[Git][security-tracker-team/security-tracker][master] Add CVE-2025-48038/erlang

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a98aedd by Salvatore Bonaccorso at 2025-09-11T23:01:06+02:00
Add CVE-2025-48038/erlang

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36,7 +36,11 @@ CVE-2025-48040 (Uncontrolled Resource Consumption vulnerability in Erlang OTP ss
 CVE-2025-48039 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
 	TODO: check
 CVE-2025-48038 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
-	TODO: check
+	- erlang <unfixed>
+	NOTE: https://github.com/erlang/otp/security/advisories/GHSA-pvj7-9652-7h9r
+	NOTE: https://github.com/erlang/otp/pull/10156
+	NOTE: https://github.com/erlang/otp/commit/4e3bf86777ab3db7220c11d8ddabf15970ddd10a (OTP-27.3.4.3, OTP-28.0.3)
+	NOTE: https://github.com/erlang/otp/commit/f09e0201ff701993dc24a08f15e524daf72db42f (OTP-26.2.5.15)
 CVE-2025-43790 (Insecure Direct Object Reference (IDOR) vulnerability in Liferay Porta ...)
 	NOT-FOR-US: Liferay
 CVE-2025-43782 (Insecure Direct Object Reference (IDOR) vulnerability in Liferay Porta ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a98aedd938928a1d476209bb2d471abcce52a85

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a98aedd938928a1d476209bb2d471abcce52a85
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250911/85296a52/attachment.htm>