Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 8: MGASA-2022-0450 Critical: Erlang Client Authentication Bypass

mageia
Calendar Grey December 7, 2022
Dist Mageia Esm H88
Essential security patch for Mageia tackling user authentication loophole in Erlang/OTP. Upgrade immediately to safeguard your system.
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and D...

Summary

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS. (CVE-2022-37026)

References

- https://bugs.mageia.org/show_bug.cgi?id=31190

- https://lists.suse.com/pipermail/sle-security-updates/2022-November/013107.html

-

- https://www.cve.org/CVERecord?id=CVE-2022-37026

Topics%20covered

Topics Covered

security advisory critical TLS bypass client authentication Mageia Erlang

Resolution

SRPMS

- 8/core/erlang-23.2.1-3.2.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0450.html
Type: security
CVE: CVE-2022-37026

Topics%20covered

Topics Covered

security advisory critical TLS bypass client authentication Mageia Erlang

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here