[Pkg-erlang-devel] rebar3_3.27.3-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 17 Oct 2026 18:21:25 +0300
Source: rebar3
Architecture: source
Version: 3.27.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Erlang Packagers <pkg-erlang-devel at lists.alioth.debian.org>
Changed-By: Sergei Golovan <sgolovan at debian.org>
Closes: 1150901
Changes:
 rebar3 (3.27.3-1) unstable; urgency=medium
 .
   * Team upload
 .
   [ Sergei Golovan ]
   * New upstream release.
     - Fix CVE-2026-105274: Improper Handling of Highly Compressed Data
     (Data Amplification) vulnerability in hexpm hex_core vendored in rebar3
     allows an untrusted repository mirror, or a server answering hex_core's
     API requests, to exhaust the memory of the Erlang VM running hex_core.
     Closes: #1150901.
   * Remove patches which port rebar3 to Erlang 29 because they are no longer
     necessary.
   * Bump debhelper compatibility level to 14.
 .
   [ Philipp Huebner ]
   * Remove the priority and rules-require-root fields from debian/control.
Checksums-Sha1:
 9c1c5c434327bb332ba329295dbfda0b19d44539 2095 rebar3_3.27.3-1.dsc
 42d6b9960a91c31148bf7081069cc653b3f7408c 904757 rebar3_3.27.3.orig.tar.gz
 cccf5fa62658777aa097aef6faaeffe6614978e1 7624 rebar3_3.27.3-1.debian.tar.xz
 f8c5d9fecfd5dfa0cd3a02b47a26ec24b25c87ae 14213 rebar3_3.27.3-1_amd64.buildinfo
Checksums-Sha256:
 ae68c380e4f7cfa61d072b5b65e6ea4b09d61c76a42043d20b8b153ed744b0dd 2095 rebar3_3.27.3-1.dsc
 2cf3a0d9a37ad9715fdb870b161ff61282048588ddb424362dacc22444c2d1f8 904757 rebar3_3.27.3.orig.tar.gz
 86eb75aff7180e1cc4cf888912c7b350d30fc28fd33c242ecd6509244e5dc70b 7624 rebar3_3.27.3-1.debian.tar.xz
 0ca29f7290dea47465b871dc9a1bf7e6ebe97688f418162b8e046846b22379b6 14213 rebar3_3.27.3-1_amd64.buildinfo
Files:
 8e31624e5ddf1960b5bdd9852a56f80c 2095 devel optional rebar3_3.27.3-1.dsc
 e09fd9c7242ecb01891d8ac56349f488 904757 devel optional rebar3_3.27.3.orig.tar.gz
 7b82b37850563961509e2669dcefc991 7624 devel optional rebar3_3.27.3-1.debian.tar.xz
 cb80fa4baefe03a3e365453e97258789 14213 devel optional rebar3_3.27.3-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=cpZN
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-erlang-devel/attachments/20261017/571cded6/attachment.sig>