[Pkg-erlang-devel] erlang_29.1.2+dfsg-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 14:15:44 +0300
Source: erlang
Architecture: source
Version: 1:29.1.2+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Erlang Packagers <pkg-erlang-devel at lists.alioth.debian.org>
Changed-By: Sergei Golovan <sgolovan at debian.org>
Closes: 1151684
Changes:
 erlang (1:29.1.2+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.
     - Fix CVE-2026-94200: Improper Validation of Consistency within Input
       vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and
       tls_client_ticket_store modules) allows a malicious TLS 1.3 server
       to cause a denial of service of the ssl application on the client node.
     - Fix CVE-2026-96596: Loop with Unreachable Exit Condition ('Infinite
       Loop') vulnerability in Erlang OTP stdlib (erl_tar module) allows
       an attacker who supplies a tar archive to cause a denial of service
       via a crafted GNU sparse member.
     - Fix CVE-2026-105236: Improper Certificate Validation vulnerability
       in the ssl application in Erlang/OTP allows a client that holds
       a certificate trusted by one SNI virtual host to authenticate
       to a second SNI virtual host on the same listener by resuming
       its TLS 1.2 session there.
     Closes: #1151684.
Checksums-Sha1:
 b23cd99e0f508cd9a2bad77d8d06d9919927437a 5048 erlang_29.1.2+dfsg-1.dsc
 6784dbd6b6f4ce38380d47f24873ea9d879c3709 49389056 erlang_29.1.2+dfsg.orig.tar.xz
 9d220fcdb66771f26a2e67a8676b181b7f698672 64240 erlang_29.1.2+dfsg-1.debian.tar.xz
 1279f1395b8458ad6b6f9eb4b252fabc20507a04 32273 erlang_29.1.2+dfsg-1_amd64.buildinfo
Checksums-Sha256:
 25ad94ee185652c436b9bf2f60077a9a94832401f47e342ddf0b677f7788fcda 5048 erlang_29.1.2+dfsg-1.dsc
 f0d2090af6f9f94df94c71dfeb392b1988d02655e9d31ce961f1de79986cca27 49389056 erlang_29.1.2+dfsg.orig.tar.xz
 fa41666f64be1b7eccace79fcdb110cf6f6714eac8561cfaa9902212ffcbb07c 64240 erlang_29.1.2+dfsg-1.debian.tar.xz
 1b37537f5102f2321914f7ee0da87ee4d547170761efa2d49259fe7525bd9c28 32273 erlang_29.1.2+dfsg-1_amd64.buildinfo
Files:
 494d2812c1ad636c598ce2e6c3b34cd3 5048 interpreters optional erlang_29.1.2+dfsg-1.dsc
 78ef36690439d8d896de9318c598fb52 49389056 interpreters optional erlang_29.1.2+dfsg.orig.tar.xz
 4d906ff15e35282cedf0d0a1d3e55cab 64240 interpreters optional erlang_29.1.2+dfsg-1.debian.tar.xz
 68183aa54238eed5ad30e5666342e596 32273 interpreters optional erlang_29.1.2+dfsg-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmrclWgACgkQTyrk60tj
54dfKw/+JjHCUHjuUjBSVXTz1M1Wi7qbK6YZFDzD+7Q0264bMKuOSgW3DPxSXqX0
I2U2b3msRrAyblnYqvnaTCGNCXjYewerL906OCnDJfcjnxnwu7uG+fwwIgdENtul
++/EsCkV6hvS2vsR2vnVK+QKgNvTlaAu+ZdAko0Gp26A/sSl/lEhZ34xee6YSkmQ
GwhfP6djI/lzzQFH0kkbUHzl24n3V5vv6v1xD6bJb+bh71t2K7fhoVKMTT447nn+
F/fQMxTMxBaCSoBH+XhYcts7MMHSvsIITD8WKutFz3BAt+huShVatOh3e0rXvusx
vE4Txne6WvLc02/1pcc8W0AhPsgcTbfVH+1drKE5nB3YLhCoViDJaS2xWj4BmMSF
eEM4goVb2msgvAZp598sw/Xymru+cTbnV0WWx0Jyl2RhaN2n6OBXLW0E6TDgJd4u
mIXW5GEiRg7cG3gIox8XeMFhpFYWDcvxsqG2bVUK9Jk4DpPFaVUjNWwBYgpsZoET
DKqb/NODw4lDXb7xMDdt6Qu3VIXUJdIRc9WSfAxB10ri8tIhcIbn4ZsPzAn38PKa
E6aoI6CHorrTLhiqx/rdDDIJDETR/tMYWwaxuBgtisy4D3jJoe7D7q8635t93YQc
z9cjAQ8AOeta0lO5qtNBU2JOx/QLi4NyE39L6DwwjVaMgdfNsc8=
=66o3
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-erlang-devel/attachments/20261024/251b5140/attachment.sig>