Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | DSA-6580-1 |
erlang security update
Debian, erlangDebian Linux, erlang OTP, Debian erlang
|
Debian Security Advisories | |||
|
DSA-6580-1CVE-2026-55951CVE-2026-59696CVE-2026-65634CVE-2026-6635713 moreerlang security update
Executive summaryDebian has released a security update for the erlang package, which provides the Erlang/OTP programming language and runtime. The advisory covers 18 CVEs that could lead to denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. Debian recommends upgrading the erlang packages to the fixed version for the stable distribution (trixie). Technical summaryThe advisory describes several vulnerabilities in Erlang/OTP affecting the HTTP client and server, SSH, TLS, ASN.1 decoding, the network driver, and URI, LDAP and SNMP parsing, and lists 18 CVE identifiers. The stated impacts are denial of service, HTTP request smuggling, and authentication or access restriction bypass, including TLS server impersonation. The vulnerability classes, attack vectors, and preconditions for each CVE are not stated. For the stable distribution (trixie), the fixed version is 1:27.3.4.1+dfsg-1+deb13u4. The update tightens protocol validation and HTTP/SSH resource limits, and applications relying on previously permissive behavior may need adjustment. No workarounds, detection guidance, or affected version ranges beyond the fixed version are stated, and CVSS scores are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from lists.debian.org/debian-security-announce/2026/msg00496.html ScoreNo CVSS score published. Affects
Debian Security TeamPublished
Read the advisory
|
|||||||