OPENSUSE-SU-2026:20607-1
Vulnerability from csaf_opensuse - Published: 2026-04-22 10:52 - Updated: 2026-04-22 10:52Summary
Security update for erlang
Severity
Important
Notes
Title of the patch: Security update for erlang
Description of the patch: This update for erlang fixes the following issues:
Security issues fixed:
- CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote
arbitrary reads/writes (bsc#1258663).
- CVE-2026-23941: improper handling of duplicate Content-Length headers in Erlang OTP can lead to HTTP request
smuggling (bsc#1259687).
- CVE-2026-23942: improper limitation of a pathname to a restricted directory in the SFTP server can lead to path
traversal (bsc#1259681).
- CVE-2026-23943: improper handling of highly compressed data in Erlang OTP ssh can lead to denial of service
(bsc#1259682).
- CVE-2026-28808: incorrect authorization can lead to unauthenticated access to protected CGI scripts (bsc#1261728).
- CVE-2026-28810: predictable DNS transaction IDs can lead to DNS cache poisoning (bsc#1261726).
- CVE-2026-32144: missing signature verification can lead to OCSP authorization bypass and information disclosure
(bsc#1261734).
Other updates and bugfixes:
- jinterface: allow to build determenistic OtpErlang.jar (bsc#1262288).
Patchnames: openSUSE-Leap-16.0-619
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
4.8 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
5.4 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
7.4 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
5.9 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
8.1 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for erlang",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for erlang fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote\n arbitrary reads/writes (bsc#1258663).\n- CVE-2026-23941: improper handling of duplicate Content-Length headers in Erlang OTP can lead to HTTP request\n smuggling (bsc#1259687).\n- CVE-2026-23942: improper limitation of a pathname to a restricted directory in the SFTP server can lead to path\n traversal (bsc#1259681).\n- CVE-2026-23943: improper handling of highly compressed data in Erlang OTP ssh can lead to denial of service\n (bsc#1259682).\n- CVE-2026-28808: incorrect authorization can lead to unauthenticated access to protected CGI scripts (bsc#1261728).\n- CVE-2026-28810: predictable DNS transaction IDs can lead to DNS cache poisoning (bsc#1261726).\n- CVE-2026-32144: missing signature verification can lead to OCSP authorization bypass and information disclosure\n (bsc#1261734).\n\nOther updates and bugfixes:\n\n- jinterface: allow to build determenistic OtpErlang.jar (bsc#1262288).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-619",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20607-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1258663",
"url": "https://bugzilla.suse.com/1258663"
},
{
"category": "self",
"summary": "SUSE Bug 1259681",
"url": "https://bugzilla.suse.com/1259681"
},
{
"category": "self",
"summary": "SUSE Bug 1259682",
"url": "https://bugzilla.suse.com/1259682"
},
{
"category": "self",
"summary": "SUSE Bug 1259687",
"url": "https://bugzilla.suse.com/1259687"
},
{
"category": "self",
"summary": "SUSE Bug 1261726",
"url": "https://bugzilla.suse.com/1261726"
},
{
"category": "self",
"summary": "SUSE Bug 1261728",
"url": "https://bugzilla.suse.com/1261728"
},
{
"category": "self",
"summary": "SUSE Bug 1261734",
"url": "https://bugzilla.suse.com/1261734"
},
{
"category": "self",
"summary": "SUSE Bug 1262288",
"url": "https://bugzilla.suse.com/1262288"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21620 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28808 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28810 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32144 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32144/"
}
],
"title": "Security update for erlang",
"tracking": {
"current_release_date": "2026-04-22T10:52:20Z",
"generator": {
"date": "2026-04-22T10:52:20Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:20607-1",
"initial_release_date": "2026-04-22T10:52:20Z",
"revision_history": [
{
"date": "2026-04-22T10:52:20Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "erlang-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-debugger-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-debugger-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-debugger-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-dialyzer-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-dialyzer-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-diameter-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-diameter-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-diameter-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-doc-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-doc-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-doc-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-epmd-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-epmd-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-epmd-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-et-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-et-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-et-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-et-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-et-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-et-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-jinterface-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-jinterface-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-jinterface-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-observer-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-observer-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-observer-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-observer-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-observer-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-reltool-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-reltool-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-reltool-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-src-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-wx-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-wx-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-wx-27.1.3-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-27.1.3-160000.4.1.aarch64",
"product": {
"name": "erlang-wx-src-27.1.3-160000.4.1.aarch64",
"product_id": "erlang-wx-src-27.1.3-160000.4.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-debugger-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-debugger-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-debugger-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-debugger-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-dialyzer-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-diameter-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-diameter-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-diameter-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-diameter-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-doc-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-doc-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-doc-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-epmd-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-epmd-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-epmd-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-et-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-et-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-et-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-et-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-et-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-et-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-jinterface-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-jinterface-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-observer-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-observer-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-observer-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-observer-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-reltool-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-reltool-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-reltool-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-reltool-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-src-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-wx-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-wx-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-wx-27.1.3-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"product": {
"name": "erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"product_id": "erlang-wx-src-27.1.3-160000.4.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-27.1.3-160000.4.1.s390x",
"product_id": "erlang-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-debugger-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-debugger-27.1.3-160000.4.1.s390x",
"product_id": "erlang-debugger-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-debugger-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.s390x",
"product_id": "erlang-dialyzer-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-dialyzer-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-diameter-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-diameter-27.1.3-160000.4.1.s390x",
"product_id": "erlang-diameter-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-diameter-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-epmd-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-epmd-27.1.3-160000.4.1.s390x",
"product_id": "erlang-epmd-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-et-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-et-27.1.3-160000.4.1.s390x",
"product_id": "erlang-et-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-et-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-et-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-et-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-jinterface-27.1.3-160000.4.1.s390x",
"product_id": "erlang-jinterface-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-jinterface-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-observer-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-observer-27.1.3-160000.4.1.s390x",
"product_id": "erlang-observer-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-observer-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-observer-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-reltool-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-reltool-27.1.3-160000.4.1.s390x",
"product_id": "erlang-reltool-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-reltool-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-src-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-wx-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-wx-27.1.3-160000.4.1.s390x",
"product_id": "erlang-wx-27.1.3-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-27.1.3-160000.4.1.s390x",
"product": {
"name": "erlang-wx-src-27.1.3-160000.4.1.s390x",
"product_id": "erlang-wx-src-27.1.3-160000.4.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-debugger-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-debugger-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-debugger-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-dialyzer-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-dialyzer-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-diameter-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-diameter-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-diameter-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-doc-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-doc-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-doc-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-epmd-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-epmd-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-epmd-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-et-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-et-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-et-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-et-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-et-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-et-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-jinterface-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-jinterface-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-jinterface-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-observer-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-observer-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-observer-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-observer-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-observer-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-reltool-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-reltool-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-reltool-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-src-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-wx-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-wx-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-wx-27.1.3-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-27.1.3-160000.4.1.x86_64",
"product": {
"name": "erlang-wx-src-27.1.3-160000.4.1.x86_64",
"product_id": "erlang-wx-src-27.1.3-160000.4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-debugger-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-debugger-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-debugger-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-debugger-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-debugger-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-dialyzer-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-diameter-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-diameter-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-diameter-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-diameter-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-diameter-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-doc-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-doc-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-doc-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-epmd-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-epmd-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-epmd-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-epmd-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-et-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-et-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-et-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-et-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-et-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-et-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-et-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-et-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-jinterface-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-jinterface-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-jinterface-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-observer-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-observer-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-observer-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-observer-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-observer-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-observer-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-observer-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-reltool-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-reltool-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-reltool-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-reltool-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-reltool-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-wx-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-wx-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-wx-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-wx-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-27.1.3-160000.4.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64"
},
"product_reference": "erlang-wx-src-27.1.3-160000.4.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-27.1.3-160000.4.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le"
},
"product_reference": "erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-27.1.3-160000.4.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x"
},
"product_reference": "erlang-wx-src-27.1.3-160000.4.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-27.1.3-160000.4.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
},
"product_reference": "erlang-wx-src-27.1.3-160000.4.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-21620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21620"
}
],
"notes": [
{
"category": "general",
"text": "Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl.\n\nThis issue affects otp: from 17.0, from 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: from 5.10 before 7.0; otp: from 1.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21620",
"url": "https://www.suse.com/security/cve/CVE-2026-21620"
},
{
"category": "external",
"summary": "SUSE Bug 1258663 for CVE-2026-21620",
"url": "https://bugzilla.suse.com/1258663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "important"
}
],
"title": "CVE-2026-21620"
},
{
"cve": "CVE-2026-23941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23941"
}
],
"notes": [
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027) vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.\n\nThis vulnerability is associated with program files lib/inets/src/http_server/httpd_request.erl and program routines httpd_request:parse_headers/7.\n\nThe server does not reject or normalize duplicate Content-Length headers. The earliest Content-Length in the request is used for body parsing while common reverse proxies (nginx, Apache httpd, Envoy) honor the last Content-Length value. This violates RFC 9112 Section 6.3 and allows front-end/back-end desynchronization, leaving attacker-controlled bytes queued as the start of the next request.\n\nThis issue affects OTP from OTP 17.0 until OTP 28.4.1, OTP 27.3.4.9 and OTP 26.2.5.18, corresponding to inets from 5.10 until 9.6.1, 9.3.2.3 and 9.1.0.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23941",
"url": "https://www.suse.com/security/cve/CVE-2026-23941"
},
{
"category": "external",
"summary": "SUSE Bug 1259687 for CVE-2026-23941",
"url": "https://bugzilla.suse.com/1259687"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-23941"
},
{
"cve": "CVE-2026-23942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23942"
}
],
"notes": [
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027) vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routines ssh_sftpd:is_within_root/2.\n\nThe SFTP server uses string prefix matching via lists:prefix/2 rather than proper path component validation when checking if a path is within the configured root directory. This allows authenticated users to access sibling directories that share a common name prefix with the configured root directory. For example, if root is set to /home/user1, paths like /home/user10 or /home/user1_backup would incorrectly be considered within the root.\n\nThis issue affects OTP from OTP 17.0 until OTP 28.4.1, OTP 27.3.4.9 and OTP 26.2.5.18, corresponding to ssh from 3.0.1 until 5.5.1, 5.2.11.6 and 5.1.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23942",
"url": "https://www.suse.com/security/cve/CVE-2026-23942"
},
{
"category": "external",
"summary": "SUSE Bug 1259681 for CVE-2026-23942",
"url": "https://bugzilla.suse.com/1259681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-23942"
},
{
"cve": "CVE-2026-23943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23943"
}
],
"notes": [
{
"category": "general",
"text": "Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion.\n\nThe SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication without any size limit, enabling reliable memory exhaustion DoS.\n\nTwo compression algorithms are affected:\n\n* zlib: Activates immediately after key exchange, enabling unauthenticated attacks\n* zlib@openssh.com: Activates post-authentication, enabling authenticated attacks\n\nEach SSH packet can decompress ~255 MB from 256 KB of wire data (1029:1 amplification ratio). Multiple packets can rapidly exhaust available memory, causing OOM kills in memory-constrained environments.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_transport.erl and program routines ssh_transport:decompress/2, ssh_transport:handle_packet_part/4.\n\nThis issue affects OTP from OTP 17.0 until OTP 28.4.1, 27.3.4.9 and 26.2.5.18 corresponding to ssh from 3.0.1 until 5.5.1, 5.2.11.6 and 5.1.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23943",
"url": "https://www.suse.com/security/cve/CVE-2026-23943"
},
{
"category": "external",
"summary": "SUSE Bug 1259682 for CVE-2026-23943",
"url": "https://bugzilla.suse.com/1259682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-23943"
},
{
"cve": "CVE-2026-28808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28808"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias.\n\nWhen script_alias maps a URL prefix to a directory outside DocumentRoot, mod_auth evaluates directory-based access controls against the DocumentRoot-relative path while mod_cgi executes the script at the ScriptAlias-resolved path. This path mismatch allows unauthenticated access to CGI scripts that directory rules were meant to protect.\n\nThis vulnerability is associated with program files lib/inets/src/http_server/mod_alias.erl, lib/inets/src/http_server/mod_auth.erl, and lib/inets/src/http_server/mod_cgi.erl.\n\nThis issue affects OTP from OTP 17.0 until OTP 28.4.2, 27.3.4.10 and 26.2.5.19 corresponding to inets from 5.10 until 9.6.2, 9.3.2.4 and 9.1.0.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28808",
"url": "https://www.suse.com/security/cve/CVE-2026-28808"
},
{
"category": "external",
"summary": "SUSE Bug 1261728 for CVE-2026-28808",
"url": "https://bugzilla.suse.com/1261728"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "important"
}
],
"title": "CVE-2026-28808"
},
{
"cve": "CVE-2026-28810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28810"
}
],
"notes": [
{
"category": "general",
"text": "Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_db modules) allows DNS Cache Poisoning.\n\nThe built-in DNS resolver (inet_res) uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization. Response validation relies almost entirely on this ID, making DNS cache poisoning practical for an attacker who can observe one query or predict the next ID. This conflicts with RFC 5452 recommendations for mitigating forged DNS answers.\n\ninet_res is intended for use in trusted network environments and with trusted recursive resolvers. Earlier documentation did not clearly state this deployment assumption, which could lead users to deploy the resolver in environments where spoofed DNS responses are possible.\n\nThis vulnerability is associated with program files lib/kernel/src/inet_db.erl and lib/kernel/src/inet_res.erl.\n\nThis issue affects OTP from OTP 17.0 until OTP 28.4.2, 27.3.4.10 and 26.2.5.19 corresponding to kernel from 3.0 until 10.6.2, 10.2.7.4 and 9.2.4.11.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28810",
"url": "https://www.suse.com/security/cve/CVE-2026-28810"
},
{
"category": "external",
"summary": "SUSE Bug 1261726 for CVE-2026-28810",
"url": "https://bugzilla.suse.com/1261726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-28810"
},
{
"cve": "CVE-2026-32144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32144"
}
],
"notes": [
{
"category": "general",
"text": "Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature verification.\n\nThe OCSP response validation in public_key:pkix_ocsp_validate/5 does not verify that a CA-designated responder certificate was cryptographically signed by the issuing CA. Instead, it only checks that the responder certificate\u0027s issuer name matches the CA\u0027s subject name and that the certificate has the OCSPSigning extended key usage. An attacker who can intercept or control OCSP responses can create a self-signed certificate with a matching issuer name and the OCSPSigning EKU, and use it to forge OCSP responses that mark revoked certificates as valid.\n\nThis affects SSL/TLS clients using OCSP stapling, which may accept connections to servers with revoked certificates, potentially transmitting sensitive data to compromised servers. Applications using the public_key:pkix_ocsp_validate/5 API directly are also affected, with impact depending on usage context.\n\nThis vulnerability is associated with program files lib/public_key/src/pubkey_ocsp.erl and program routines pubkey_ocsp:is_authorized_responder/3.\n\nThis issue affects OTP from OTP 27.0 until OTP 28.4.2 and 27.3.4.10 corresponding to public_key from 1.16 until 1.20.3 and 1.17.1.2, and ssl from 11.2 until 11.5.4 and 11.2.12.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32144",
"url": "https://www.suse.com/security/cve/CVE-2026-32144"
},
{
"category": "external",
"summary": "SUSE Bug 1261734 for CVE-2026-32144",
"url": "https://bugzilla.suse.com/1261734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-debugger-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-dialyzer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-diameter-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-doc-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-epmd-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-et-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-jinterface-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-observer-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-reltool-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-src-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-27.1.3-160000.4.1.x86_64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.aarch64",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.ppc64le",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.s390x",
"openSUSE Leap 16.0:erlang-wx-src-27.1.3-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T10:52:20Z",
"details": "important"
}
],
"title": "CVE-2026-32144"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…