1_SUM,NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 43; hammy, 147; neutral, 69; spammy, 3. spammytokens:0.997-1--drip, =?UTF-8?Q?0.987-1--N=C2=B2,?= 0.966-+--n hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--HTo:N*Debian, 0.000-+--H*Ad:N*Bug Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1wNGQK-00C861-0b for submit@bugs.debian.org; Wed, 13 May 2026 20:43:20 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: erlang-cowlib: CVE-2026-7790 Message-ID: <177870499915.526643.9499920170673782569.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0 Date: Wed, 13 May 2026 22:43:19 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBlcmxhbmctY293bGliClZlcnNpb246IDEuMy4wLTMKU2V2ZXJpdHk6IGltcG9ydGFu dApUYWdzOiBzZWN1cml0eSB1cHN0cmVhbQpYLURlYmJ1Z3MtQ2M6IGNhcm5pbEBkZWJpYW4ub3Jn LCBEZWJpYW4gU2VjdXJpdHkgVGVhbSA8dGVhbUBzZWN1cml0eS5kZWJpYW4ub3JnPgoKSGksCgpU aGUgZm9sbG93aW5nIHZ1bG5lcmFiaWxpdHkgd2FzIHB1Ymxpc2hlZCBmb3IgZXJsYW5nLWNvd2xp Yi4KCkNWRS0yMDI2LTc3OTBbMF06CnwgVW5jb250cm9sbGVkIFJlc291cmNlIENvbnN1bXB0aW9u IHZ1bG5lcmFiaWxpdHkgaW4gbmluZW5pbmVzIGNvd2xpYgp8IChjb3dfaHR0cF90ZSBtb2R1bGUp IGFsbG93cyBFeGNlc3NpdmUgQWxsb2NhdGlvbi4gIFRoZSBjaHVua2VkCnwgdHJhbnNmZXItZW5j b2RpbmcgcGFyc2VyIGluIGNvd19odHRwX3RlIGFjY2VwdHMgYW4gdW5ib3VuZGVkIG51bWJlcgp8 IG9mIGhleCBkaWdpdHMgaW4gdGhlIGNodW5rLXNpemUgZmllbGQuIEVhY2ggZGlnaXQgY2F1c2Vz IGEgYmlnbnVtCnwgbXVsdGlwbGljYXRpb24gKExlbiAqIDE2ICsgZGlnaXQpLCBzbyBwYXJzaW5n IE4gaGV4IGRpZ2l0cyByZXF1aXJlcwp8IE8oTsKyKSBDUFUgd29yayBhbmQgTyhOKSBtZW1vcnku IEFkZGl0aW9uYWxseSwgd2hlbiBpbnB1dCBpcyBkcmlwLQp8IGZlZCwgdGhlIHBhcnNlciBkaXNj YXJkcyB0aGUgYWNjdW11bGF0ZWQgbGVuZ3RoIG9uIGVhY2ggcGFydGlhbCByZWFkCnwgYW5kIHJl c3RhcnRzIGZyb20gemVybyBvbiByZXN1bXB0aW9uLCByYWlzaW5nIHRoZSBjb3N0IHRvIE8oTsKz KS4gQW4KfCB1bmF1dGhlbnRpY2F0ZWQgcmVtb3RlIGF0dGFja2VyIGNhbiBleHBsb2l0IHRoaXMg Ynkgc2VuZGluZyBhbgp8IEhUVFAvMS4xIHJlcXVlc3Qgd2l0aCBUcmFuc2Zlci1FbmNvZGluZzog Y2h1bmtlZCBhbmQgYSB2ZXJ5IGxvbmcKfCBjaHVuay1zaXplIGhleCBzdHJpbmcgdG8gY2F1c2Ug ZGVuaWFsIG9mIHNlcnZpY2UgdGhyb3VnaCBDUFUKfCBleGhhdXN0aW9uIGFuZCBtZW1vcnkgYW1w bGlmaWNhdGlvbi4gIFRoaXMgdnVsbmVyYWJpbGl0eSBpcwp8IGFzc29jaWF0ZWQgd2l0aCBwcm9n cmFtIGZpbGUgc3JjL2Nvd19odHRwX3RlLmVybCBhbmQgcHJvZ3JhbQp8IHJvdXRpbmVzIGNvd19o dHRwX3RlOnN0cmVhbV9jaHVua2VkLzIsIGNvd19odHRwX3RlOmNodW5rZWRfbGVuLzQuCnwgVGhp cyBpc3N1ZSBhZmZlY3RzIGNvd2xpYjogZnJvbSAwLjYuMCBiZWZvcmUgMi4xNi4xLgoKCklmIHlv dSBmaXggdGhlIHZ1bG5lcmFiaWxpdHkgcGxlYXNlIGFsc28gbWFrZSBzdXJlIHRvIGluY2x1ZGUg dGhlCkNWRSAoQ29tbW9uIFZ1bG5lcmFiaWxpdGllcyAmIEV4cG9zdXJlcykgaWQgaW4geW91ciBj aGFuZ2Vsb2cgZW50cnkuCgpGb3IgZnVydGhlciBpbmZvcm1hdGlvbiBzZWU6CgpbMF0gaHR0cHM6 Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tlci9DVkUtMjAyNi03NzkwCiAgICBo dHRwczovL3d3dy5jdmUub3JnL0NWRVJlY29yZD9pZD1DVkUtMjAyNi03NzkwClsxXSBodHRwczov L2NuYS5lcmxlZi5vcmcvY3Zlcy9DVkUtMjAyNi03NzkwLmh0bWwKWzJdIGh0dHBzOi8vb3N2LmRl di92dWxuZXJhYmlsaXR5L0VFRi1DVkUtMjAyNi03NzkwClszXSBodHRwczovL2dpdGh1Yi5jb20v bmluZW5pbmVzL2Nvd2xpYi9jb21taXQvYTRiODAzOWNlOGM5M2FiMDA4NjdlZjZiN2U4ODg4MjJj MDlmNDM2OQoKUmVnYXJkcywKU2FsdmF0b3JlCg== ]