Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02331-1

Опубликовано: 16 июл. 2025
Источник: suse-cvrf

Описание

Security update for erlang26

This update for erlang26 fixes the following issues:

  • CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)

Список пакетов

SUSE Linux Enterprise Module for Server Applications 15 SP6
erlang26-26.2.1-150300.7.14.3
erlang26-epmd-26.2.1-150300.7.14.3
SUSE Linux Enterprise Module for Server Applications 15 SP7
erlang26-26.2.1-150300.7.14.3
erlang26-epmd-26.2.1-150300.7.14.3
openSUSE Leap 15.6
erlang26-26.2.1-150300.7.14.3
erlang26-debugger-26.2.1-150300.7.14.3
erlang26-debugger-src-26.2.1-150300.7.14.3
erlang26-dialyzer-26.2.1-150300.7.14.3
erlang26-dialyzer-src-26.2.1-150300.7.14.3
erlang26-diameter-26.2.1-150300.7.14.3
erlang26-diameter-src-26.2.1-150300.7.14.3
erlang26-doc-26.2.1-150300.7.14.3
erlang26-epmd-26.2.1-150300.7.14.3
erlang26-et-26.2.1-150300.7.14.3
erlang26-et-src-26.2.1-150300.7.14.3
erlang26-jinterface-26.2.1-150300.7.14.3
erlang26-jinterface-src-26.2.1-150300.7.14.3
erlang26-observer-26.2.1-150300.7.14.3
erlang26-observer-src-26.2.1-150300.7.14.3
erlang26-reltool-26.2.1-150300.7.14.3
erlang26-reltool-src-26.2.1-150300.7.14.3
erlang26-src-26.2.1-150300.7.14.3
erlang26-wx-26.2.1-150300.7.14.3
erlang26-wx-src-26.2.1-150300.7.14.3

Ссылки

Описание

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.

Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15 SP6:erlang26-26.2.1-150300.7.14.3
SUSE Linux Enterprise Module for Server Applications 15 SP6:erlang26-epmd-26.2.1-150300.7.14.3
SUSE Linux Enterprise Module for Server Applications 15 SP7:erlang26-26.2.1-150300.7.14.3
SUSE Linux Enterprise Module for Server Applications 15 SP7:erlang26-epmd-26.2.1-150300.7.14.3
Ссылки
Уязвимость SUSE-SU-2025:02331-1