Packages / Debian 13 (Trixie) / devel / erlang-cowlib

Package: erlang-cowlib (1.3.0-3+b2)

Erlang library for manipulating web protocols

Other Packages Related to erlang-cowlib:

  • dep: [erlang-base] (>= 1:27.2.4+dfsg)

    Erlang/OTP virtual machine and base applications

  • dep: [erlang-crypto] (>= 1:27.2.4+dfsg)

    Erlang/OTP cryptographic modules

Download erlang-cowlib

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64288 KiB693 KiBlist of filesDownload
arm64288 KiB693 KiBlist of filesDownload

Package file paths (19)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_cookie.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_date.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_http.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_http_hd.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_http_te.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cowlib.app
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_mimetypes.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_multipart.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_qs.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_spdy.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/ebin/cow_ws.beam
  • /usr/lib/erlang/lib/cowlib-1.3.0/include/cow_inline.hrl
  • /usr/lib/erlang/lib/cowlib-1.3.0/include/cow_parse.hrl
  • /usr/share/doc/erlang-cowlib/changelog.Debian.amd64.gz
  • /usr/share/doc/erlang-cowlib/changelog.Debian.arm64.gz
  • /usr/share/doc/erlang-cowlib/changelog.Debian.gz
  • /usr/share/doc/erlang-cowlib/changelog.gz
  • /usr/share/doc/erlang-cowlib/copyright
  • /usr/share/doc/erlang-cowlib/README.html

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.3.0-3+b2trixie / mainamd64Debian 13 · main · amd64288 KiB693 KiBpool/main/e/erlang-cowlib/erlang-cowlib_1.3.0-3+b2_amd64.deb
1.3.0-3+b1trixie / mainarm64Debian 13 · main · arm64288 KiB693 KiBpool/main/e/erlang-cowlib/erlang-cowlib_1.3.0-3+b1_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-43970]

Published:

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticated remote denial of service via memory exhaustion. cow_spdy:inflate/2 in cowlib

High(8.2)Affected
Details (2)
  • 1.3.0-3+b1 · arm64 · trixie

    Affected

    nvd · erlang-cowlib · debian · 13

  • 1.3.0-3+b2 · amd64 · trixie

    Affected

    nvd · erlang-cowlib · debian · 13

[CVE-2026-7790]

Published:

Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number o

High(8.7)Affected
Details (2)
  • 1.3.0-3+b1 · arm64 · trixie

    Affected

    nvd · erlang-cowlib · debian · 13

  • 1.3.0-3+b2 · amd64 · trixie

    Affected

    nvd · erlang-cowlib · debian · 13

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.3.0-3+b2 / amd64Observed Sep 1, 2026sha256 31e248c8263a…2e4c57f8Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 31e248c8263ab582fd2893be84812b9dcb3b5174582eae36668617672e4c57f8

Verify download

printf '%s %s\n' '31e248c8263ab582fd2893be84812b9dcb3b5174582eae36668617672e4c57f8' 'erlang-cowlib_1.3.0-3+b2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1.3.0-3+b1 / arm64Observed Sep 1, 2026sha256 b74ccdaa7a0f…5e1befafSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): b74ccdaa7a0f8ceb9a372cdf179cb744b740d18d4334e43b55c5ae585e1befaf

Verify download

printf '%s %s\n' 'b74ccdaa7a0f8ceb9a372cdf179cb744b740d18d4334e43b55c5ae585e1befaf' 'erlang-cowlib_1.3.0-3+b1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified