-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 09 May 2025 09:04:59 +0300 Source: erlang Architecture: source Version: 1:27.3.4+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1104963 Changes: erlang (1:27.3.4+dfsg-1) unstable; urgency=medium . * New upstream release. * Fix CVE-2025-46712 in erlang-ssh application, where a man-in-the-middle could use optional KEX messages to impact the KEX process (closes: #1104963). Checksums-Sha1: c00541aee24563fd491d5e9f5c041a5a898acd74 4896 erlang_27.3.4+dfsg-1.dsc 4cd229097b3ae9639b94f827223a7867e043cb9d 47594396 erlang_27.3.4+dfsg.orig.tar.xz 24c02c65e0ce5680cd6670717f133a311bc03e3a 57492 erlang_27.3.4+dfsg-1.debian.tar.xz ca791301692ed6223123cb8c3b107d5caf62a1db 30480 erlang_27.3.4+dfsg-1_amd64.buildinfo Checksums-Sha256: b39612e389ab23995c992be850a0094fdfedc25f9948f8f075d132f14ccdb40a 4896 erlang_27.3.4+dfsg-1.dsc 2d8a035faee5341ea48713734e2312fa185f8d63dd6c9fbf56ff4b44865d3794 47594396 erlang_27.3.4+dfsg.orig.tar.xz 6e8c045313dff36f57794dc4b66729850ef81c1a25dc2f1717cfd6bc17665123 57492 erlang_27.3.4+dfsg-1.debian.tar.xz 381de958882c3419f3e78b85a54dad5f7858d26ac70e89aca84ff2fc978eb861 30480 erlang_27.3.4+dfsg-1_amd64.buildinfo Files: b70d59778425c85ee21f4b27950609d6 4896 interpreters optional erlang_27.3.4+dfsg-1.dsc 03fc6f4247b8559d2c08ac09343a3471 47594396 interpreters optional erlang_27.3.4+dfsg.orig.tar.xz 26db21b147c5a5519a3bd826c093781f 57492 interpreters optional erlang_27.3.4+dfsg-1.debian.tar.xz 902a62ccadc0a0924daf7d6c9b15b1b3 30480 interpreters optional erlang_27.3.4+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmgd0k0ACgkQTyrk60tj 54d8zhAAqvgdBxF5Hl3IIhUF+Q9KEeogD71Gi6EezkNGaQS+NpxUuLlN2KU7bdVN hfNdb0iWzMpBaKj6z94E3MjsVuM+yg1R9BeHsM/gugImYMBvD4fgigi1M/KMx5eE nx0ynQV4nGAzeP2rkA2uBS8tvlkfGtsOifSlMdm++z7+ayP4K+HkrqwJmOPlc2ea Qd0nRvBasZTdiswGciTK8CPjJKHx9jxV3EjptDCiqNk/JLWfHT6LJEo0NEq4l/Cj 6PTQT651wXDcUqdv8Wqfpynnf9RSYUIbFeqeJAQnoHaDDL6R0QaMQ5WC8i5TDhaT NLgH4tmYc+e2pMpYR+BlUkcAlorICp92+KPguW7UFq7sgtmIm2H6u0xwfWxHvxi+ Wh0pUC6j7ayuiQQJPvgvqjCiVuB+AZ/kmbgL6slk4k6N+Gy0SiJfSEruxD3HXWgl wWhTj7HEb3qZfMuLGmJMJ/8I+ctMq1GTAFbkd6Z3Si1/hbvkvmskS0U1fRKPj9mf Mc6q67DpGILeArzVtDEVmCUHL64p3/QZTF6deAJwLqHSgHA/IfJraOpKhbit6D4K 8MlBBj2Eeonlq5nlve8GXQWq0R700DMi82lm9qMKbZiQ4kyaFxbXiN2lymTu6isa T1DzR2RoH1xlzRivdY2zz17cBEmSYqToVMocGthpZzJkebdvbe8= =S4u+ -----END PGP SIGNATURE-----
