Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3401-1

Опубликовано: 23 авг. 2023
Источник: suse-cvrf

Описание

Security update for erlang

This update for erlang fixes the following issues:

  • Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318)

Список пакетов

SUSE Enterprise Storage 7.1
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise Module for Server Applications 15 SP4
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise Module for Server Applications 15 SP5
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise Server 15 SP3-LTSS
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Manager Proxy 4.2
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
SUSE Manager Server 4.2
erlang-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
openSUSE Leap 15.4
erlang-22.3-150300.3.8.1
erlang-debugger-22.3-150300.3.8.1
erlang-debugger-src-22.3-150300.3.8.1
erlang-dialyzer-22.3-150300.3.8.1
erlang-dialyzer-src-22.3-150300.3.8.1
erlang-diameter-22.3-150300.3.8.1
erlang-diameter-src-22.3-150300.3.8.1
erlang-doc-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
erlang-et-22.3-150300.3.8.1
erlang-et-src-22.3-150300.3.8.1
erlang-jinterface-22.3-150300.3.8.1
erlang-jinterface-src-22.3-150300.3.8.1
erlang-observer-22.3-150300.3.8.1
erlang-observer-src-22.3-150300.3.8.1
erlang-reltool-22.3-150300.3.8.1
erlang-reltool-src-22.3-150300.3.8.1
erlang-src-22.3-150300.3.8.1
erlang-wx-22.3-150300.3.8.1
erlang-wx-src-22.3-150300.3.8.1
openSUSE Leap 15.5
erlang-22.3-150300.3.8.1
erlang-debugger-22.3-150300.3.8.1
erlang-debugger-src-22.3-150300.3.8.1
erlang-dialyzer-22.3-150300.3.8.1
erlang-dialyzer-src-22.3-150300.3.8.1
erlang-diameter-22.3-150300.3.8.1
erlang-diameter-src-22.3-150300.3.8.1
erlang-doc-22.3-150300.3.8.1
erlang-epmd-22.3-150300.3.8.1
erlang-et-22.3-150300.3.8.1
erlang-et-src-22.3-150300.3.8.1
erlang-jinterface-22.3-150300.3.8.1
erlang-jinterface-src-22.3-150300.3.8.1
erlang-observer-22.3-150300.3.8.1
erlang-observer-src-22.3-150300.3.8.1
erlang-reltool-22.3-150300.3.8.1
erlang-reltool-src-22.3-150300.3.8.1
erlang-src-22.3-150300.3.8.1
erlang-wx-22.3-150300.3.8.1
erlang-wx-src-22.3-150300.3.8.1

Ссылки

Описание

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Затронутые продукты
SUSE Enterprise Storage 7.1:erlang-22.3-150300.3.8.1
SUSE Enterprise Storage 7.1:erlang-epmd-22.3-150300.3.8.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:erlang-22.3-150300.3.8.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:erlang-epmd-22.3-150300.3.8.1
Ссылки