-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Oct 2026 18:21:25 +0300 Source: rebar3 Architecture: source Version: 3.27.3-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1150901 Changes: rebar3 (3.27.3-1) unstable; urgency=medium . * Team upload . [ Sergei Golovan ] * New upstream release. - Fix CVE-2026-105274: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core vendored in rebar3 allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the memory of the Erlang VM running hex_core. Closes: #1150901. * Remove patches which port rebar3 to Erlang 29 because they are no longer necessary. * Bump debhelper compatibility level to 14. . [ Philipp Huebner ] * Remove the priority and rules-require-root fields from debian/control. Checksums-Sha1: 9c1c5c434327bb332ba329295dbfda0b19d44539 2095 rebar3_3.27.3-1.dsc 42d6b9960a91c31148bf7081069cc653b3f7408c 904757 rebar3_3.27.3.orig.tar.gz cccf5fa62658777aa097aef6faaeffe6614978e1 7624 rebar3_3.27.3-1.debian.tar.xz f8c5d9fecfd5dfa0cd3a02b47a26ec24b25c87ae 14213 rebar3_3.27.3-1_amd64.buildinfo Checksums-Sha256: ae68c380e4f7cfa61d072b5b65e6ea4b09d61c76a42043d20b8b153ed744b0dd 2095 rebar3_3.27.3-1.dsc 2cf3a0d9a37ad9715fdb870b161ff61282048588ddb424362dacc22444c2d1f8 904757 rebar3_3.27.3.orig.tar.gz 86eb75aff7180e1cc4cf888912c7b350d30fc28fd33c242ecd6509244e5dc70b 7624 rebar3_3.27.3-1.debian.tar.xz 0ca29f7290dea47465b871dc9a1bf7e6ebe97688f418162b8e046846b22379b6 14213 rebar3_3.27.3-1_amd64.buildinfo Files: 8e31624e5ddf1960b5bdd9852a56f80c 2095 devel optional rebar3_3.27.3-1.dsc e09fd9c7242ecb01891d8ac56349f488 904757 devel optional rebar3_3.27.3.orig.tar.gz 7b82b37850563961509e2669dcefc991 7624 devel optional rebar3_3.27.3-1.debian.tar.xz cb80fa4baefe03a3e365453e97258789 14213 devel optional rebar3_3.27.3-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmrTl+UACgkQTyrk60tj 54eAnw//YCemWFkSsOPLOM7XRBZx99CbR2aNPhjVZGhwdBZs6LINWyPkukNYWKIS xWaMaAj5QCxyUhLUuf7fwU6OYgUeVmLkiWCMk1vSxqGkWQUqBV7agmFRjfOgisZI y0S72mc/vQBjoBtqxnTreW9wD/ufh+B8qLHWoqjKvKJajeT1s5lvM1ALA0xMr1Ji ipzye0T74ZA9pkgFunVnvi7OY3sS75ZqSDRKjQuJ9ie3xBCtJeV0H+LUG67KpD/T EJoJ8NtpvjRuAXlY8Ere69Xwo8Ubdf63NfvRi+4jFjiKUCU0CZfc5ZFEGvbkSgxL jAG7vor6O7FBS+UDNYkwZzF9W57U7Yyi4V9KXvzVdraDbDCNJhzHmbxFHPFIS7tp hZpJZzbCG+r/4qG/uW30/gziNwP//yAMDgnOXT3XcPaeRzHmCmDvAMA7/YOZATga p4DQhwLDO3CLuTmn94CJxMl7HcY92l8pXrWjNpc9wnlRMqnNLkEIg9Uts80+qgfn +YYYExd0l8lYdoy/D12gTp80rP9IPUh8u7b2PGm9sIUU6VjC0jXr4hrfTPCpYgoY 8hYjYUZTKCe1b/L4HXpfoaBU0brXaEMXj9RgkUWBO2cVNoYUCMzMrWGu74wK51X0 imhji/9O46nOjGJvmSeKuosCmqPHaoJ/C275gOKOPhDELF/8wE8= =cpZN -----END PGP SIGNATURE-----
