[From nobody Wed Sep 23 16:07:08 2026 Received: (at 1148772-close) by bugs.debian.org; 23 Sep 2026 15:04:51 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 100; hammy, 150; neutral, 203; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:52512) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x9OWg-005nCF-36 for 1148772-close@bugs.debian.org; Wed, 23 Sep 2026 15:04:51 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x9OWe-0058xs-3D for 1148772-close@bugs.debian.org; Wed, 23 Sep 2026 15:04:49 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=cmEvCE/oMNPtkmM1NRdokPSCSu+SKYtBm3+wE3htdto=; b=mh7c/uAC6fbC0ULK1+h0Ltf1Tk T2UF9IH//JO7WHNw9VAwshG3oFVFgcoyiCtHmyd3omrWw+J+RC9RbwA2dl+SxH9POIQk4lqOZ08BV pWHAyM8slXTVJ1g9kxVfWlGYYvQn8XuQJuiOmnJjVU0Fd/gck6BoWzDPPAQ7EdVtuKTD8WjZbbbcr i8o+lOtslF1lXr1M5OkZNlNBRkuOcoDVN75kfwJZmGZyfjO7CRm4B7knAd7R5Z/BmhcBzcm/Gbtjz rS4gB+uAOai14oPejDxhFw4SD8gej5XI16W+UNkbxplIIxYmgcMMVCbGfFxZRnWmXyHN5OPVl8DKt EDvkXdIA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x9OWd-0000000HDNU-3Rxo; Wed, 23 Sep 2026 15:04:47 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1148772-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang Debian: DAK Debian-Changes: erlang_29.1.1+dfsg-1_source.changes Debian-Source: erlang Debian-Version: 1:29.1.1+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1148772: fixed in erlang 1:29.1.1+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5226475170462257658==" Message-Id: <E1x9OWd-0000000HDNU-3Rxo@fasolo.debian.org> Date: Wed, 23 Sep 2026 15:04:47 +0000 --===============5226475170462257658== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang Source-Version: 1:29.1.1+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1148772@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 23 Sep 2026 17:35:05 +0300 Source: erlang Architecture: source Version: 1:29.1.1+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1148772 Changes: erlang (1:29.1.1+dfsg-1) unstable; urgency=3Dmedium . * New upstream release. - Fix CVE-2026-65634: Inefficient algorithmic complexity in the Erlang/O= TP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. - Fix CVE-2026-68956: Allocation of Resources Without Limits or Throttli= ng vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. - Fix CVE-2026-89422: Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. * Disable wxWebView in the erlang-wx package for s390x, hppa, m68k, powerp= c, ppc64, sparc64 because libwxgtk-webview is not available for big-endian architectures anymore (closes: #1148772). Checksums-Sha1: 9a3f251ade73ff1903e7f1c69abb884574122ee5 5048 erlang_29.1.1+dfsg-1.dsc 956cf339ba4585c969bafaff4b3c6245a3b5e484 49370724 erlang_29.1.1+dfsg.orig.ta= r.xz 5966462a73f426c77b244e60768a68092cc4dcac 64008 erlang_29.1.1+dfsg-1.debian.t= ar.xz 5b730f1c78b0ad5727377d0a5cb88417b4dc5987 32230 erlang_29.1.1+dfsg-1_amd64.bu= ildinfo Checksums-Sha256: 913097ec055da173f9559bcb32d5d2b6b5fff47742051321a6b63b9c84a42b4a 5048 erlang= _29.1.1+dfsg-1.dsc b711f4e9dff76c51aded2574322a18129033594c5244a3710b2b00d9cb0ff348 49370724 er= lang_29.1.1+dfsg.orig.tar.xz b756b550bf8883a7d8fa70140902562f1126f8265334f0eb3a7e15d607fe495a 64008 erlan= g_29.1.1+dfsg-1.debian.tar.xz 02afa75564246cd8a88ae50fb0f4549d3512533a48221c9a4f2b86e57498913c 32230 erlan= g_29.1.1+dfsg-1_amd64.buildinfo Files: 54ef52d6688ddf91a563c249370f5f6f 5048 interpreters optional erlang_29.1.1+df= sg-1.dsc b46dc238982d62cb40f99f7d79bf9458 49370724 interpreters optional erlang_29.1.= 1+dfsg.orig.tar.xz 1c43b0c786be5d910cb3e8e7a0b8eef5 64008 interpreters optional erlang_29.1.1+d= fsg-1.debian.tar.xz 254bd8bb24406481e4b46b34c3afe16f 32230 interpreters optional erlang_29.1.1+d= fsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmqz5WMACgkQTyrk60tj 54dOkQ//fuBIgvDCqHui85tY3d1HQFTXc2DPdzZr/HN5eBcJfFAClriYb5ntWoCp D2h2CdK83aQRxP46KQtx8FfJfyABFhyjq0/SrsBsbMiLPvqYy7mJP6mxeRBGnmRy AWVxC+/4Q3CDOQItOFWmeV/nybytliCZRqN+XYOfgqgAcZz1zyNNhkBtZJAyb+eT TZMrEVCkmJAZDzxwWrZrMv0urajUXa3E7PSmySyqBAt4H/vTDgk43RQvGzDrc+jM xFi2rOjpac54ezoYgmsqbSGa809/IUIVRrCF6Zbm0KIZy0AEeKsXUlpeFGhQGn+3 IrZHMk3agOuU/AsNzEl4um5hEteOPyvyJ1PnE0As+dmFGAI5xCwz5QOQJNlTkX0q aVbQU1nzE6NPfqDFIFBLCbSLF6S5wnXaO3iTWH5VpORKj/vGMAMcolRUjPySRRq/ Ltsk0cpoo1gp8QG+frGEO2iaK2XxwpphAIo0DKBj79nNwHUfKGhzHsj17bWaXOHb fTdSC7IzY4X2FCokLbpxGXYw8x5pkde6Jef2Y5RDsujX7FAnH20bAbBIVd4hR6rK boJ2pblMA2IxBRgiAuPFxPHAC17lUnt8Nw0Zmv0VBiqkV3+/ciLRwD98syLp0CaX 1krglPPm5KutqjzDXnlfYXH5BzuoOWnSw1CwoyVgZru7DSV5C/4=3D =3DsI7J -----END PGP SIGNATURE----- --===============5226475170462257658== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCarPqjwAKCRCb9qggYcy5 IRmvAP9LFrODC0goOnvU1rq7wUSgr4y0VxHTJql5GcHmk7FzbgEAvsHV+YF4C5kj krXTNcjTpWUROsy0JWNL4jvPjHeQugg= =uMbT -----END PGP SIGNATURE----- --===============5226475170462257658==-- ]