[From nobody Sat Oct 24 12:51:05 2026 Received: (at 1151684-close) by bugs.debian.org; 24 Oct 2026 11:49:58 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-112.6 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PDS_BTC_ID,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS, SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 93; hammy, 150; neutral, 205; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:36560) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xKaG7-000Dke-0C for 1151684-close@bugs.debian.org; Sat, 24 Oct 2026 11:49:58 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xKaG4-005DFS-1k for 1151684-close@bugs.debian.org; Sat, 24 Oct 2026 11:49:56 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=bwQWjAd3oSVe5IijvPAwFgBGJGlnOrdRRhtJxQYlFEE=; b=oxDSn4O/1FptaS9+sxbscvwttH +99MJGv2xmiP6nrNMhy7kgawtwGglx5C4xwljGSx6wEz6k33QldieIYZRhv/TjzRXd5cMYQLcDJUG kZPWB9We2Tyq1na8NNOSkwHE6L4C9w+t8p98IzE+McfRi5k2un6FqzQIY5oljicdUAEh2Mt5YyFtp L+k1vh+M0aJnIyMhJpPXvbv2wYidQmUWsZ1Q+hL/4VoayLn+Ee1vcd8h3ranq1HlAlBUOCzzfQkof qBPnVUVGhERdyKy0PFLTx0N4In3RhmAqUeyn4fNsn7Dk4nWV0ZV08WvHGF3zBv9e5y26c2vw+hDlv i0m+48Ig==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xKaG3-000000067HK-1V7O; Sat, 24 Oct 2026 11:49:55 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1151684-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang Debian: DAK Debian-Changes: erlang_29.1.2+dfsg-1_source.changes Debian-Source: erlang Debian-Version: 1:29.1.2+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1151684: fixed in erlang 1:29.1.2+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8480162327225227297==" Message-Id: <E1xKaG3-000000067HK-1V7O@fasolo.debian.org> Date: Sat, 24 Oct 2026 11:49:55 +0000 --===============8480162327225227297== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang Source-Version: 1:29.1.2+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1151684@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 14:15:44 +0300 Source: erlang Architecture: source Version: 1:29.1.2+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1151684 Changes: erlang (1:29.1.2+dfsg-1) unstable; urgency=3Dmedium . * New upstream release. - Fix CVE-2026-94200: Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. - Fix CVE-2026-96596: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. - Fix CVE-2026-105236: Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. Closes: #1151684. Checksums-Sha1: b23cd99e0f508cd9a2bad77d8d06d9919927437a 5048 erlang_29.1.2+dfsg-1.dsc 6784dbd6b6f4ce38380d47f24873ea9d879c3709 49389056 erlang_29.1.2+dfsg.orig.ta= r.xz 9d220fcdb66771f26a2e67a8676b181b7f698672 64240 erlang_29.1.2+dfsg-1.debian.t= ar.xz 1279f1395b8458ad6b6f9eb4b252fabc20507a04 32273 erlang_29.1.2+dfsg-1_amd64.bu= ildinfo Checksums-Sha256: 25ad94ee185652c436b9bf2f60077a9a94832401f47e342ddf0b677f7788fcda 5048 erlang= _29.1.2+dfsg-1.dsc f0d2090af6f9f94df94c71dfeb392b1988d02655e9d31ce961f1de79986cca27 49389056 er= lang_29.1.2+dfsg.orig.tar.xz fa41666f64be1b7eccace79fcdb110cf6f6714eac8561cfaa9902212ffcbb07c 64240 erlan= g_29.1.2+dfsg-1.debian.tar.xz 1b37537f5102f2321914f7ee0da87ee4d547170761efa2d49259fe7525bd9c28 32273 erlan= g_29.1.2+dfsg-1_amd64.buildinfo Files: 494d2812c1ad636c598ce2e6c3b34cd3 5048 interpreters optional erlang_29.1.2+df= sg-1.dsc 78ef36690439d8d896de9318c598fb52 49389056 interpreters optional erlang_29.1.= 2+dfsg.orig.tar.xz 4d906ff15e35282cedf0d0a1d3e55cab 64240 interpreters optional erlang_29.1.2+d= fsg-1.debian.tar.xz 68183aa54238eed5ad30e5666342e596 32273 interpreters optional erlang_29.1.2+d= fsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmrclWgACgkQTyrk60tj 54dfKw/+JjHCUHjuUjBSVXTz1M1Wi7qbK6YZFDzD+7Q0264bMKuOSgW3DPxSXqX0 I2U2b3msRrAyblnYqvnaTCGNCXjYewerL906OCnDJfcjnxnwu7uG+fwwIgdENtul ++/EsCkV6hvS2vsR2vnVK+QKgNvTlaAu+ZdAko0Gp26A/sSl/lEhZ34xee6YSkmQ GwhfP6djI/lzzQFH0kkbUHzl24n3V5vv6v1xD6bJb+bh71t2K7fhoVKMTT447nn+ F/fQMxTMxBaCSoBH+XhYcts7MMHSvsIITD8WKutFz3BAt+huShVatOh3e0rXvusx vE4Txne6WvLc02/1pcc8W0AhPsgcTbfVH+1drKE5nB3YLhCoViDJaS2xWj4BmMSF eEM4goVb2msgvAZp598sw/Xymru+cTbnV0WWx0Jyl2RhaN2n6OBXLW0E6TDgJd4u mIXW5GEiRg7cG3gIox8XeMFhpFYWDcvxsqG2bVUK9Jk4DpPFaVUjNWwBYgpsZoET DKqb/NODw4lDXb7xMDdt6Qu3VIXUJdIRc9WSfAxB10ri8tIhcIbn4ZsPzAn38PKa E6aoI6CHorrTLhiqx/rdDDIJDETR/tMYWwaxuBgtisy4D3jJoe7D7q8635t93YQc z9cjAQ8AOeta0lO5qtNBU2JOx/QLi4NyE39L6DwwjVaMgdfNsc8=3D =3D66o3 -----END PGP SIGNATURE----- --===============8480162327225227297== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCatybYwAKCRCb9qggYcy5 IbjjAQCivV28n0DeFoXgk6G+lkPq3zcADFoucrXzN/CrtapHRAEA2sKjchddQkqW O+0WrTw309brQYGs6IA5U36UFkamNgY= =5N1j -----END PGP SIGNATURE----- --===============8480162327225227297==-- ]