Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3409-1

Опубликовано: 23 авг. 2023
Источник: suse-cvrf

Описание

Security update for erlang

This update for erlang fixes the following issues:

  • Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318)

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
erlang-22.2.7-150200.3.8.1
erlang-epmd-22.2.7-150200.3.8.1
SUSE Linux Enterprise Server 15 SP2-LTSS
erlang-22.2.7-150200.3.8.1
erlang-epmd-22.2.7-150200.3.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
erlang-22.2.7-150200.3.8.1
erlang-epmd-22.2.7-150200.3.8.1

Ссылки

Описание

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:erlang-22.2.7-150200.3.8.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:erlang-epmd-22.2.7-150200.3.8.1
SUSE Linux Enterprise Server 15 SP2-LTSS:erlang-22.2.7-150200.3.8.1
SUSE Linux Enterprise Server 15 SP2-LTSS:erlang-epmd-22.2.7-150200.3.8.1
Ссылки