erlang (1:27.3.4.12+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 28 May 2026 12:30:22 +0300

erlang (1:27.3.4.11+dfsg-7) unstable; urgency=medium

  * Fix FTBFS on buildd.

 -- Sergei Golovan <sgolovan@debian.org>  Wed, 20 May 2026 01:11:00 +0300

erlang (1:27.3.4.11+dfsg-6) unstable; urgency=medium

  * Switch on parallel build since disabling it doesn't help with
    reproducibility.
  * Build public_key sequentially because otherwise thr ASN.1 compiler
    generates unreproducible sources.
  * Postprocess the generated documentation to replace random ids in the
    HTML files by sequential reproducible ones.
  * Call dh_strip_nondeterminism in debian/rules to make the jinterface
    package reproducible.
  * Fix sorting modules in erlang-depends for reproducibility.
  * Add a patch which makes compiler save docs chunks of a BEAM
    in a deterministic mode.

 -- Sergei Golovan <sgolovan@debian.org>  Wed, 20 May 2026 00:21:08 +0300

erlang (1:27.3.4.11+dfsg-5) unstable; urgency=medium

  * Switch off parallel build.

 -- Sergei Golovan <sgolovan@debian.org>  Mon, 18 May 2026 08:59:22 +0300

erlang (1:27.3.4.11+dfsg-4) unstable; urgency=medium

  * Use autoconf >=2.72 to rebuild the configure scripts (closes: #1135919).

 -- Sergei Golovan <sgolovan@debian.org>  Sun, 17 May 2026 15:22:41 +0300

erlang (1:27.3.4.11+dfsg-3) unstable; urgency=medium

  * Add a patch from upstream which does not explicitly unload libssl
    on unloading crypto. In Debian doing so sometimes results in an invalid
    pointer in free() (found in Elixir test case on loong64 architecture).
    Closes: #1135630.

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 05 May 2026 15:33:17 +0300

erlang (1:27.3.4.11+dfsg-2) unstable; urgency=medium

  * Fix stopping/starting services depending on Erlang in erlang-base
    prerm/postinst maintainer scripts.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 07 May 2026 13:24:04 +0300

erlang (1:27.3.4.11+dfsg-1) unstable; urgency=medium

  [ Sergei Golovan ]
  * New upstream release.
  * Refresh patches.
  * Fix CVE-2026-32147: Vulnerability in the SFTP server where file
    attributes could be modified outside the configured root directory.

  [ Luca Boccassi ]
  * Switch from adduser to systemd-sysusers to create the epmd system
    user and group.

 -- Sergei Golovan <sgolovan@debian.org>  Wed, 22 Apr 2026 11:03:21 +0300

erlang (1:27.3.4.10+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fix CVE-2026-28810: Generation of Predictable Numbers or Identifiers
    vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows
    DNS Cache Poisoning.
  * Fix CVE-2026-32144: Improper Certificate Validation vulnerability in
    Erlang/OTP public_key (pubkey_ocsp module) allows OCSP
    designated-responder authorization bypass via missing signature
    verification.
  * Override lintian false positives in erlang-base maintainer scripts.
  * Bump standards version to 4.7.4.

 -- Sergei Golovan <sgolovan@debian.org>  Wed, 08 Apr 2026 14:33:49 +0300

erlang (1:27.3.4.9+dfsg-1) unstable; urgency=medium

  * New upstream release (closes: #1130912).
  * Fix CVE-2026-23941: Inconsistent interpretation of HTTP Contents-Length
    header by inets httpd module.
  * Fix CVE-2026-23942: Improper limitation of a pathname to a restricted
    directory by ssh_sftpd module.
  * Fix CVE-2026-23943: Improper handling of highly compressed Data
    (compression bomb) by ssh_transport modules.

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 17 Mar 2026 11:33:23 +0300

erlang (1:27.3.4.8+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fix CVE-2026-21620: a bug which allows TFTP to specify a file to download
    outside the TFTP root directory (closes: #1128651).

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 10 Mar 2026 10:07:09 +0300

erlang (1:27.3.4.6+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 27 Nov 2025 15:27:59 +0300

erlang (1:27.3.4.4+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Sergei Golovan <sgolovan@debian.org>  Fri, 31 Oct 2025 14:57:11 +0300

erlang (1:27.3.4.3+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fix CVE-2025-48038: allocation of resources without limits or throttling
    vulnerability in the ssh_sftp module allows excessive allocation,
    resource leak exposure (closes: #1115093).
  * Fix CVE-2025-48039: allocation of resources without limits or throttling
    vulnerability in the ssh_sftp module allows excessive allocation,
    resource leak exposure (closes: #1115092).
  * Fix CVE-2025-48040: uncontrolled resource consumption vulnerability in
    the ssh_sftp module allows excessive allocation, flooding (closes: 1115091).
  * Fix CVE-2025-48041: allocation of resources without limits or throttling
    vulnerability in the ssh_sftp module allows excessive allocation,
    flooding (closes: #1115090).
  * Fix CVE-2016-1000107: inets does not protect applications from the presence
    of untrusted client data in the HTTP_PROXY environment variable
    (closes: #1115086).

 -- Sergei Golovan <sgolovan@debian.org>  Mon, 15 Sep 2025 18:42:37 +0300

erlang (1:27.3.4.1+dfsg-1) unstable; urgency=medium

  * New upstream bugfix release.
  * Fix CVE-2025-4748 in erlang-stdlib application, where unzipping a ZIP
    archive could overwrite files using absolute paths because of insufficient
    path sanitizing (closes: #1107939).

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 08 Jul 2025 10:27:28 +0300

erlang (1:27.3.4+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fix CVE-2025-46712 in erlang-ssh application, where a man-in-the-middle
    could use optional KEX messages to impact the KEX process (closes:
    #1104963).

 -- Sergei Golovan <sgolovan@debian.org>  Fri, 09 May 2025 09:04:59 +0300

erlang (1:27.3.3+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Sergei Golovan <sgolovan@debian.org>  Wed, 16 Apr 2025 17:20:18 +0300

erlang (1:27.3.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Reorganize debian/rules to respect "parallel=N" when passed
    in DEB_BUILD_OPTIONS.

 -- Sergei Golovan <sgolovan@debian.org>  Sun, 06 Apr 2025 15:14:29 +0300

erlang (1:27.3.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fix CVE-2025-30211 in erlang-ssh application, where a maliciously
    formed KEX init message could result with high memory usage (closes:
    #1101713).

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 01 Apr 2025 08:28:34 +0300

erlang (1:27.3+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Bump standards version to 4.7.2.

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 11 Mar 2025 11:30:48 +0300

erlang (1:27.2.4+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 20 Feb 2025 18:40:49 +0300

erlang (1:27.2.3+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Sergei Golovan <sgolovan@debian.org>  Wed, 19 Feb 2025 19:45:14 +0300

erlang (1:27.2.2+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Sergei Golovan <sgolovan@debian.org>  Mon, 10 Feb 2025 11:38:21 +0300

erlang (1:27.2.1+dfsg-2) unstable; urgency=medium

  * Disable support for timestamps for year 2038 and above for hurd-i386.
  * Define _GNU_SOURCE for hurd-i386 and hurd-amd64.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 06 Feb 2025 15:36:38 +0300

erlang (1:27.2.1+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Drop no longer supported configure options from debian/rules.

 -- Sergei Golovan <sgolovan@debian.org>  Fri, 24 Jan 2025 13:38:58 +0300

erlang (1:27.2+dfsg-2) unstable; urgency=medium

  * Fix FTBFS with ex-doc running on elixir 1.18 (closes: #1093329).

 -- Sergei Golovan <sgolovan@debian.org>  Sat, 18 Jan 2025 19:45:12 +0300

erlang (1:27.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Fix FTBFS with ex-doc running on newer elixir (closes: #1090217).

 -- Sergei Golovan <sgolovan@debian.org>  Fri, 10 Jan 2025 20:41:54 +0300

erlang (1:27.1.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Drop link of typer to /usr/bin to avoid clashing with the typer package
    (closes: #1074166).

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 03 Dec 2024 15:10:38 +0300

erlang (1:27.0.1+dfsg-3) experimental; urgency=medium

  * Correct the fix from 1:27.0.1+dfsg-2 for other architectures.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 29 Aug 2024 13:53:40 +0300

erlang (1:27.0.1+dfsg-2) experimental; urgency=medium

  * Fix FTBFS with GCC 14 on i386.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 29 Aug 2024 12:19:23 +0300

erlang (1:27.0.1+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Refresh patches.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 11 Jul 2024 09:24:05 +0300

erlang (1:27.0+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Remove no longer necessary patch which fixed FTBFS on s390x.
  * Use system-wide libraries from the libjs-jquery and libjs-jquery-ui
    packages for jinterface documentation.
  * Do not compress Markdown docs.
  * Fix description of erlang-doc package by removing mentions of PDF
    format.
  * Drop link from /usr/share/man to /usr/lib/erlang/man because Erlang
    no longer ships documentation in man format.
  * Add a patch which replaces external Javascript resource by a local one.

 -- Sergei Golovan <sgolovan@debian.org>  Fri, 24 May 2024 19:38:03 +0300

erlang (1:27.0~rc3+dfsg-4) experimental; urgency=medium

  * Remove an obsolete patch which enabled building Erlang with GCJ as
    a Java compiler.
  * Drop using non-standard ${erlang-base} substvar because the erlang-hipe
    package is dropped long time ago.
  * Clean debian/rules.
  * Actually move typer to the erlang-dialyzer package.
  * Enable building docs except for <nodoc> build profile.
  * Package edoc.1 and cdv.1 manpages.

 -- Sergei Golovan <sgolovan@debian.org>  Thu, 16 May 2024 11:24:58 +0300

erlang (1:27.0~rc3+dfsg-3) experimental; urgency=medium

  * Add a patch by John Högberg which makes Erlang 27 build on s390x.

 -- Sergei Golovan <sgolovan@debian.org>  Mon, 22 Apr 2024 14:55:07 +0300

erlang (1:27.0~rc3+dfsg-2) experimental; urgency=medium

  * Move ronn from build-depends-indep to build-depends because it is used
    to build manpages which go into arcitecture-dependent packages.

 -- Sergei Golovan <sgolovan@debian.org>  Sat, 20 Apr 2024 19:27:50 +0300

erlang (1:27.0~rc3+dfsg-1) experimental; urgency=medium

  * New upstream release candidate.
  * Refresh patches.
  * Upload to experimental.
  * Bump standards version to 4.7.0.
  * Temporarily disable building HTML documentation until elixir-ex-doc is
    entered Debian.

 -- Sergei Golovan <sgolovan@debian.org>  Sat, 20 Apr 2024 17:57:44 +0300

erlang (1:27.0~rc2+dfsg-1) experimental; urgency=medium

  * New upstream release candidate.
  * Refresh patches.
  * Bump required autoconf version in build dependencies to 2.72.
  * Upload to experimental.

 -- Sergei Golovan <sgolovan@debian.org>  Sun, 24 Mar 2024 12:30:21 +0300

erlang (1:27.0~rc1+dfsg-1) experimental; urgency=medium

  * New upstream release candidate.
  * Upload to experimental.
  * Fix interdependencies for the binary packages.
  * Refresh patches, remove no longer necessary ones.
  * Remove erlang-erl-docgen package because it has been dropped upstream.
  * Remove erlang-manpages package because upstream no longer supports
    creating documentation in the form of manpages.
  * Fix placing examples from the sasl library to erlang-examples.
  * Drop doc-base indices.
  * Move typer to the erlang-dialyzer package.
  * Add links for observer's cdv crashdump viewer and edoc's edoc
    documentation generator to /usr/bin.

 -- Sergei Golovan <sgolovan@debian.org>  Sun, 03 Mar 2024 14:31:29 +0300

erlang (1:26.2.1+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Upload to experimental.

 -- Sergei Golovan <sgolovan@debian.org>  Fri, 22 Dec 2023 15:35:54 +0300

erlang (1:26.1.2+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Upload to experimental.

 -- Sergei Golovan <sgolovan@debian.org>  Sun, 15 Oct 2023 17:51:39 +0300

erlang (1:26.0.2+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Upload to experimental.

 -- Sergei Golovan <sgolovan@debian.org>  Tue, 11 Jul 2023 12:25:40 +0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog erlang-mode`.
