From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Tue, 08 Jul 2025 10:27:28 +0300   
   Source: erlang   
   Architecture: source   
   Version: 1:27.3.4.1+dfsg-1+deb13u1   
   Distribution: trixie   
   Urgency: medium   
   Maintainer: Debian Erlang Packagers    
   Changed-By: Sergei Golovan    
   Closes: 1115086 1115090 1115091 1115092 1115093   
   Changes:   
    erlang (1:27.3.4.1+dfsg-1+deb13u1) trixie; urgency=medium   
    .   
      * Fix CVE-2025-48038: allocation of resources without limits or throttling   
        vulnerability in the ssh_sftp module allows excessive allocation,   
        resource leak exposure (closes: #1115093).   
      * Fix CVE-2025-48039: allocation of resources without limits or throttling   
        vulnerability in the ssh_sftp module allows excessive allocation,   
        resource leak exposure (closes: #1115092).   
      * Fix CVE-2025-48040: uncontrolled resource consumption vulnerability in   
        the ssh_sftp module allows excessive allocation, flooding (closes:   
   1115091).   
      * Fix CVE-2025-48041: allocation of resources without limits or throttling   
        vulnerability in the ssh_sftp module allows excessive allocation,   
        flooding (closes: #1115090).   
      * Fix CVE-2016-1000107: inets does not protect applications from the   
   presence   
        of untrusted client data in the HTTP_PROXY environment variable   
        (closes: #1115086).   
   Checksums-Sha1:   
    5489fe8039263fc5b9573f6a173c13a7113ec45e 5072 erlang_27.3.4.1+d   
   sg-1+deb13u1.dsc   
    e688433e785157dfb2248610978346d4877f692a 68188 erlang_27.3.4.1+   
   fsg-1+deb13u1.debian.tar.xz   
   Checksums-Sha256:   
    6397baa62091fa2f90e9ceb2db6f185ddc2de9d53d3e7e49aae759eaa010a196 5072   
   erlang_27.3.4.1+dfsg-1+deb13u1.dsc   
    985cb845ebb72538ddbbaf0947644e4267cd36b49860bdda3f88ecd8f3866bb9 68188   
   erlang_27.3.4.1+dfsg-1+deb13u1.debian.tar.xz   
   Files:   
    cb0e5b5312fc4865b69bd260d61f96bc 5072 interpreters optional erl   
   ng_27.3.4.1+dfsg-1+deb13u1.dsc   
    a00764d9a66384f698ad1f5a30d9df5d 68188 interpreters optional er   
   ang_27.3.4.1+dfsg-1+deb13u1.debian.tar.xz   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAEBCgAdFiEEc7KZy9TurdzAF+h6W//cwljmlDMFAmmkUUkACgkQW//cwljm   
   lDPQ/RAAm0dhsCTCJXSQITUymD9KBxPdfXMJkFoP2b+8RcEZSQ18A08IjL3lGQqa   
   0talPoaNbzn1mxh0eiAAsX0s0HkJ8uMYGkCYYD+6CI9v05VR8UFHEZwR+0EG8ry7   
   TvGVGHtRrvMiObj1Y5b5nzockiEFk8L+vRHJGoXYONmprhGKnJXzUmwfnoRLSe5m   
   g/pDjJn0nP1fchrklYbzwlyvQaVSqgkGhfhSoGrLm8c3SrEz4dd35JsY/LuyafCr   
   L+ArmDF1tUSIzJYEaA9BA+Ei0qNgNbBvr0IFL4Mu0UMHB7V11yank6es2riRbRf8   
   Kxx+TIfad3i8J4ycsioWmjCoatrbLUWfUD+5PE+fMrDuRPwhR7l/MYthKZhxdkVU   
   r3l7caET7hHy3Iqw3D693MDrdwwzAkp3qMGoL42qb1MHemkPiaJ0j5sjxiJQm1Wy   
   AbSABhki9Ek76OJZY/30Wx8A1gFh5wWd+MxtwbdGOhI4dkLJuQ9bpB/wRbeoU7lh   
   NmcbPqwYqF2EWpdaQMiVr0dHyVx8QyK6iXF9LjDCwoxWHAj+NQ8rJuBJ/XqVFlCy   
   LRKZoMgONKk8d2OBebBrZCc83pazZcT4Mw9qhfmckkqPGyZGWeQySUMY72SnPlck   
   tp0uoG0Xjji5bk8bTxGz6JBS0kL9vhEyUzBpfTGNehYZGLKmfJE=   
   =njpu   
   -----END PGP SIGNATURE-----   
      
      
   --==============23231075166089257=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaadIywAKCRCb9qggYcy5   
   Idj4AP91+a06hJ6r4l5wKiSHxpYyxzaMqF4X3V2QP++WvwNBMQEApRpBuh5caURL   
   zU7MrbUpUoF9tGqrV5tD5/UuvvENOQI=wSvS   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)