-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 14:15:44 +0300 Source: erlang Architecture: source Version: 1:29.1.2+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1151684 Changes: erlang (1:29.1.2+dfsg-1) unstable; urgency=medium . * New upstream release. - Fix CVE-2026-94200: Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. - Fix CVE-2026-96596: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. - Fix CVE-2026-105236: Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. Closes: #1151684. Checksums-Sha1: b23cd99e0f508cd9a2bad77d8d06d9919927437a 5048 erlang_29.1.2+dfsg-1.dsc 6784dbd6b6f4ce38380d47f24873ea9d879c3709 49389056 erlang_29.1.2+dfsg.orig.tar.xz 9d220fcdb66771f26a2e67a8676b181b7f698672 64240 erlang_29.1.2+dfsg-1.debian.tar.xz 1279f1395b8458ad6b6f9eb4b252fabc20507a04 32273 erlang_29.1.2+dfsg-1_amd64.buildinfo Checksums-Sha256: 25ad94ee185652c436b9bf2f60077a9a94832401f47e342ddf0b677f7788fcda 5048 erlang_29.1.2+dfsg-1.dsc f0d2090af6f9f94df94c71dfeb392b1988d02655e9d31ce961f1de79986cca27 49389056 erlang_29.1.2+dfsg.orig.tar.xz fa41666f64be1b7eccace79fcdb110cf6f6714eac8561cfaa9902212ffcbb07c 64240 erlang_29.1.2+dfsg-1.debian.tar.xz 1b37537f5102f2321914f7ee0da87ee4d547170761efa2d49259fe7525bd9c28 32273 erlang_29.1.2+dfsg-1_amd64.buildinfo Files: 494d2812c1ad636c598ce2e6c3b34cd3 5048 interpreters optional erlang_29.1.2+dfsg-1.dsc 78ef36690439d8d896de9318c598fb52 49389056 interpreters optional erlang_29.1.2+dfsg.orig.tar.xz 4d906ff15e35282cedf0d0a1d3e55cab 64240 interpreters optional erlang_29.1.2+dfsg-1.debian.tar.xz 68183aa54238eed5ad30e5666342e596 32273 interpreters optional erlang_29.1.2+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmrclWgACgkQTyrk60tj 54dfKw/+JjHCUHjuUjBSVXTz1M1Wi7qbK6YZFDzD+7Q0264bMKuOSgW3DPxSXqX0 I2U2b3msRrAyblnYqvnaTCGNCXjYewerL906OCnDJfcjnxnwu7uG+fwwIgdENtul ++/EsCkV6hvS2vsR2vnVK+QKgNvTlaAu+ZdAko0Gp26A/sSl/lEhZ34xee6YSkmQ GwhfP6djI/lzzQFH0kkbUHzl24n3V5vv6v1xD6bJb+bh71t2K7fhoVKMTT447nn+ F/fQMxTMxBaCSoBH+XhYcts7MMHSvsIITD8WKutFz3BAt+huShVatOh3e0rXvusx vE4Txne6WvLc02/1pcc8W0AhPsgcTbfVH+1drKE5nB3YLhCoViDJaS2xWj4BmMSF eEM4goVb2msgvAZp598sw/Xymru+cTbnV0WWx0Jyl2RhaN2n6OBXLW0E6TDgJd4u mIXW5GEiRg7cG3gIox8XeMFhpFYWDcvxsqG2bVUK9Jk4DpPFaVUjNWwBYgpsZoET DKqb/NODw4lDXb7xMDdt6Qu3VIXUJdIRc9WSfAxB10ri8tIhcIbn4ZsPzAn38PKa E6aoI6CHorrTLhiqx/rdDDIJDETR/tMYWwaxuBgtisy4D3jJoe7D7q8635t93YQc z9cjAQ8AOeta0lO5qtNBU2JOx/QLi4NyE39L6DwwjVaMgdfNsc8= =66o3 -----END PGP SIGNATURE-----
