-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Mar 2026 10:07:09 +0300 Source: erlang Architecture: source Version: 1:27.3.4.8+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1128651 Changes: erlang (1:27.3.4.8+dfsg-1) unstable; urgency=medium . * New upstream release. * Fix CVE-2026-21620: a bug which allows TFTP to specify a file to download outside the TFTP root directory (closes: #1128651). Checksums-Sha1: 2e450bdce2c6a5957b8554dd216bd5dd4cdc9bc3 4910 erlang_27.3.4.8+dfsg-1.dsc e3c4b759d5a52d47d11636133da4c770f1b52b20 47615816 erlang_27.3.4.8+dfsg.orig.tar.xz 1540e69a71c42026cf3ca16d9e5069adad6971f9 57936 erlang_27.3.4.8+dfsg-1.debian.tar.xz c896119121b541d66312c5f08a0b470decb8f4e5 31187 erlang_27.3.4.8+dfsg-1_amd64.buildinfo Checksums-Sha256: eb6f3ff080379d2580f050e197917c938dd51f6c1bc0845238f9bfc8dee7e054 4910 erlang_27.3.4.8+dfsg-1.dsc 1712c29280d1916e68bee181af95064565c4b90333ea00b82d6c2de318a14e58 47615816 erlang_27.3.4.8+dfsg.orig.tar.xz da5feee2a0b853e195b6f3d706310649126740a823f6326c5d9be87a5ec70619 57936 erlang_27.3.4.8+dfsg-1.debian.tar.xz f6827c9bcde889642eaafb4e6502f9917e6edecc3ba4c31c83ce2bc98c35a3ac 31187 erlang_27.3.4.8+dfsg-1_amd64.buildinfo Files: 653b5b59df48d70f548b2ebd23625d1d 4910 interpreters optional erlang_27.3.4.8+dfsg-1.dsc e749aaf5b6eb6fabfa30dd122cb90692 47615816 interpreters optional erlang_27.3.4.8+dfsg.orig.tar.xz 9a29e54a524cc727fc65a3ef65933d68 57936 interpreters optional erlang_27.3.4.8+dfsg-1.debian.tar.xz 681ebedfd68c7479cf8fabfb933f62d4 31187 interpreters optional erlang_27.3.4.8+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmmvyxEACgkQTyrk60tj 54coHQ//VEJuUro9Rj4VW5DQIqbsM6QOYnmhWH5VIeAS1VNJR5yHs76ksILEk/wp Zkq/57c7iV3sPle8+w9QyEl0J1y6MJoyK4uKxswpRl7IrjzIw+j+x8bBWXtuV66U LKfEj2qtS1KCjn3EfMxK6r5I8mbNJHJbw7cnbrw519XrkyL661SRrobOu9NELawi rnV0eJ31QOOw+EXk8k4Ap+G1smXrPLbpOMPD7yZsqe74uUZLijdZi6uB3P4UxnHK wxJ2FlzHl33OPDXC9eeMf3O4zRev9r4RmrTxqx2j3H1QhP5HXEDOJG3Im9wu7usq 1dgqWwJsVatPn+q7v07EJn3IaflbBtPbG7pLj7N6709nnYvpXcxiNV1rq3Xpr14i Yklt9fD/M3T9miqrDM98xXKJ/Kl8dXmKXGHbE8c06YEf5mFV79LBLU/ZQh2N3bK2 U9TRZ5b6gImChWgapv5zoMNSQ46X5qe9l4aZSEfEEZRjXMUioz2oBfNDishQ6I8f K5mfaF0CJx/yvNAKNXmgJYhdcOnpB4PRsKi5L9W+Y8YqMvJlX4TRfV82eOyz40Jb hOkdhUAb11PjUg9bIg07cQloLWCY9nsaG0m3IIfgXF5+sQxM4+a90bOjq7yULI6D Hgw5aFuGW5tMSoYc5slZICRxIUo5KKH0yXwDq07iHcerXXizzDM= =+qvP -----END PGP SIGNATURE-----