-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Oct 2026 00:55:29 +0800
Source: erlang
Architecture: source
Version: 1:27.3.4.1+dfsg-1+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Changes:
erlang (1:27.3.4.1+dfsg-1+deb13u4) trixie-security; urgency=medium
.
* Non-maintainer local preparation (NMU draft); not upload ready
(runtime validation blocked).
* Fixes: CVE-2026-55951, CVE-2026-59696, CVE-2026-65634, CVE-2026-66357,
CVE-2026-66835, CVE-2026-68956, CVE-2026-69664, CVE-2026-70399,
CVE-2026-70405, CVE-2026-70409, CVE-2026-71380, CVE-2026-71562,
CVE-2026-73270, CVE-2026-73276, CVE-2026-73812, CVE-2026-74835,
CVE-2026-74994, CVE-2026-75538, CVE-2026-89422
* Record CVE-2026-71562 (GHSA-cqx9-9hq6-m8wf) alongside CVE-2026-55951
(GHSA-f9fw-mg7q-4g3x) for the existing inets/httpc backport
(CVE-2026-55951.patch, upstream OTP-20343); attribution only.
* Enable ssh-test-macros.patch in the patch series for the backported
SSH regression tests; retain only CT_FAIL/2 and the assert.hrl include
from upstream commits 94776b53be and 981a866ece (test scaffolding only).
Checksums-Sha1:
4b36313f6b1c209d5a95e0d49bcd4f394e4aa8e2 4600 erlang_27.3.4.1+dfsg-1+deb13u4.dsc
96a10d8a1ce06a65a5729458fc99d40041a367a6 197088 erlang_27.3.4.1+dfsg-1+deb13u4.debian.tar.xz
0e47ef63ecb48e7a548a493ea49ce732889ba835 7639 erlang_27.3.4.1+dfsg-1+deb13u4_source.buildinfo
Checksums-Sha256:
72cfe3f4ffff0753dabdc8fe85b9c5382efed6e7ba8eadfde8e81e4e09933856 4600 erlang_27.3.4.1+dfsg-1+deb13u4.dsc
76b96c8601ac571542e872145f108b0c3d11c47d4e563e31a71807e5dd9213c7 197088 erlang_27.3.4.1+dfsg-1+deb13u4.debian.tar.xz
d16714be5fcf7cd3a300d9ebc46bb8430ff6acc1ce1d432893cbd07b7128055a 7639 erlang_27.3.4.1+dfsg-1+deb13u4_source.buildinfo
Files:
d5821b4c230c4a1f3d7122e00a032e95 4600 interpreters optional erlang_27.3.4.1+dfsg-1+deb13u4.dsc
04be0af4952729ca2a8d736ab6371042 197088 interpreters optional erlang_27.3.4.1+dfsg-1+deb13u4.debian.tar.xz
4a113cd38b5f3cf9a9e607d180c1609b 7639 interpreters optional erlang_27.3.4.1+dfsg-1+deb13u4_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmraSPIACgkQ+GQ1dHE8
m668cAf/VgKxF5amrI2DFInGzh9hCsoKxVqUburlfEzod/NI/AyW7roWFXCBRmqB
jRF0wMI2dlSmfnC+HzIgSGN9MAbVdpwfEIgIc1UGIOtAQYpUj1uuFYf5TFeIVbYU
9lQzSu06SzfY/oiZRNnM9bvObFjt5lSoBDh2uVo2ivtmnPRfh79oD74Qyo7oJkRd
LW0eDY8g6Dtzzt5FNDYox55VbPtDbmGL2wfRaCgMGoQkgwrPeBxf4ngJjvu6J1dU
InBsqgQ/TuIX3xO0qV3mgIcZZAnE7fGZzzP2BcwwMGTaXcRflEm6OlxNPwVcGnZH
CQBqYbH8UKddR3cBHe7bW4g/jFd2mw==
=+IVJ
-----END PGP SIGNATURE-----
