-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 23 Sep 2026 17:35:05 +0300 Source: erlang Architecture: source Version: 1:29.1.1+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1148772 Changes: erlang (1:29.1.1+dfsg-1) unstable; urgency=medium . * New upstream release. - Fix CVE-2026-65634: Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. - Fix CVE-2026-68956: Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. - Fix CVE-2026-89422: Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. * Disable wxWebView in the erlang-wx package for s390x, hppa, m68k, powerpc, ppc64, sparc64 because libwxgtk-webview is not available for big-endian architectures anymore (closes: #1148772). Checksums-Sha1: 9a3f251ade73ff1903e7f1c69abb884574122ee5 5048 erlang_29.1.1+dfsg-1.dsc 956cf339ba4585c969bafaff4b3c6245a3b5e484 49370724 erlang_29.1.1+dfsg.orig.tar.xz 5966462a73f426c77b244e60768a68092cc4dcac 64008 erlang_29.1.1+dfsg-1.debian.tar.xz 5b730f1c78b0ad5727377d0a5cb88417b4dc5987 32230 erlang_29.1.1+dfsg-1_amd64.buildinfo Checksums-Sha256: 913097ec055da173f9559bcb32d5d2b6b5fff47742051321a6b63b9c84a42b4a 5048 erlang_29.1.1+dfsg-1.dsc b711f4e9dff76c51aded2574322a18129033594c5244a3710b2b00d9cb0ff348 49370724 erlang_29.1.1+dfsg.orig.tar.xz b756b550bf8883a7d8fa70140902562f1126f8265334f0eb3a7e15d607fe495a 64008 erlang_29.1.1+dfsg-1.debian.tar.xz 02afa75564246cd8a88ae50fb0f4549d3512533a48221c9a4f2b86e57498913c 32230 erlang_29.1.1+dfsg-1_amd64.buildinfo Files: 54ef52d6688ddf91a563c249370f5f6f 5048 interpreters optional erlang_29.1.1+dfsg-1.dsc b46dc238982d62cb40f99f7d79bf9458 49370724 interpreters optional erlang_29.1.1+dfsg.orig.tar.xz 1c43b0c786be5d910cb3e8e7a0b8eef5 64008 interpreters optional erlang_29.1.1+dfsg-1.debian.tar.xz 254bd8bb24406481e4b46b34c3afe16f 32230 interpreters optional erlang_29.1.1+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmqz5WMACgkQTyrk60tj 54dOkQ//fuBIgvDCqHui85tY3d1HQFTXc2DPdzZr/HN5eBcJfFAClriYb5ntWoCp D2h2CdK83aQRxP46KQtx8FfJfyABFhyjq0/SrsBsbMiLPvqYy7mJP6mxeRBGnmRy AWVxC+/4Q3CDOQItOFWmeV/nybytliCZRqN+XYOfgqgAcZz1zyNNhkBtZJAyb+eT TZMrEVCkmJAZDzxwWrZrMv0urajUXa3E7PSmySyqBAt4H/vTDgk43RQvGzDrc+jM xFi2rOjpac54ezoYgmsqbSGa809/IUIVRrCF6Zbm0KIZy0AEeKsXUlpeFGhQGn+3 IrZHMk3agOuU/AsNzEl4um5hEteOPyvyJ1PnE0As+dmFGAI5xCwz5QOQJNlTkX0q aVbQU1nzE6NPfqDFIFBLCbSLF6S5wnXaO3iTWH5VpORKj/vGMAMcolRUjPySRRq/ Ltsk0cpoo1gp8QG+frGEO2iaK2XxwpphAIo0DKBj79nNwHUfKGhzHsj17bWaXOHb fTdSC7IzY4X2FCokLbpxGXYw8x5pkde6Jef2Y5RDsujX7FAnH20bAbBIVd4hR6rK boJ2pblMA2IxBRgiAuPFxPHAC17lUnt8Nw0Zmv0VBiqkV3+/ciLRwD98syLp0CaX 1krglPPm5KutqjzDXnlfYXH5BzuoOWnSw1CwoyVgZru7DSV5C/4= =sI7J -----END PGP SIGNATURE-----
