[ubuntu/groovy-proposed] erlang 1:23.0.3+dfsg-1ubuntu1 (Accepted)

[Marc Deslauriers]

erlang (1:23.0.3+dfsg-1ubuntu1) groovy; urgency=medium

  * SECURITY UPDATE: arbitrary file read via directory traversal in httpd
    - debian/patches/CVE-2020-25623.patch: fix an error regarding decode of
      percent encoded URLs in lib/inets/src/http_server/httpd_util.erl,
      lib/inets/test/httpd_SUITE.erl.
    - CVE-2020-25623

Date: Mon, 05 Oct 2020 09:08:48 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/erlang/1:23.0.3+dfsg-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 05 Oct 2020 09:08:48 -0400
Source: erlang
Architecture: source
Version: 1:23.0.3+dfsg-1ubuntu1
Distribution: groovy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 erlang (1:23.0.3+dfsg-1ubuntu1) groovy; urgency=medium
 .
   * SECURITY UPDATE: arbitrary file read via directory traversal in httpd
     - debian/patches/CVE-2020-25623.patch: fix an error regarding decode of
       percent encoded URLs in lib/inets/src/http_server/httpd_util.erl,
       lib/inets/test/httpd_SUITE.erl.
     - CVE-2020-25623
Checksums-Sha1:
 a99001970da31b317509e95e6f8661d33eaf676a 5212 erlang_23.0.3+dfsg-1ubuntu1.dsc
 bba538012a6fd91a84f15bde77d1e36afa57f568 62724 erlang_23.0.3+dfsg-1ubuntu1.debian.tar.xz
 2b058517bde2757491d4a2ce073eff79db187643 12369 erlang_23.0.3+dfsg-1ubuntu1_source.buildinfo
Checksums-Sha256:
 dfad41f9ad7ff48faab31f0e231c656dde6f5c9fc4d23b0b8a851014a2fb3df8 5212 erlang_23.0.3+dfsg-1ubuntu1.dsc
 da4984d49a51b169e775283d56dee1caca5048b15750fc078b47328cc1e685cd 62724 erlang_23.0.3+dfsg-1ubuntu1.debian.tar.xz
 c6960fdf99eff5fedf5ec88543123346183888765dfda829c4bc04b31d67470f 12369 erlang_23.0.3+dfsg-1ubuntu1_source.buildinfo
Files:
 d7fd8a88a1d2f802da3d3a0d8adb2954 5212 interpreters optional erlang_23.0.3+dfsg-1ubuntu1.dsc
 062cdd20feb94829728464234c29713a 62724 interpreters optional erlang_23.0.3+dfsg-1ubuntu1.debian.tar.xz
 d51236001ca639d6b4b824913450dd05 12369 interpreters optional erlang_23.0.3+dfsg-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Erlang Packagers <pkg-erlang-devel at lists.alioth.debian.org>