[From nobody Thu Jul 30 11:51:03 2026 Received: (at 1142985-close) by bugs.debian.org; 30 Jul 2026 10:49:44 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 93; hammy, 150; neutral, 251; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:55848) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wpOKe-00GQ1r-13 for 1142985-close@bugs.debian.org; Thu, 30 Jul 2026 10:49:44 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wpOKd-00CjDX-06 for 1142985-close@bugs.debian.org; Thu, 30 Jul 2026 10:49:43 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=7xd0OT7aHD91hPyDwBl4DypsinxfyXiCVVjNTgc1Jkc=; b=bswAxT43bL+OO1rRoQu0FFLYeL cLuG6m56hMT/O1SrrPwVkorw/ZWpnNLRIqi514xLlJ/hvmtqzdkmFHt6u2vkCBHZljqE8CWqvnVq/ JYI7vlVHVfdeZ832qMrBmbENFZ5Np6eO25ep170jo7htcTDxVxeuedKv0QmDKj+Sz1sy1gEws5HlY /yVOyazOXLVSngvIcLOIOV+vyEvyCxxU5hRs2spGzzcQJfh2bl5q+DVxDmWvnefuv5UtPxYMa0dfJ 1Aa8Ug4Y8qMSDNjKe3cfeeNS13KTsp0kqGeRa0/tZdt8Q1gOx5d4tXVe+xZPcfSfaygKHYfuBRBG/ pTGUbmRw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wpOKc-00000005ufi-0QHF; Thu, 30 Jul 2026 10:49:42 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1142985-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang Debian: DAK Debian-Changes: erlang_29.0.4+dfsg-1_source.changes Debian-Source: erlang Debian-Version: 1:29.0.4+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1142985: fixed in erlang 1:29.0.4+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3853045107606674180==" Message-Id: <E1wpOKc-00000005ufi-0QHF@fasolo.debian.org> Date: Thu, 30 Jul 2026 10:49:42 +0000 --===============3853045107606674180== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang Source-Version: 1:29.0.4+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1142985@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 30 Jul 2026 13:30:50 +0300 Source: erlang Architecture: source Version: 1:29.0.4+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1142985 Changes: erlang (1:29.0.4+dfsg-1) unstable; urgency=3Dmedium . * New upstream release. - Fix CVE-2026-42792: Improper Handling of Exceptional Conditions vulnerability in Erlang/OTP epmd daemon. - Fix CVE-2026-47078: Relative Path Traversal vulnerability in Erlang/OTP stdlib (zip module). - Fix CVE-2026-54890: Integer Underflow (Wrap or Wraparound) vulnerabili= ty in Erlang/OTP erts. - Fix CVE-2026-55737: Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang/OTP erts. - Fix CVE-2026-55953: The Erlang/OTP ssl TLS and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. - Fix CVE-2026-58227: The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. - Fix CVE-2026-59250: Buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory. - Fix CVE-2026-59251: Allocation of resources without limits in Erlang/O= TP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service. Closes: #1142985. Checksums-Sha1: 1fcb33549922e57f13958134d056ea833a3b8bfb 5002 erlang_29.0.4+dfsg-1.dsc 18fd9b9ac1a1280d415a28349592043c6bd6d6e0 49302664 erlang_29.0.4+dfsg.orig.ta= r.xz d6351d4abf193b85b9c7cebb85e816852f4c6e15 62592 erlang_29.0.4+dfsg-1.debian.t= ar.xz aae3e4af3f884fa88ce2ac5885b8ec5816e1b133 32348 erlang_29.0.4+dfsg-1_amd64.bu= ildinfo Checksums-Sha256: 15422d2f6ecaf33a97245144777b51ffa9a47027c84b4aced0fbc53416f730d1 5002 erlang= _29.0.4+dfsg-1.dsc 50a470be38a51f8b5f05f4f788063e8823259ad2a2d9c7daa3b8d9b4ecbcc96c 49302664 er= lang_29.0.4+dfsg.orig.tar.xz acbf62e98f89c51c52dc2fedd9984cbacbcbff6fccee33b05496a5698133e84a 62592 erlan= g_29.0.4+dfsg-1.debian.tar.xz 4ccc509dcce66eb4e8c54eabec233cbedddd5190878608743fe64944384fe62d 32348 erlan= g_29.0.4+dfsg-1_amd64.buildinfo Files: cfea99dd9c950164a22610b041df87a3 5002 interpreters optional erlang_29.0.4+df= sg-1.dsc 1500bd1fbdb8c4425c3928e0979c836b 49302664 interpreters optional erlang_29.0.= 4+dfsg.orig.tar.xz fe3e4e9d0cedebe8a01a306afc81463d 62592 interpreters optional erlang_29.0.4+d= fsg-1.debian.tar.xz 6f5383c561fafab1cd94e5241bfa3d15 32348 interpreters optional erlang_29.0.4+d= fsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmprKckACgkQTyrk60tj 54ewiBAAoq1gWiJ4E7iCfvcIY19jrvp7J3lvS5IxNZvW66ymKaE6ZSYJAdHiDDWZ VuFromSTMNc7RVJ0s+DDwr3l1ZYQOzN1weRTMBtf67jgUekUVcflBG0y4U8XuGXI RGj41xe2ZzucNdWZ7S4vjQzco87QSpcRAZ1cedtWlvfPW5uwEioWYO6gPS0LSytb m2nAUeDpEWn81DNuJV45IYxG/r3pmm3sBw+j9AA7e7TUA7RVz96oBDZ1gpUDxGjC lwgtpp2j61N/foLg96YjA2Grqsa9G9KC7sD2T7npjHpJAb/FcxOPhKT+5eRh4WeL fNBhQ+zOW7hpDefhG5B4WDZOBhSbCl8dEpRP+/Od6BZlNfPUfGS6/QHR1Tcn3em4 waVCDDuU/lOVK+W0X6npNd3qwn9c+T0qmIqfDUC7lNu1hl3Ho9EjRMP7CupgUkj3 oZSDchcTi4wFR0kL8CQ+c1TFaJSM6qXaDwx05pmkcSwKpLpV8GHr0rRgJL/YvUA9 uAXzsgeHFU1CpVP74cODHuuUwbfVTOrvtLGKGDJ0hFWsBpFMcTeV8Dk5pkFR67cH R0eucWQcb1mekfwksyee3lRbMTKo+EMSmAlyoPzfGxr4Ire+mxy4+iI4T63yLLgN LVwEgv9dm7w0VQ0xJ0rmF9Da2dK3nktLq4PJj7GNOUZGOrRxocc=3D =3DDqJs -----END PGP SIGNATURE----- --===============3853045107606674180== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCamssRgAKCRCb9qggYcy5 IdlAAP9m5RWJU0KGSJ2kf1hrqf1VXE4ssrXtM1Ox7yzNPbdHowD+IZPMCnt4F3dR BwNrSHzggIPefKEkEs3i+Xq6PLINOwk= =0NAg -----END PGP SIGNATURE----- --===============3853045107606674180==-- ]