Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 34 articles for you...
203
security advisoryinformation leakimportantMageia 10 Erlang Important SFTP Info Leak Vuln 2026-0270
Security update. Publication date: 19 Jul 2026 URL: https://advisories.mageia.org/MGASA-2026-0270.html Type: security Affected Mageia releases: 10 CVE: CVE-2026-48855 Description: The updated packages fix a security vulnerability: SFTP READLINK response leaks absolute backend filesystem path when root is configured. (CVE-2026-48855) References: - https://bugs.mageia.org/show_bug.cgi?id=35839 - https://lists.fedoraproject.org/archives/list/
Jul 19, 2026
•Important
Mageia
89
security advisoryfedoraimportantFedora 44 erlang Important Fix for CVE-2026-48855 SSH Info Disclosure
Fix for CVE-2026-48855. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ef630b13b0 2026-06-23 01:06:46.785029+00:00 -------------------------------------------------------------------------------- Name : erlang Product : Fedora 44 Version : 26.2.5.21 Release : 3.fc44 URL : https://www.erlang.org Summary : General-purpose programming language and runtime environment Description : Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. -------------------------------------------------------------------------------- Update Information: Fix for CVE-2026-48855 -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 13 2026 Peter Lemenkov - 26.2.5.21-3 - Backport fix for CVE-2026-48855 * Tue Jun 2 2026 Peter Lemenkov - 26.2.5.21-2 - Ditch outdated src subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #2488319 - CVE-2026-48855 erlang: Erlang OTP ssh: Information disclosure via symlink resolution in SFTP [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2488319 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ef630b13b0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 22, 2026
•Important
Fedora
89
security advisorymoderatefedoraFedora 43 Erlang Critical Info Disclosure Fix CVE-2026-48855
Fix for CVE-2026-48855. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-e692d95607 2026-06-23 00:52:30.610741+00:00 -------------------------------------------------------------------------------- Name : erlang Product : Fedora 43 Version : 26.2.5.21 Release : 3.fc43 URL : https://www.erlang.org Summary : General-purpose programming language and runtime environment Description : Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. -------------------------------------------------------------------------------- Update Information: Fix for CVE-2026-48855 -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 13 2026 Peter Lemenkov - 26.2.5.21-3 - Backport fix for CVE-2026-48855 * Tue Jun 2 2026 Peter Lemenkov - 26.2.5.21-2 - Ditch outdated src subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #2488319 - CVE-2026-48855 erlang: Erlang OTP ssh: Information disclosure via symlink resolution in SFTP [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2488319 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e692d95607' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 22, 2026
•Important
Fedora
100
security advisorySuSEimportantErlang Path Traversal Vulnerability Remediation for SUSE 2026-22082-1
An update that solves five vulnerabilities can now be installed.. # Security update for erlang Announcement ID: SUSE-SU-2026:22082-1 Release Date: 2026-06-05T11:01:03Z Rating: important References: * bsc#1244642 * bsc#1262503 * bsc#1266448 * bsc#1266449 * bsc#1266466 Cross-References: * CVE-2025-4748 * CVE-2026-32147 * CVE-2026-42789 * CVE-2026-42790 * CVE-2026-42791 CVSS scores: * CVE-2025-4748 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L * CVE-2025-4748 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-4748 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32147 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-32147 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-32147 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32147 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-42789 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42789 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42789 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42789 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-42790 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42790 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42790 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42790 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-42791 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42791 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42791 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42791 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for erlang fixes the following issues * CVE-2025-4748: improper limitation of a pathname may lead to path traversal (bsc#1244642). * CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc#1262503). * CVE-2026-42789: `public_key` application accepts non-CA certificates as intermediate issuers and this enables chain forgery (bsc#1266449). * CVE-2026-42790: Name Constraints and Subject CommonName fallback in TLS hostname verification allows for certificate forgery by MITM attacker (bsc#1266466). * CVE-2026-42791: OCSP response verification in the `public_key` application does not check the validity period of the OCSP responder certificate and allows for OCSP response response forgery (bsc#1266448). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-892=1 *SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-892=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * erlang-epmd-27.1.3-160000.5.1 * erlang-epmd-debuginfo-27.1.3-160000.5.1 * erlang-debugsource-27.1.3-160000.5.1 * erlang-debuginfo-27.1.3-160000.5.1 * erlang-27.1.3-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * erlang-epmd-27.1.3-160000.5.1 * erlang-epmd-debuginfo-27.1.3-160000.5.1 * erlang-debugsource-27.1.3-160000.5.1 * erlang-debuginfo-27.1.3-160000.5.1 * erlang-27.1.3-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4748.html * https://www.suse.com/security/cve/CVE-2026-32147.html * https://www.suse.com/security/cve/CVE-2026-42789.html * https://www.suse.com/security/cve/CVE-2026-42790.html * https://www.suse.com/security/cve/CVE-2026-42791.html * https://bugzilla.suse.com/show_bug.cgi?id=1244642 * https://bugzilla.suse.com/show_bug.cgi?id=1262503 * https://bugzilla.suse.com/show_bug.cgi?id=1266448 * https://bugzilla.suse.com/show_bug.cgi?id=1266449 * https://bugzilla.suse.com/show_bug.cgi?id=1266466 . Critical update for erlang addresses important flaws in SUSE servers. Prompt installation recommended.. SUSE Linux Enterprise, erlang security update, important advisories, security fixes. . Severity: Important. LinuxSecurity.com Team
Jun 15, 2026
•Important
SuSE
100
security advisorydenial of serviceSuSESUSE Linux 15 SP4 Important Erlang Update Denial of Service 2026-1714-1
An update that solves five vulnerabilities can now be installed.. # Security update for erlang Announcement ID: SUSE-SU-2026:1714-1 Release Date: 2026-05-06T12:08:16Z Rating: important References: * bsc#1258663 * bsc#1259681 * bsc#1259682 * bsc#1259687 * bsc#1261728 Cross-References: * CVE-2026-21620 * CVE-2026-23941 * CVE-2026-23942 * CVE-2026-23943 * CVE-2026-28808 CVSS scores: * CVE-2026-21620 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-21620 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-21620 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23941 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-23941 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-23941 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23942 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-23942 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-23942 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23943 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-23943 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-23943 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-28808 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-28808 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-28808 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-28808 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * Server Applications Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for erlang fixes the following issues: * CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal (bsc#1258663). * CVE-2026-23941: HTTP Request Smuggling in Erlang OTP (bsc#1259687). * CVE-2026-23942: path traversal vulnerability in Erlang OTP (bsc#1259681). * CVE-2026-23943: denial of service due to improper handling of highly compressed data in Erlang OTP ssh (bsc#1259682). * CVE-2026-28808: incorrect authorization canlead to unauthenticated access to protected CGI scripts (bsc#1261728). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-1714=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-1714=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1714=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1714=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1714=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1714=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1714=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1714=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1714=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1714=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1714=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1714=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * erlang-debugger-23.3.4.19-150300.3.32.1 * erlang-reltool-23.3.4.19-150300.3.32.1 * erlang-jinterface-23.3.4.19-150300.3.32.1 * erlang-dialyzer-debuginfo-23.3.4.19-150300.3.32.1 *erlang-jinterface-src-23.3.4.19-150300.3.32.1 * erlang-reltool-src-23.3.4.19-150300.3.32.1 * erlang-diameter-src-23.3.4.19-150300.3.32.1 * erlang-et-23.3.4.19-150300.3.32.1 * erlang-src-23.3.4.19-150300.3.32.1 * erlang-diameter-23.3.4.19-150300.3.32.1 * erlang-observer-src-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * erlang-doc-23.3.4.19-150300.3.32.1 * erlang-wx-debuginfo-23.3.4.19-150300.3.32.1 * erlang-observer-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-et-src-23.3.4.19-150300.3.32.1 * erlang-wx-23.3.4.19-150300.3.32.1 * erlang-wx-src-23.3.4.19-150300.3.32.1 * erlang-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-dialyzer-23.3.4.19-150300.3.32.1 * erlang-debugger-src-23.3.4.19-150300.3.32.1 * erlang-dialyzer-src-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * erlang-23.3.4.19-150300.3.32.1 *erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 * SUSE Linux EnterpriseServer for SAP Applications 15 SP6 (ppc64le x86_64) * erlang-23.3.4.19-150300.3.32.1 * erlang-epmd-23.3.4.19-150300.3.32.1 * erlang-debugsource-23.3.4.19-150300.3.32.1 * erlang-debuginfo-23.3.4.19-150300.3.32.1 * erlang-epmd-debuginfo-23.3.4.19-150300.3.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-21620.html * https://www.suse.com/security/cve/CVE-2026-23941.html * https://www.suse.com/security/cve/CVE-2026-23942.html * https://www.suse.com/security/cve/CVE-2026-23943.html * https://www.suse.com/security/cve/CVE-2026-28808.html * https://bugzilla.suse.com/show_bug.cgi?id=1258663 * https://bugzilla.suse.com/show_bug.cgi?id=1259681 * https://bugzilla.suse.com/show_bug.cgi?id=1259682 * https://bugzilla.suse.com/show_bug.cgi?id=1259687 * https://bugzilla.suse.com/show_bug.cgi?id=1261728 . Five important vulnerabilities addressed in Erlang update for SUSE to enhance system security and stability.. Erlang security, SUSE updates, software vulnerabilities. . Severity: Important. LinuxSecurity.com Team
May 06, 2026
•Important
SuSE
100
security advisorySuSEDoSSUSE 16.0 Erlang Important Update Fixes DoS CVE-2026-32144
An update that solves seven vulnerabilities and has one fix can now be installed.. # Security update for erlang Announcement ID: SUSE-SU-2026:21374-1 Release Date: 2026-04-22T10:52:20Z Rating: important References: * bsc#1258663 * bsc#1259681 * bsc#1259682 * bsc#1259687 * bsc#1261726 * bsc#1261728 * bsc#1261734 * bsc#1262288 Cross-References: * CVE-2026-21620 * CVE-2026-23941 * CVE-2026-23942 * CVE-2026-23943 * CVE-2026-28808 * CVE-2026-28810 * CVE-2026-32144 CVSS scores: * CVE-2026-21620 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-21620 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-21620 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23941 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-23941 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-23941 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23942 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-23942 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-23942 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23943 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-23943 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-23943 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-28808 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-28808 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-28808 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-28808 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-28810 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-28810 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-28810 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-28810 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-32144 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-32144 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-32144 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32144 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities and has one fix can now be installed. ## Description: This update for erlang fixes the following issues: Security issues fixed: * CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote arbitrary reads/writes(bsc#1258663). * CVE-2026-23941: improper handling of duplicate Content-Length headers in Erlang OTP can lead to HTTP request smuggling (bsc#1259687). * CVE-2026-23942: improper limitation of a pathname to a restricted directory in the SFTP server can lead to path traversal (bsc#1259681). * CVE-2026-23943: improper handling of highly compressed data in Erlang OTP ssh can lead to denial of service (bsc#1259682). * CVE-2026-28808: incorrect authorization can lead to unauthenticated access to protected CGI scripts (bsc#1261728). * CVE-2026-28810: predictable DNS transaction IDs can lead to DNS cache poisoning (bsc#1261726). * CVE-2026-32144: missing signature verification can lead to OCSP authorization bypass and information disclosure (bsc#1261734). Other updates and bugfixes: * jinterface: allow to build determenistic OtpErlang.jar (bsc#1262288). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-619=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-619=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * erlang-epmd-27.1.3-160000.4.1 * erlang-debuginfo-27.1.3-160000.4.1 * erlang-debugsource-27.1.3-160000.4.1 * erlang-27.1.3-160000.4.1 * erlang-epmd-debuginfo-27.1.3-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * erlang-epmd-27.1.3-160000.4.1 * erlang-debuginfo-27.1.3-160000.4.1 * erlang-debugsource-27.1.3-160000.4.1 * erlang-27.1.3-160000.4.1 * erlang-epmd-debuginfo-27.1.3-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-21620.html * https://www.suse.com/security/cve/CVE-2026-23941.html * https://www.suse.com/security/cve/CVE-2026-23942.html * https://www.suse.com/security/cve/CVE-2026-23943.html * https://www.suse.com/security/cve/CVE-2026-28808.html * https://www.suse.com/security/cve/CVE-2026-28810.html * https://www.suse.com/security/cve/CVE-2026-32144.html * https://bugzilla.suse.com/show_bug.cgi?id=1258663 * https://bugzilla.suse.com/show_bug.cgi?id=1259681 * https://bugzilla.suse.com/show_bug.cgi?id=1259682 * https://bugzilla.suse.com/show_bug.cgi?id=1259687 * https://bugzilla.suse.com/show_bug.cgi?id=1261726 * https://bugzilla.suse.com/show_bug.cgi?id=1261728 * https://bugzilla.suse.com/show_bug.cgi?id=1261734 * https://bugzilla.suse.com/show_bug.cgi?id=1262288 . Update resolves seven issues in Erlang for SUSE, including critical fixes to enhance application security and integrity.. SUSE Erlang Update, Security Patch SUSE, Important Update Erlang, SUSE Vulnerability Fix. . Severity: Important. LinuxSecurity.com Team
Apr 28, 2026
•Important
SuSE
89
security advisoryunauthorized accessfedoraFedora 44 Erlang Critical DNS Issue Unauthorized Access 2026-2a93359b0b
Erlang ver. 26.2.5.19. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-2a93359b0b 2026-04-25 01:21:36.172246+00:00 -------------------------------------------------------------------------------- Name : erlang Product : Fedora 44 Version : 26.2.5.19 Release : 1.fc44 URL : https://www.erlang.org Summary : General-purpose programming language and runtime environment Description : Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. -------------------------------------------------------------------------------- Update Information: Erlang ver. 26.2.5.19 -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 7 2026 Peter Lemenkov - 26.2.5.19-1 - Ver. 26.2.5.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2456135 - CVE-2026-28810 erlang: Erlang/OTP kernel: DNS cache poisoning via predictable DNS transaction IDs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2456135 [ 2 ] Bug #2456139 - CVE-2026-28808 erlang: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2456139 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2a93359b0b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 25, 2026
•Critical
Fedora
89
security advisoryfedorasystem updateFedora 43 Erlang Update 2026-53a7ddccc8 Critical DNS Poisoning Issue
Erlang ver. 26.2.5.19. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-53a7ddccc8 2026-04-16 00:53:32.960248+00:00 -------------------------------------------------------------------------------- Name : erlang Product : Fedora 43 Version : 26.2.5.19 Release : 1.fc43 URL : https://www.erlang.org Summary : General-purpose programming language and runtime environment Description : Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. -------------------------------------------------------------------------------- Update Information: Erlang ver. 26.2.5.19 -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 7 2026 Peter Lemenkov - 26.2.5.19-1 - Ver. 26.2.5.19 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2456135 - CVE-2026-28810 erlang: Erlang/OTP kernel: DNS cache poisoning via predictable DNS transaction IDs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2456135 [ 2 ] Bug #2456139 - CVE-2026-28808 erlang: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2456139 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-53a7ddccc8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 16, 2026
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!