-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Sep 2026 13:43:06 +0300 Source: elixir-lang Architecture: source Version: 1.20.4+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Evgeny Golyshev <eugulixes@gmail.com> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1146626 Changes: elixir-lang (1.20.4+dfsg-1) unstable; urgency=medium . * New upstream release. - Fix CVE-2026-75758: Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to_string/1, or List.to_charlist/1 to exhaust a BEAM node's memory. Closes: #1146626. * Change the DFSG suffix to +dfsg. * Refresh patches. * Add a patch which wixes checking for test results involving regular expressions with filepaths. Checksums-Sha1: e7fc74c8238efdd83985fef9799acc06bc16dc40 2193 elixir-lang_1.20.4+dfsg-1.dsc 53e7142946164e592642b9916a8f09dc9f8714b3 2047000 elixir-lang_1.20.4+dfsg.orig.tar.xz 11cfb77cbfcf7804d56a9675c813c8a347744928 10128 elixir-lang_1.20.4+dfsg-1.debian.tar.xz dfc39debb3e4a62fde7de89c8704f43e6dd06d0f 14562 elixir-lang_1.20.4+dfsg-1_amd64.buildinfo Checksums-Sha256: aab5ea840566dcdfa0fae8ff4658ad94ae4a6645ec4f3ba89ce0171d69186f61 2193 elixir-lang_1.20.4+dfsg-1.dsc 0883529a5bf99a4ce900371f9894e483df26f658d013a6f0929eef26eb9f3d87 2047000 elixir-lang_1.20.4+dfsg.orig.tar.xz 67651d6592e9bc3cca38655a572db155aec77d02c433b61b3bdfdec63936fc1a 10128 elixir-lang_1.20.4+dfsg-1.debian.tar.xz aaad7798b59bf3a387e27bb5df1c38704ec7b12d2b62a64d026deb110418d587 14562 elixir-lang_1.20.4+dfsg-1_amd64.buildinfo Files: 3763d288829cba5804162de37994ba6a 2193 interpreters optional elixir-lang_1.20.4+dfsg-1.dsc d6d3505afba95566e2ad75b67778b5cb 2047000 interpreters optional elixir-lang_1.20.4+dfsg.orig.tar.xz 8f71e294aa9a55db8cfd9ffc184360c4 10128 interpreters optional elixir-lang_1.20.4+dfsg-1.debian.tar.xz 2fa7dae28948489e7c2e21295d95900a 14562 interpreters optional elixir-lang_1.20.4+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmqiiz0ACgkQTyrk60tj 54ebZA/+Npl0SFXOYvOxVIn+w+l9cj6RmHIMwOxqC8WX7UZ22mSy/EOudQDqjAff ra1brS9lfi/wSg2D+q5Ed2HkiEdwOUL/XX84CGsRV4wLLqwQ5AvFQOXzZvrTmhPa FOWmMQmlUHYC2m40ypw1Xn/zvj+LPqxmDd/3EL00yCV/wKWFZg2vYSPB9JdntdWn Z/RPF2Xnt4MtICqc5fdeHiwdVXFF8sGmmhX+dx9par5Xe63caOF1jxI1SICDPEnE Dsy2O8AFnam1GWHLOSNlNg449J+NgFyLqCtct7/pgSVuA4sppLLYSoRYm7Djokp4 SrYHlwc9ELarMTpk8Y2b1o278QUOuUeRsjp/b4nxRj68I3eAgDGTwabZFdzW7M98 cdyRt/ji3F8eF2/6vqtaalT5nW28seE2trc/glkNPcge78FKUe8Oh87PNqIzq5Ir sycFG29vlmpD0znCE0slMWVRhAsRfHN14cybC1/GvqLc57Fwb4yto9J9BlQiJ4V3 Yu9NBDwP8yrBx4+bVYLGapW19Yo/1uXDYb3+eN1abG9tmuO/Z5BZF3LHCtHGlNZv 0DnyuWuSMHpGN8nLb0PIFFyajlHI3uY42w2iVyhdCecUDm5I+ou2laVOlbGxtQSO kR4FYG7Xroko/HtX01r0Rym2+Vjj00tIsM2uZHxVq49yocPVE/s= =lVxj -----END PGP SIGNATURE-----
