RHSA-2026:63160
Vulnerability from csaf_redhat - Published: 2026-09-03 12:01 - Updated: 2026-09-21 11:31Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
erlang27:
* erlang27-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-asn1-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-common_test-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-compiler-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-crypto-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-debugger-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-dialyzer-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-diameter-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-edoc-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-eldap-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-erl_interface-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-erts-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-et-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-eunit-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-examples-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-ftp-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-gdb-tools-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-inets-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-jinterface-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-kernel-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-megaco-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-mnesia-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-observer-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-odbc-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-os_mon-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-parsetools-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-public_key-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-reltool-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-runtime_tools-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-sasl-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-snmp-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-ssh-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-ssl-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-stdlib-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-syntax_tools-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-tftp-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-tools-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-wx-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-xmerl-27.3.4.17-1.hum1 (aarch64, x86_64)
* erlang27-27.3.4.17-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Erlang OTP's public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.
8.0 (High)
Affected products
Fixed
79 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.
7.4 (High)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Important
A flaw was found in Erlang OTP's public_key application, specifically in the Online Certificate Status Protocol (OCSP) response verification. A remote attacker who has obtained the private key of an expired Certificate Authority (CA)-designated OCSP responder certificate can forge OCSP responses. This allows a malicious server to present a revoked Transport Layer Security (TLS) certificate, which a client would then accept as valid, leading to an authentication bypass. This vulnerability can also affect applications directly using the public_key:pkix_ocsp_validate/5 API, potentially enabling authentication bypass with revoked client certificates.
5.9 (Medium)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Low
A flaw was found in Erlang OTP ssh, specifically within the `ssh_sftpd` module. An authenticated SFTP client can exploit this vulnerability by creating a symbolic link (symlink) inside a restricted directory (chroot) that points to the root directory. When the client reads this symlink, the `ssh_sftpd` module incorrectly reveals the absolute filesystem path of the SFTP root directory and any symlink targets, rather than the expected restricted path. This exposure of sensitive information allows for file discovery, but does not grant access to file contents, credentials, or paths outside the root directory.
4.3 (Medium)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Moderate
A flaw was found in Erlang/OTP's FTP (File Transfer Protocol) client, specifically within the ftp_internal module. A remote attacker, by operating a malicious or compromised FTP server, could exploit an unvalidated IP address in the server's passive mode (PASV) response. This vulnerability, known as Server-Side Request Forgery (SSRF), allows the attacker to redirect the client's data connection to an arbitrary internal host and port. This can lead to information disclosure from internal systems or the sending of sensitive data to unintended third-party hosts, enabling FTP bounce attacks.
6.5 (Medium)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Moderate
A flaw was found in Erlang/OTP. The `inet_tls_dist:check_ip/1` function, responsible for enforcing a LAN allowlist for Erlang distribution over TLS, incorrectly uses `inet:sockname/1` instead of `inet:peername/1` to obtain the peer's IP address. This allows an unauthenticated attacker, possessing a CA-signed TLS certificate, to bypass the LAN restriction. Consequently, the attacker can gain full Erlang distribution access to the node, enabling remote procedure calls and arbitrary code loading.
6.8 (Medium)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Moderate
A flaw was found in Erlang OTP (Open Telecom Platform) erts, specifically within the `inet_drv` component. An unauthenticated remote attacker can exploit a stack-based buffer overflow vulnerability by sending a specially crafted Stream Control Transmission Protocol (SCTP) ERROR chunk. This can lead to a Denial of Service (DoS) by crashing the BEAM virtual machine. Additionally, this flaw may result in limited information disclosure by leaking small portions of Erlang VM memory.
8.2 (High)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Important
A flaw was found in the Erlang OTP ssh (Secure Shell) component, specifically within its SFTP (SSH File Transfer Protocol) module. An authenticated SFTP user can exploit this vulnerability by sending specially crafted extended data on an open channel. This action triggers an infinite loop in the ssh_sftpd process, rendering the SFTP channel permanently unresponsive and leading to a denial of service (DoS). The affected process will continuously consume CPU resources and accumulate unbounded memory.
6.5 (Medium)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Moderate
A flaw was found in Erlang's SSL (Secure Sockets Layer) component. A network-positioned attacker can exploit this vulnerability by injecting unauthenticated plaintext data into a client's TLS (Transport Layer Security) handshake. The client application may then process this injected data as if it were legitimate, authenticated server data. This could lead to the blind injection of unauthenticated bytes, potentially impacting the integrity of the communication.
CWE-924 - Improper Enforcement of Message Integrity During Transmission in a Communication ChannelAffected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Low
A flaw was found in Erlang/OTP's SSL (Secure Sockets Layer) application. An unauthenticated remote attacker can send a specially crafted ClientHello message to a TLS 1.3 server with session tickets enabled. This can permanently disrupt the server's ability to handle session tickets, leading to a Denial of Service (DoS) for new TLS 1.3 connections until the SSL application is restarted. This vulnerability is caused by improper validation of PSK (Pre-Shared Key) identity and binder list lengths.
7.5 (High)
Affected products
Fixed
79 products, the same list as for
CVE-2026-42789
Threats
Impact
Important
References
104 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nerlang27:\n * erlang27-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-asn1-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-common_test-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-compiler-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-crypto-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-debugger-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-dialyzer-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-diameter-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-edoc-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-eldap-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-erl_interface-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-erts-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-et-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-eunit-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-examples-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-ftp-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-gdb-tools-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-inets-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-jinterface-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-kernel-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-megaco-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-mnesia-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-observer-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-odbc-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-os_mon-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-parsetools-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-public_key-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-reltool-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-runtime_tools-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-sasl-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-snmp-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-ssh-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-ssl-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-stdlib-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-syntax_tools-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-tftp-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-tools-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-wx-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-xmerl-27.3.4.17-1.hum1 (aarch64, x86_64)\n * erlang27-27.3.4.17-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:63160",
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75538",
"url": "https://access.redhat.com/security/cve/CVE-2026-75538"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-70405",
"url": "https://access.redhat.com/security/cve/CVE-2026-70405"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55952",
"url": "https://access.redhat.com/security/cve/CVE-2026-55952"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54891",
"url": "https://access.redhat.com/security/cve/CVE-2026-54891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54886",
"url": "https://access.redhat.com/security/cve/CVE-2026-54886"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48860",
"url": "https://access.redhat.com/security/cve/CVE-2026-48860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48858",
"url": "https://access.redhat.com/security/cve/CVE-2026-48858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48855",
"url": "https://access.redhat.com/security/cve/CVE-2026-48855"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42791",
"url": "https://access.redhat.com/security/cve/CVE-2026-42791"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42790",
"url": "https://access.redhat.com/security/cve/CVE-2026-42790"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42789",
"url": "https://access.redhat.com/security/cve/CVE-2026-42789"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-49759",
"url": "https://access.redhat.com/security/cve/CVE-2026-49759"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63160.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-09-21T11:31:27+00:00",
"generator": {
"date": "2026-09-21T11:31:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:63160",
"initial_release_date": "2026-09-03T12:01:09+00:00",
"revision_history": [
{
"date": "2026-09-03T12:01:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-17T19:19:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T11:31:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang27-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-asn1@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-common_test@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-compiler@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-crypto@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-debugger@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-dialyzer@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-diameter@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-edoc@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-eldap@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-erl_interface@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-erts@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-et@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-eunit@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-examples@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-ftp@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-gdb-tools@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-inets@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-jinterface@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-kernel@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-megaco@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-mnesia@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-observer@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-odbc@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-os_mon@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-parsetools@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-public_key@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-reltool@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-runtime_tools@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-sasl@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-snmp@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-ssh@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-ssl@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-stdlib@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-syntax_tools@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-tftp@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-tools@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-wx@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"product": {
"name": "erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"product_id": "erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-xmerl@27.3.4.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang27-0:27.3.4.17-1.hum1@src",
"product": {
"name": "erlang27-0:27.3.4.17-1.hum1@src",
"product_id": "erlang27-0:27.3.4.17-1.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27@27.3.4.17-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang27-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-asn1@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-common_test@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-compiler@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-crypto@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-debugger@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-dialyzer@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-diameter@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-edoc@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-eldap@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-erl_interface@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-erts@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-et@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-eunit@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-examples@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-ftp@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-gdb-tools@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-inets@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-jinterface@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-kernel@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-megaco@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-mnesia@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-observer@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-odbc@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-os_mon@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-parsetools@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-public_key@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-reltool@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-runtime_tools@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-sasl@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-snmp@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-ssh@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-ssl@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-stdlib@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-syntax_tools@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-tftp@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-tools@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-wx@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64",
"product": {
"name": "erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64",
"product_id": "erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang27-xmerl@27.3.4.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-0:27.3.4.17-1.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src"
},
"product_reference": "erlang27-0:27.3.4.17-1.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-asn1-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-asn1-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-common_test-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-common_test-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-compiler-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-compiler-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-crypto-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-crypto-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-debugger-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-debugger-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-diameter-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-diameter-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-edoc-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-edoc-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-eldap-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-eldap-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-erts-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-erts-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-et-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-et-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-eunit-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-eunit-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-examples-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-examples-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-ftp-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-ftp-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-inets-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-inets-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-kernel-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-kernel-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-megaco-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-megaco-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-observer-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-observer-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-odbc-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-odbc-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-public_key-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-public_key-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-reltool-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-reltool-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-sasl-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-sasl-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-snmp-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-snmp-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-ssh-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-ssh-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-ssl-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-ssl-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-tftp-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-tftp-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-tools-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-tools-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-wx-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-wx-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64"
},
"product_reference": "erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
},
"product_reference": "erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-42789",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T15:10:36.175135+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP\u0027s public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where Erlang OTP\u0027s `public_key` module improperly validates certificate chains. A remote attacker with an existing end-entity certificate from a trusted Certificate Authority can forge new leaf certificates, leading to compromised server or client identity verification in TLS/mTLS connections. This impacts applications within Red Hat OpenStack Platform and Community Projects that utilize the default verifier in the OTP `ssl` application. Because an attacker must be able to create or locate a certificate with specific attributes, Red Hat assesses the impact of this vulnerability as Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42789"
},
{
"category": "external",
"summary": "RHBZ#2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42789.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42789.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db",
"url": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd",
"url": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42789",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42789"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T12:23:06.355000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation"
},
{
"cve": "CVE-2026-42790",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T17:02:53.354271+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482286"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Erlang OTP\u0027s public_key module allows a subordinate Certificate Authority to bypass DNS name constraints during TLS hostname verification. An attacker could exploit this by issuing a specially crafted certificate lacking a Subject Alternative Name but containing a malicious CommonName, enabling hostname spoofing and potential man-in-the-middle attacks against Red Hat products acting as Erlang OTP TLS clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42790"
},
{
"category": "external",
"summary": "RHBZ#2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42790.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42790.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759",
"url": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a",
"url": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457",
"url": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42790",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42790"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T15:09:01.860000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "Ensure all TLS certificates used in the deployment include Subject Alternative Name (SAN) extensions with the appropriate DNS entries. Certificates relying solely on the CommonName (CN) field for hostname identification are susceptible to this bypass. For Erlang applications, the verify_fun option in the ssl module can be configured to reject peer certificates missing the subjectAltName extension.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing"
},
{
"cve": "CVE-2026-42791",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T15:03:31.911268+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481950"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP\u0027s public_key application, specifically in the Online Certificate Status Protocol (OCSP) response verification. A remote attacker who has obtained the private key of an expired Certificate Authority (CA)-designated OCSP responder certificate can forge OCSP responses. This allows a malicious server to present a revoked Transport Layer Security (TLS) certificate, which a client would then accept as valid, leading to an authentication bypass. This vulnerability can also affect applications directly using the public_key:pkix_ocsp_validate/5 API, potentially enabling authentication bypass with revoked client certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP: Authentication bypass due to improper OCSP certificate validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Low rather than Important because exploitation requires the attacker to possess the private key of an expired CA-designated OCSP responder certificate, and the affected OCSP stapling feature is not enabled by default in the Erlang ssl application. The direct impact is limited to integrity \u2014 a forged OCSP response is accepted, allowing a revoked certificate to appear valid.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42791"
},
{
"category": "external",
"summary": "RHBZ#2481950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481950"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42791",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42791"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42791.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42791.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/7995f1fdaee3da569bb810358ce0f546471d169b",
"url": "https://github.com/erlang/otp/commit/7995f1fdaee3da569bb810358ce0f546471d169b"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/b3870e02405c709a872b01ba6086065620cdfe76",
"url": "https://github.com/erlang/otp/commit/b3870e02405c709a872b01ba6086065620cdfe76"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-cjxj-wj6x-3fff",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-cjxj-wj6x-3fff"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42791",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42791"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T12:23:13.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "For TLS clients using the Erlang ssl application, disable OCSP stapling by setting {stapling, no_staple} in the client options, or switch to CRL-based revocation checking with {crl_check, true}.\n\nFor applications calling public_key:pkix_ocsp_validate/5 directly, validate the responder certificate\u0027s validity period in application code before calling the function.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "erlang: Erlang OTP: Authentication bypass due to improper OCSP certificate validation"
},
{
"cve": "CVE-2026-48855",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-10T16:01:35.559276+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487603"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP ssh, specifically within the `ssh_sftpd` module. An authenticated SFTP client can exploit this vulnerability by creating a symbolic link (symlink) inside a restricted directory (chroot) that points to the root directory. When the client reads this symlink, the `ssh_sftpd` module incorrectly reveals the absolute filesystem path of the SFTP root directory and any symlink targets, rather than the expected restricted path. This exposure of sensitive information allows for file discovery, but does not grant access to file contents, credentials, or paths outside the root directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP ssh: Information disclosure via symlink resolution in SFTP",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48855"
},
{
"category": "external",
"summary": "RHBZ#2487603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48855",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48855"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48855",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48855"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-48855.html",
"url": "https://cna.erlef.org/cves/CVE-2026-48855.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/8f4224a0d2676b0653d2c71a889a956e8c2c62d6",
"url": "https://github.com/erlang/otp/commit/8f4224a0d2676b0653d2c71a889a956e8c2c62d6"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-pv7g-pjrq-x2fh",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-pv7g-pjrq-x2fh"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-48855",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-48855"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-06-10T14:35:49.683000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "erlang: Erlang OTP ssh: Information disclosure via symlink resolution in SFTP"
},
{
"cve": "CVE-2026-48858",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-06-10T16:00:59.601093+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487593"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang/OTP\u0027s FTP (File Transfer Protocol) client, specifically within the ftp_internal module. A remote attacker, by operating a malicious or compromised FTP server, could exploit an unvalidated IP address in the server\u0027s passive mode (PASV) response. This vulnerability, known as Server-Side Request Forgery (SSRF), allows the attacker to redirect the client\u0027s data connection to an arbitrary internal host and port. This can lead to information disclosure from internal systems or the sending of sensitive data to unintended third-party hosts, enabling FTP bounce attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: erlang-inets: erlang-ftp: Erlang/OTP ftp: Server-Side Request Forgery (SSRF) via unvalidated PASV response IP address",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity flaw in the Erlang/OTP FTP client allows a remote attacker to perform Server-Side Request Forgery (SSRF) by redirecting data connections to arbitrary internal hosts. This occurs when the client connects to a malicious or compromised FTP server that provides an unvalidated IP address in its passive mode response, potentially leading to information disclosure or data exfiltration from internal systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48858"
},
{
"category": "external",
"summary": "RHBZ#2487593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48858"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-48858.html",
"url": "https://cna.erlef.org/cves/CVE-2026-48858.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/2691a806231ffd0490a8a9e20500dec0c7e73727",
"url": "https://github.com/erlang/otp/commit/2691a806231ffd0490a8a9e20500dec0c7e73727"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/521bcfa24407ee8cb5614823cf905c37ea3aa605",
"url": "https://github.com/erlang/otp/commit/521bcfa24407ee8cb5614823cf905c37ea3aa605"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-24cv-hwgr-37fq",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-24cv-hwgr-37fq"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-48858",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-48858"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-06-10T14:35:45.466000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict network access for systems using the Erlang/OTP FTP client to only trusted FTP servers. Implement firewall rules to limit outbound connections from Erlang/OTP applications to known, legitimate FTP server IP addresses and ports. If the Erlang/OTP `ftp` application is not required, consider disabling or removing it to eliminate the attack surface.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "erlang: erlang-inets: erlang-ftp: Erlang/OTP ftp: Server-Side Request Forgery (SSRF) via unvalidated PASV response IP address"
},
{
"cve": "CVE-2026-48860",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-06-10T16:01:14.943760+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487597"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang/OTP. The `inet_tls_dist:check_ip/1` function, responsible for enforcing a LAN allowlist for Erlang distribution over TLS, incorrectly uses `inet:sockname/1` instead of `inet:peername/1` to obtain the peer\u0027s IP address. This allows an unauthenticated attacker, possessing a CA-signed TLS certificate, to bypass the LAN restriction. Consequently, the attacker can gain full Erlang distribution access to the node, enabling remote procedure calls and arbitrary code loading.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang/OTP: Authentication bypass allows arbitrary code execution via improper IP address validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48860"
},
{
"category": "external",
"summary": "RHBZ#2487597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487597"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48860"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-48860.html",
"url": "https://cna.erlef.org/cves/CVE-2026-48860.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/0209a6df65d605552b378273027b3968b35f26b4",
"url": "https://github.com/erlang/otp/commit/0209a6df65d605552b378273027b3968b35f26b4"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-gp7x-mfv6-52cv",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-gp7x-mfv6-52cv"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-48860",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-48860"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-06-10T14:35:49.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Erlang distribution port (default 4369) to only trusted hosts and networks using firewall rules. If Erlang distribution over TLS is not essential for your deployment, consider disabling it.\n\nExample using `firewalld` to limit access to port 4369:\n```bash\nsudo firewall-cmd --permanent --add-rich-rule=\u0027rule family=\"ipv4\" port port=\"4369\" protocol=\"tcp\" source address=\"\u003cTRUSTED_IP_OR_NETWORK\u003e\" accept\u0027\nsudo firewall-cmd --reload\n```\nReplace `\u003cTRUSTED_IP_OR_NETWORK\u003e` with the specific IP address or network range that should be allowed to access the Erlang distribution. This may impact the functionality of services relying on Erlang distribution from untrusted networks.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "erlang: Erlang/OTP: Authentication bypass allows arbitrary code execution via improper IP address validation"
},
{
"cve": "CVE-2026-49759",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-10T16:01:51.030849+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487607"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP (Open Telecom Platform) erts, specifically within the `inet_drv` component. An unauthenticated remote attacker can exploit a stack-based buffer overflow vulnerability by sending a specially crafted Stream Control Transmission Protocol (SCTP) ERROR chunk. This can lead to a Denial of Service (DoS) by crashing the BEAM virtual machine. Additionally, this flaw may result in limited information disclosure by leaking small portions of Erlang VM memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Erlang OTP\u0027s `inet_drv` component, which is utilized in Red Hat OpenStack Platform. An unauthenticated remote attacker can trigger a stack-based buffer overflow by sending a specially crafted SCTP ERROR chunk to a listening port, leading to a denial of service of the BEAM virtual machine. While limited information disclosure is also possible, the primary impact is system instability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-49759"
},
{
"category": "external",
"summary": "RHBZ#2487607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487607"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-49759",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49759"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49759",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49759"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-49759.html",
"url": "https://cna.erlef.org/cves/CVE-2026-49759.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/3983d495284331c121f600a80bac9fcf4e16381e",
"url": "https://github.com/erlang/otp/commit/3983d495284331c121f600a80bac9fcf4e16381e"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-6f4f-chj5-5g97",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-6f4f-chj5-5g97"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-49759",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-49759"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-06-10T14:35:38.838000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk"
},
{
"cve": "CVE-2026-54886",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-02T17:01:44.836754+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496623"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Erlang OTP ssh (Secure Shell) component, specifically within its SFTP (SSH File Transfer Protocol) module. An authenticated SFTP user can exploit this vulnerability by sending specially crafted extended data on an open channel. This action triggers an infinite loop in the ssh_sftpd process, rendering the SFTP channel permanently unresponsive and leading to a denial of service (DoS). The affected process will continuously consume CPU resources and accumulate unbounded memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP ssh: Denial of Service via infinite loop in SFTP channel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial-of-service vulnerability was found in the ssh_sftpd module of Erlang/OTP. An authenticated SFTP user can send SSH_MSG_CHANNEL_EXTENDED_DATA messages that trigger an infinite tail-recursive loop in the ssh_sftpd:handle_data/4 function, rendering the targeted SFTP channel permanently unresponsive, with secondary CPU and memory consumption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54886"
},
{
"category": "external",
"summary": "RHBZ#2496623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54886"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-54886.html",
"url": "https://cna.erlef.org/cves/CVE-2026-54886.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/eaf9550b8ad4738b81149d3f617102d980c6dd18",
"url": "https://github.com/erlang/otp/commit/eaf9550b8ad4738b81149d3f617102d980c6dd18"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-7wp4-pc27-2vj9",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-7wp4-pc27-2vj9"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-54886",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-54886"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-07-02T16:06:20.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "Set the max_channels daemon option to a finite value instead of the default \u0027infinity\u0027 to limit the number of channels an authenticated user can open per connection, reducing the amplification potential of this vulnerability.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "erlang: Erlang OTP ssh: Denial of Service via infinite loop in SFTP channel"
},
{
"cve": "CVE-2026-54891",
"cwe": {
"id": "CWE-924",
"name": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel"
},
"discovery_date": "2026-07-02T17:01:51.871160+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496625"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang\u0027s SSL (Secure Sockets Layer) component. A network-positioned attacker can exploit this vulnerability by injecting unauthenticated plaintext data into a client\u0027s TLS (Transport Layer Security) handshake. The client application may then process this injected data as if it were legitimate, authenticated server data. This could lead to the blind injection of unauthenticated bytes, potentially impacting the integrity of the communication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang SSL: Unauthenticated data injection during TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54891"
},
{
"category": "external",
"summary": "RHBZ#2496625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54891"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54891",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54891"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-54891.html",
"url": "https://cna.erlef.org/cves/CVE-2026-54891.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/07d2d0e93f6aaf7652a81e8df075fc1728da5e96",
"url": "https://github.com/erlang/otp/commit/07d2d0e93f6aaf7652a81e8df075fc1728da5e96"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-gf6r-99xw-6qg6",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-gf6r-99xw-6qg6"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-54891",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-54891"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-07-02T16:06:30.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "erlang: Erlang SSL: Unauthenticated data injection during TLS handshake"
},
{
"cve": "CVE-2026-55952",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-07-02T17:01:56.436368+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496626"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang/OTP\u0027s SSL (Secure Sockets Layer) application. An unauthenticated remote attacker can send a specially crafted ClientHello message to a TLS 1.3 server with session tickets enabled. This can permanently disrupt the server\u0027s ability to handle session tickets, leading to a Denial of Service (DoS) for new TLS 1.3 connections until the SSL application is restarted. This vulnerability is caused by improper validation of PSK (Pre-Shared Key) identity and binder list lengths.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang/OTP: Denial of Service in TLS 1.3 session ticket handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Erlang/OTP ssl application. The TLS 1.3 session ticket handler does not validate that PSK identity and binder lists have equal length, allowing an unauthenticated attacker to crash session ticket handling via a crafted ClientHello, making TLS 1.3 unusable until the ssl application is restarted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55952"
},
{
"category": "external",
"summary": "RHBZ#2496626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55952"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-55952.html",
"url": "https://cna.erlef.org/cves/CVE-2026-55952.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/2c3e599797644310e5d4aa39c7193420e59dadff",
"url": "https://github.com/erlang/otp/commit/2c3e599797644310e5d4aa39c7193420e59dadff"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/9b5437c72fa3403a75c1aba28e5c532bc191c662",
"url": "https://github.com/erlang/otp/commit/9b5437c72fa3403a75c1aba28e5c532bc191c662"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/e77823e6d980b2ec0b4fe4ea3f2d098ca239e3ce",
"url": "https://github.com/erlang/otp/commit/e77823e6d980b2ec0b4fe4ea3f2d098ca239e3ce"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-8c57-44c9-pc59",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-8c57-44c9-pc59"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-55952",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-55952"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-07-02T16:06:08.474000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T12:01:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63160"
},
{
"category": "workaround",
"details": "Restarting the ssl application restores TLS 1.3 functionality after a crash. TLS 1.2 connections are not affected. Disabling TLS 1.3 session tickets (stateful and stateless) eliminates the attack surface.",
"product_ids": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@src",
"Red Hat Hardened Images:erlang27-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-asn1-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-common_test-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-compiler-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-crypto-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-debugger-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-dialyzer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-diameter-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-edoc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eldap-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erl_interface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-erts-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-et-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-eunit-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-examples-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-gdb-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-inets-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-jinterface-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-kernel-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-megaco-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-mnesia-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-observer-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-odbc-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-os_mon-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-parsetools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-public_key-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-reltool-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-runtime_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-sasl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-snmp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssh-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-ssl-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-stdlib-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-syntax_tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tftp-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-tools-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-wx-0:27.3.4.17-1.hum1@x86_64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@aarch64",
"Red Hat Hardened Images:erlang27-xmerl-0:27.3.4.17-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang/OTP: Denial of Service in TLS 1.3 session ticket handling"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…