[From nobody Sat Sep 12 17:53:06 2026 Received: (at 1145197-close) by bugs.debian.org; 12 Sep 2026 16:49:31 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 90; hammy, 150; neutral, 154; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:36180) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x5Qux-00BJMT-2U for 1145197-close@bugs.debian.org; Sat, 12 Sep 2026 16:49:31 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x5Quw-0037HA-1F for 1145197-close@bugs.debian.org; Sat, 12 Sep 2026 16:49:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=6CMj0lf0E8yZHP9+019f1jToiRIE0jGJlWmygYjmVOk=; b=L+6O2sKFz6Bv8Lxs3zNR1pmAQE lEM5T3LS0rbPLQjvkCsG1eoDmJPMy4t2KVQseMJMj3jViQ3uKuyt4F+kQ6UsEmSXYr7RgTUyYI+Dt A5T6hIo6eq/gDhHX3FO33y1cxMcEKu3ZD6J9YBzTBLOed1+oU1dHGEwNgXQwLt1fyHaOsEc7YbeUX TH8aAdl/KQGMya1kjuE9szvlZyRrWxtrDnXA/uuCd+kHsRCis0Z9iE53wMoqzcfKOxzHzv56e0rRK PeSX3FyLUOPhGxEtNEZ29zOGxZozoc2QMHG3nYnCAPw0xEzHzgZGw463BHdGSunxui+dwFEto2sY8 2QFLDZVw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x5Quv-00000004mKR-1wn0; Sat, 12 Sep 2026 16:49:29 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1145197-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang-cowlib Debian: DAK Debian-Changes: erlang-cowlib_2.20.0-1_source.changes Debian-Source: erlang-cowlib Debian-Version: 2.20.0-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1145197: fixed in erlang-cowlib 2.20.0-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7810979666726214991==" Message-Id: <E1x5Quv-00000004mKR-1wn0@fasolo.debian.org> Date: Sat, 12 Sep 2026 16:49:29 +0000 --===============7810979666726214991== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang-cowlib Source-Version: 2.20.0-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang-cowlib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1145197@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang-cowlib packa= ge) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Sep 2026 19:28:04 +0300 Source: erlang-cowlib Architecture: source Version: 2.20.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1145197 Changes: erlang-cowlib (2.20.0-1) unstable; urgency=3Dmedium . * New upstream release. - Fix CVE-2026-43971: Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggli= ng via unescaped special characters in cow_link:link/1 (closes: #1145197). * Drop the priority field from debian/control. Checksums-Sha1: c28ac7c23bb7fcfc59698accbecf9b87be3069b6 2137 erlang-cowlib_2.20.0-1.dsc be4e082fc9e7eb4bc6b390d0263b310b234eb710 218413 erlang-cowlib_2.20.0.orig.ta= r.gz 29ae49c0e0329a6baac1ea0378ffdbb2138b1022 3344 erlang-cowlib_2.20.0-1.debian.= tar.xz 64635d0f2b316b22718383cd85f7eab31cec3446 6107 erlang-cowlib_2.20.0-1_amd64.b= uildinfo Checksums-Sha256: 6da4852f7bc38b8a938a866dce4ff304a2b8738bc174081296235bc5eb504fa4 2137 erlang= -cowlib_2.20.0-1.dsc 18357c83b82bc941dbe8b64e85763e5820649913a2a2200a690f546af3b3234f 218413 erla= ng-cowlib_2.20.0.orig.tar.gz 70e9181e556d3f92184f1ff82cd438cc4ce306eec7ccabe468a3c5b7a51ee370 3344 erlang= -cowlib_2.20.0-1.debian.tar.xz 1b3bb27803b693776e3737c7f0310ad7007a35bc67870f7ef0b17a15d9da24e5 6107 erlang= -cowlib_2.20.0-1_amd64.buildinfo Files: a45ff0f4bb9620db925d1c74fdf26fc4 2137 devel optional erlang-cowlib_2.20.0-1.= dsc 7899e77fe08fc272e9af838cdcde2d94 218413 devel optional erlang-cowlib_2.20.0.= orig.tar.gz f481fea72d3b56caa93f73aa75a012dd 3344 devel optional erlang-cowlib_2.20.0-1.= debian.tar.xz d535d0917560d8a5ad5b8e8fbc02c516 6107 devel optional erlang-cowlib_2.20.0-1_= amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmqlfdwACgkQTyrk60tj 54ePEhAAxxOwtGFrpkcB6oe7+OlZfFofvHx4AbIJDaypusczZv7Xzw+1DP5sf49F 24J16bZDgVAkykpCYVlj5Ubicord9ouIceXjhzBCxEfWptZ4WxLC+pP7wPRI6TDI 2QTMZa6ja58t1FDkZgcDhjPOa7w1JDgrhrRKdYfDfQUa8Zy29qzsrNoBEc6dttBo 4hg7La8WFdIWrJ+wn/dDdzYo7IcIGHXM6OPP7jLuQvSaZsJSW4hMYPZosdDk2Pyv 3xRJdLkDGXpVMzHAfF2qgmeLHuoB/TecWFD8ieHzZZmbbxRffUndo1wgywOlGv7a BBZrbQI2loZsniBRNSzdYktbJm6nyS+gdlOtkHNAPX1B5soG7zt4IX5bm4rbP+ls 87RChGxcqOliN+JVoxp4mV/rEp1ybyOtxzvX6KCQo0hGyvw32v2fnEkcx5i/S1xr +QXfKGZ6hKA3NtdL7YoSDLsQZT4czJRAJJ5rvSdPD8VY/P4GLQVJACs2bsIYf6cr ylrtQAnomCnlNxaH7R1djg41QPB+ovGJKA9bD2x/1VyThXPx5g5LbouvGFfP5ZeA rr7UO9QBejGQlTW+IWEEwnf0EUOV9qiade0qAfR/gYzbtdO4XzwmN9TU8lGEVZ2z 0swjO9Tyv6BAlEQF8W83Hx4IEGY7+5oodLWTx9iqG1Q1DT+AAaE=3D =3DTvGe -----END PGP SIGNATURE----- --===============7810979666726214991== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaqWCmQAKCRCb9qggYcy5 IQC+APwOQnq1Tq2ENctK4NagauicY2ralyzbz3sOyPguLEF/rwD+JpxYwgsQwCTR umCs5OAmJGOauKbTkSg5LRsgaXrNJQM= =8N0D -----END PGP SIGNATURE----- --===============7810979666726214991==-- ]