[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade erlang to 26.2.5.9 for CVE-2025-26618 [High] - branch 3.0-dev (#12614)

CBL-Mariner-Bot · web-flow · commit d6a9cc570e5a · 2025-02-27T10:29:16.000-05:00
diff --git a/SPECS/erlang/erlang.signatures.json b/SPECS/erlang/erlang.signatures.json
@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "erlang-26.2.5.6.tar.gz": "371e59b98de59822e45fdbe50c18c8d8dd4c872990e7aaaba8a819e167186d03"
+    "erlang-26.2.5.9.tar.gz": "730b937d31c899db5a14567d23452d1cee2f058aea4a42becbb4cb926a286927"
   }
-}
+}
diff --git a/SPECS/erlang/erlang.spec b/SPECS/erlang/erlang.spec
@@ -1,7 +1,7 @@
 %define  debug_package %{nil}
 Summary:        erlang
 Name:           erlang
-Version:        26.2.5.6
+Version:        26.2.5.9
 Release:        1%{?dist}
 License:        Apache-2.0
 Vendor:         Microsoft Corporation
@@ -53,6 +53,9 @@ export ERL_TOP=`pwd`
 %{_libdir}/erlang/*
 
 %changelog
+* Tue Feb 25 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 26.2.5.9-1
+- Auto-upgrade to 26.2.5.9 - for CVE-2025-26618
+
 * Fri Dec 13 2024 Ahmed Badawi <ahmedbadawi@microsoft.com> - 26.2.5.6-1
 - Upgrade to 26.2.5.6 - fix cve CVE-2024-53846. Removed previous patch below as vulnerability is addressed in new version
 
diff --git a/cgmanifest.json b/cgmanifest.json
@@ -3338,8 +3338,8 @@
         "type": "other",
         "other": {
           "name": "erlang",
-          "version": "26.2.5.6",
-          "downloadUrl": "https://github.com/erlang/otp/archive/OTP-26.2.5.6/otp-OTP-26.2.5.6.tar.gz"
+          "version": "26.2.5.9",
+          "downloadUrl": "https://github.com/erlang/otp/archive/OTP-26.2.5.9/otp-OTP-26.2.5.9.tar.gz"
         }
       }
     },

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`{`
`2`	`2`	`"Signatures": {`
`3`		`- "erlang-26.2.5.6.tar.gz": "371e59b98de59822e45fdbe50c18c8d8dd4c872990e7aaaba8a819e167186d03"`
	`3`	`+ "erlang-26.2.5.9.tar.gz": "730b937d31c899db5a14567d23452d1cee2f058aea4a42becbb4cb926a286927"`
`4`	`4`	`}`
`5`		`-}`
	`5`	`+}`
Original file line number	Diff line number	Diff line change
`@@ -3338,8 +3338,8 @@`
`3338`	`3338`	`"type": "other",`
`3339`	`3339`	`"other": {`
`3340`	`3340`	`"name": "erlang",`
`3341`		`- "version": "26.2.5.6",`
`3342`		`- "downloadUrl": "https://github.com/erlang/otp/archive/OTP-26.2.5.6/otp-OTP-26.2.5.6.tar.gz"`
	`3341`	`+ "version": "26.2.5.9",`
	`3342`	`+ "downloadUrl": "https://github.com/erlang/otp/archive/OTP-26.2.5.9/otp-OTP-26.2.5.9.tar.gz"`
`3343`	`3343`	`}`
`3344`	`3344`	`}`
`3345`	`3345`	`},`