-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 12 Nov 2026 13:08:59 +0300 Source: elixir-lang Architecture: source Version: 1.20.5+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Evgeny Golyshev <eugulixes@gmail.com> Changed-By: Evgeny Golyshev <eugulixes@gmail.com> Closes: 1152683 1153267 Changes: elixir-lang (1.20.5+dfsg-1) unstable; urgency=medium . * New upstream release. - Fix CVE-2026-97209: Insecure Temporary File vulnerability in Mix deps.partition allows a local user to execute code as another user via a swapped partition config file. Closes: #1152683. - Fix CVE-2026-109821: Improper Validation of Specified Quantity in Input vulnerability in the URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. - Fix CVE-2026-115274: Improper Validation of Specified Quantity in Input vulnerability in the JSON module allows an attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. Closes: #1153267. Checksums-Sha1: f9a6ebe342f8e275339432c0e31873d4973e6067 2193 elixir-lang_1.20.5+dfsg-1.dsc 5d164d75cf863f8c1fbc8440b8d11d3b66474482 2048820 elixir-lang_1.20.5+dfsg.orig.tar.xz 906a5e4dce7a9a948c7cdc0ff4c4091a82137fc2 10316 elixir-lang_1.20.5+dfsg-1.debian.tar.xz 39f06b8f9ea81e1c93c45ef83ecfbbbf570a8643 14549 elixir-lang_1.20.5+dfsg-1_amd64.buildinfo Checksums-Sha256: 5403567dbacafdfa34e8f0d10f1907b658fd33418460be209bdda5d1ca92b9ba 2193 elixir-lang_1.20.5+dfsg-1.dsc 9b4238793447dca4268a2da49e8c21650845e384b1f7b1c70082c3f8d31a3191 2048820 elixir-lang_1.20.5+dfsg.orig.tar.xz a7159045315698373de0fcf7f2ecbacf40be6fde50b58bc48aae7384f4f05d91 10316 elixir-lang_1.20.5+dfsg-1.debian.tar.xz 488a61af25a0c7169368961df380028be6329e2ba5eb2cac254d3e0eabfcff96 14549 elixir-lang_1.20.5+dfsg-1_amd64.buildinfo Files: 9f0bcd8e0909f04097ec401bc3020fdd 2193 interpreters optional elixir-lang_1.20.5+dfsg-1.dsc 1ce5baf83402912d0a1982eb18e790fd 2048820 interpreters optional elixir-lang_1.20.5+dfsg.orig.tar.xz d225d7cfccad369a0414154dad278eac 10316 interpreters optional elixir-lang_1.20.5+dfsg-1.debian.tar.xz caf5e7806af6298b058f0d14513ad078 14549 interpreters optional elixir-lang_1.20.5+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmr1rkAACgkQTyrk60tj 54fTXg//dWGAHMMj49EvABDDEnVFG88tRqI1mGMjwR91NhYGm08sgo2oDc6u7izi QATfyzrxkJ7JWqRwY7vYR0zzhkqzSUnkljWa5J9/dz6sv6R/wzoddsNHarDPo46y QPeHai8/5TSH+41Srvs8z2j4UfC5Dp+UbqOccuWdIUV3/NXiBRhXAYShGW5pUo62 mmcQ/x24ABVsxRaDnU0G3C3Pmc2Wduf5QIRHCidgiJKV09KQmQUv61WhfUcmqvNX Qdhf3PjSdsVsyhRYHBgKEt6xxUWnv3o+UBctGrAGVgg8VgF0d8HLf8kYBwKSWBFJ yhRs9nEvEy3n/OloE+KerGfuwsDBKTQ/seZf5FcKIwr5wco7nj1PfqThE41LTOlU zEtN2mlDYFJdNomLK+Y7wVOe9te5zhjCp5JYw/GPCYTs/UClEF8Kaj/h8azJmWXB WFUHi0MpjeSZoXHihYF2VNyinV3piWPCx8t+jZtZ6pUnhfFDRS5NEaJpgjsPpOdn RhANtmsoiBpKZCCOz+Osx4aa4zc1ThOFoM1HsevV1bhSfMJLEpkjul3EAlDlFkTJ /o+fP6cj7l9X4i9sKZKP+B8tnb4fwsUnMsy5AJt6eqm+mm/fgrpva8VjM/Mgp6lr QiVxU3wCc5rCe7vQf0P3XOpH19dQ+Wj49aNLRTdaZrSHYSXASHI= =T22V -----END PGP SIGNATURE-----
