Merge PR "[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade erlang to 26.2.5.18 for CVE-2026-23941, CVE-2026-23942, CVE-2026-23943 [HIGH] - branch 3.0-dev" #16217

Author: CBL-Mariner-Bot

SPECS/erlang/erlang.signatures.json

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "erlang-26.2.5.17.tar.gz": "817ae1f4801f42d167a0b7db79eec0039cf065cf013f0f25d47719ccca206a45"
+    "erlang-26.2.5.18.tar.gz": "61d44387c301f4c4d637345294e2ba3d98085d119572799e09653046f0c7e17b"
   }
 }

SPECS/erlang/erlang.spec

@@ -1,7 +1,7 @@
 %define  debug_package %{nil}
 Summary:        erlang
 Name:           erlang
-Version:        26.2.5.17
+Version:        26.2.5.18
 Release:        1%{?dist}
 License:        Apache-2.0
 Vendor:         Microsoft Corporation
@@ -53,6 +53,9 @@ export ERL_TOP=`pwd`
 %{_libdir}/erlang/*
 
 %changelog
+* Mon Mar 16 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 26.2.5.18-1
+- Auto-upgrade to 26.2.5.18 - for CVE-2026-23941, CVE-2026-23942, CVE-2026-23943
+
 * Wed Feb 25 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 26.2.5.17-1
 - Auto-upgrade to 26.2.5.17 - for CVE-2026-21620
 

cgmanifest.json

@@ -3368,8 +3368,8 @@
         "type": "other",
         "other": {
           "name": "erlang",
-          "version": "26.2.5.17",
-          "downloadUrl": "https://github.com/erlang/otp/archive/OTP-26.2.5.17/otp-OTP-26.2.5.17.tar.gz"
+          "version": "26.2.5.18",
+          "downloadUrl": "https://github.com/erlang/otp/archive/OTP-26.2.5.18/otp-OTP-26.2.5.18.tar.gz"
         }
       }
     },