Your message dated Wed, 23 Sep 2026 15:04:47 +0000
with message-id <[email protected]>
and subject line Bug#1148772: fixed in erlang 1:29.1.1+dfsg-1
has caused the Debian Bug report #1148772,
regarding erlang: please disable webkit2gtk (libwxgtk-webview) dependency on
big-endian
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1148772: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1148772
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: erlang
Severity: important
Tags: forky sid
X-Debbugs-Cc: [email protected], [email protected],
Emilio Pozuelo Monfort <[email protected]>
User: [email protected]
Usertags: s390x
Control: block 1148038 by -1
As announced in #1148038, new upstream releases of WebKitGTK no longer
support big-endian architectures.
erlang currently builds an Architecture: any package, erlang-wx, which
Depends on libwxgtk-webview3.2-1t64, which is no longer built on
big-endian architectures.
I can see three possible solutions to this:
1. Exclude libwxgtk-webview3.2-dev from the B-D on big-endian
architectures, if that works:
Build-Depends: ..., libwxgtk-webview3.2-dev [!s390x !hppa !m68k !powerpc
!ppc64 !sparc64], ...
and build erlang-wx with reduced functionality on those
architectures: GTK widgets, but no webview support. Hopefully
erlang-debugger, erlang-et, erlang-observer, erlang-reltool would
still be able to work with the webview functionality disabled?
2. Exclude wxwidgets completely on big-endian architectures, and don't
build erlang-wx on those architectures at all. It looks like
erlang-debugger, erlang-et, erlang-observer, erlang-reltool would
also have to be dropped from big-endian architectures.
3. Remove the whole erlang ecosystem from s390x, including all packages
that depend on it.
(cc Emilio: I've filed this as important, but you might want to escalate
it to serious on behalf of the release team.)
Thanks,
smcv
--- End Message ---
--- Begin Message ---
Source: erlang
Source-Version: 1:29.1.1+dfsg-1
Done: Sergei Golovan <[email protected]>
We believe that the bug you reported is fixed in the latest version of
erlang, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sergei Golovan <[email protected]> (supplier of updated erlang package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 23 Sep 2026 17:35:05 +0300
Source: erlang
Architecture: source
Version: 1:29.1.1+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Erlang Packagers <[email protected]>
Changed-By: Sergei Golovan <[email protected]>
Closes: 1148772
Changes:
erlang (1:29.1.1+dfsg-1) unstable; urgency=medium
.
* New upstream release.
- Fix CVE-2026-65634: Inefficient algorithmic complexity in the Erlang/OTP
asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker
to cause denial of service by sending a crafted OID during the TLS
handshake.
- Fix CVE-2026-68956: Allocation of Resources Without Limits or Throttling
vulnerability in Erlang/OTP ssh allows an authenticated remote attacker
to exhaust node memory by repeatedly opening session channels that are
never assigned a handler.
- Fix CVE-2026-89422: Key Exchange without Entity Authentication
vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3
client connection to impersonate the intended server.
* Disable wxWebView in the erlang-wx package for s390x, hppa, m68k, powerpc,
ppc64, sparc64 because libwxgtk-webview is not available for big-endian
architectures anymore (closes: #1148772).
Checksums-Sha1:
9a3f251ade73ff1903e7f1c69abb884574122ee5 5048 erlang_29.1.1+dfsg-1.dsc
956cf339ba4585c969bafaff4b3c6245a3b5e484 49370724
erlang_29.1.1+dfsg.orig.tar.xz
5966462a73f426c77b244e60768a68092cc4dcac 64008
erlang_29.1.1+dfsg-1.debian.tar.xz
5b730f1c78b0ad5727377d0a5cb88417b4dc5987 32230
erlang_29.1.1+dfsg-1_amd64.buildinfo
Checksums-Sha256:
913097ec055da173f9559bcb32d5d2b6b5fff47742051321a6b63b9c84a42b4a 5048
erlang_29.1.1+dfsg-1.dsc
b711f4e9dff76c51aded2574322a18129033594c5244a3710b2b00d9cb0ff348 49370724
erlang_29.1.1+dfsg.orig.tar.xz
b756b550bf8883a7d8fa70140902562f1126f8265334f0eb3a7e15d607fe495a 64008
erlang_29.1.1+dfsg-1.debian.tar.xz
02afa75564246cd8a88ae50fb0f4549d3512533a48221c9a4f2b86e57498913c 32230
erlang_29.1.1+dfsg-1_amd64.buildinfo
Files:
54ef52d6688ddf91a563c249370f5f6f 5048 interpreters optional
erlang_29.1.1+dfsg-1.dsc
b46dc238982d62cb40f99f7d79bf9458 49370724 interpreters optional
erlang_29.1.1+dfsg.orig.tar.xz
1c43b0c786be5d910cb3e8e7a0b8eef5 64008 interpreters optional
erlang_29.1.1+dfsg-1.debian.tar.xz
254bd8bb24406481e4b46b34c3afe16f 32230 interpreters optional
erlang_29.1.1+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmqz5WMACgkQTyrk60tj
54dOkQ//fuBIgvDCqHui85tY3d1HQFTXc2DPdzZr/HN5eBcJfFAClriYb5ntWoCp
D2h2CdK83aQRxP46KQtx8FfJfyABFhyjq0/SrsBsbMiLPvqYy7mJP6mxeRBGnmRy
AWVxC+/4Q3CDOQItOFWmeV/nybytliCZRqN+XYOfgqgAcZz1zyNNhkBtZJAyb+eT
TZMrEVCkmJAZDzxwWrZrMv0urajUXa3E7PSmySyqBAt4H/vTDgk43RQvGzDrc+jM
xFi2rOjpac54ezoYgmsqbSGa809/IUIVRrCF6Zbm0KIZy0AEeKsXUlpeFGhQGn+3
IrZHMk3agOuU/AsNzEl4um5hEteOPyvyJ1PnE0As+dmFGAI5xCwz5QOQJNlTkX0q
aVbQU1nzE6NPfqDFIFBLCbSLF6S5wnXaO3iTWH5VpORKj/vGMAMcolRUjPySRRq/
Ltsk0cpoo1gp8QG+frGEO2iaK2XxwpphAIo0DKBj79nNwHUfKGhzHsj17bWaXOHb
fTdSC7IzY4X2FCokLbpxGXYw8x5pkde6Jef2Y5RDsujX7FAnH20bAbBIVd4hR6rK
boJ2pblMA2IxBRgiAuPFxPHAC17lUnt8Nw0Zmv0VBiqkV3+/ciLRwD98syLp0CaX
1krglPPm5KutqjzDXnlfYXH5BzuoOWnSw1CwoyVgZru7DSV5C/4=
=sI7J
-----END PGP SIGNATURE-----
pgpJ0ZYcpuN8C.pgp
Description: PGP signature
--- End Message ---
