[From nobody Sun Jul 5 20:07:04 2026 Received: (at 1141414-close) by bugs.debian.org; 5 Jul 2026 19:04:19 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 108; hammy, 150; neutral, 230; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:56466) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wgS8Y-003yzg-2e for 1141414-close@bugs.debian.org; Sun, 05 Jul 2026 19:04:19 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wgS8X-001E7m-0D for 1141414-close@bugs.debian.org; Sun, 05 Jul 2026 19:04:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=VoEzLbjA9A83u0jm3M7jCVhIVwN0kW7cISeIyvdTIRE=; b=Guiq7CD3O+hx2PqMTUta22V2di sO6/jEguzwzrcv9GeKTgnnCG3+HBFNBnqwHQ2nMoYlrv9+F97LnAaXtJNngv8Gujn/kCA1kloTjj2 EEZTK6ahaBYMC3DGgMsxzU4Z5oOYWJklU27u33OvGn+HbxsLTA2P7SFBfhA2dUBmvK63wWOWQA1VP c9QK5zQhoC067N+D7WAea4EfLe9I0UmWoexYoxpe6m1qlsTt7K/dmmVwDkguTLXHvHutIX4QWKung OPiB2j1s8bnldiFmQ4CnDaH+cL0UhjLY6LhpSDyb/of+IkcEdjIHo5Qlb9749xL349LHj17oFAVFA 9bdoWUxw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wgS8W-0000000FCvd-1uhi; Sun, 05 Jul 2026 19:04:16 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1141414-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang Debian: DAK Debian-Changes: erlang_29.0.3+dfsg-1_source.changes Debian-Source: erlang Debian-Version: 1:29.0.3+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141414: fixed in erlang 1:29.0.3+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============0540692945294103202==" Message-Id: <E1wgS8W-0000000FCvd-1uhi@fasolo.debian.org> Date: Sun, 05 Jul 2026 19:04:16 +0000 --===============0540692945294103202== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang Source-Version: 1:29.0.3+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141414@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Jul 2026 21:21:35 +0300 Source: erlang Architecture: source Version: 1:29.0.3+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1141414 Changes: erlang (1:29.0.3+dfsg-1) unstable; urgency=3Dmedium . * New upstream release. - Fix CVE-2026-53422: Observable Response Discrepancy vulnerability in Erlang OTP ssh application (ssh_sftpd module). - Fix CVE-2026-54886: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh application (ssh_sftpd module). - Fix CVE-2026-54887: Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl application (DTLS server) - Fix CVE-2026-54891: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl application (tls_gen_connection module). - Fix CVE-2026-55950: Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl application (dtls_packet_demux module). - Fix CVE-2026-55952: The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. Closes: #1141414. Checksums-Sha1: aca9508adfed1d874e327e367485d9d3192e4815 5002 erlang_29.0.3+dfsg-1.dsc 83586fd37e285886b97064d60dc8addf6a045f5d 49270776 erlang_29.0.3+dfsg.orig.ta= r.xz ac8e94fa1e94c45c6dd654eab8b8faaf47df6da4 62292 erlang_29.0.3+dfsg-1.debian.t= ar.xz 94b75a6ff59936c4fb2b54c123e34f961fb38100 32816 erlang_29.0.3+dfsg-1_amd64.bu= ildinfo Checksums-Sha256: 5a6d1e0ae550591ad6a7e67898a9ff353e6e2aee8e29033f592fb45b78ec1016 5002 erlang= _29.0.3+dfsg-1.dsc 4fe8354860c804dee0ead66358775e0633fec987c14bd2be06e3698fd7cf865f 49270776 er= lang_29.0.3+dfsg.orig.tar.xz eefff1f28ec69209cad336b85e9add647937e5aedefb066481fe21f63eab61bb 62292 erlan= g_29.0.3+dfsg-1.debian.tar.xz 0f588b468b38492a90818cc49ec17e10e2a74f15b3ca4764ddae54ff19d40e0f 32816 erlan= g_29.0.3+dfsg-1_amd64.buildinfo Files: 4abaa2a981f5c7779e4b550b26730746 5002 interpreters optional erlang_29.0.3+df= sg-1.dsc 7ddcfce419392820a2d4d5cea152a3e1 49270776 interpreters optional erlang_29.0.= 3+dfsg.orig.tar.xz 0ab530846a796637eca437f6e189531b 62292 interpreters optional erlang_29.0.3+d= fsg-1.debian.tar.xz 5f71e98d08d8f725bada1b348ceaa876 32816 interpreters optional erlang_29.0.3+d= fsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmpKo+cACgkQTyrk60tj 54cf3RAAsuFWLdrHdFU/PrkeCk0p+TKzGWY2UOubog2rO7EUthAR6SBggLGtuSXl SsIiSj3P2CLPPUPa+KalZZKioIq41LTxn6i2Udg8Kg5KvJZy+NAPCi//Yc7d854P cq02Fjq0cEIBpLkQHa4txBidViO383/W9BE+VKl4PnLyv2CxtNyF+z4Fn7G1vlk5 Aefm/XjYdejww7BS7lxEKuml3lnz6QETVtfnQL0jx57up5r5+WWErVrrpIyfPEqw WCXT4zKezNPoYxzUibGR8K438C3e4WwjpVJV8NKZuOKplianR/GutsmOka2pchQd qXoTX2pM6pFfTdPN4VYB+jIMsV6Ejs5A80jhSbynTxJ5xwqMuvN9L/HnCC13e/Rw XmMZE99rTCN7DTA7y7QcLpkVAZW/IRl7XeJt+qpuqXazU6CVhtSWKmWlylm5ztJC P5qFvBcno86pCrhUnYRwrtEKkpuNqDOiNeJAO5twI3In+tfvGqDuI193vw7/qrEk 4dH43mFPN2hwd+Kb5frK21C6sL6tB2z+N9J8CInUFR6orE9a5ejXZefJ5OUIk8uI K7Ih/RegOVDhBfN9gVaFqUjUrN86lsZvXOcW3cGDRAbdMicChtRUL9bJLeBswTAF B2R9oi7M3hJJdH/fL6gfjR2iSlm/ma3xfTJ1Gxdl3BWA8DLrWbQ=3D =3DeDYt -----END PGP SIGNATURE----- --===============0540692945294103202== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakqqsAAKCRCb9qggYcy5 IfjiAQCcpkk1zXMqsbyh5jkn2WkMvLanb4m61s7LjJTv+S2KUgD5AQ8kSbxZFaYL l4ysBNtobRNiPKg7dn/hAkXpp6vn9gE= =mqPJ -----END PGP SIGNATURE----- --===============0540692945294103202==-- ]