[Git][security-tracker-team/security-tracker][master] erlang fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Mon Sep 15 17:25:42 BST 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3d75910d by Moritz Muehlenhoff at 2025-09-15T18:25:20+02:00
erlang fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -451,7 +451,7 @@ CVE-2025-58065 (Flask-AppBuilder is an application development framework. Prior
CVE-2025-56556 (An issue was discovered in Subrion CMS 4.2.1, allowing authenticated a ...)
NOT-FOR-US: Subrion CMS
CVE-2025-48041 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- - erlang <unfixed> (bug #1115090)
+ - erlang 1:27.3.4.3+dfsg-1 (bug #1115090)
[trixie] - erlang <no-dsa> (Minor issue)
[bookworm] - erlang <no-dsa> (Minor issue)
NOTE: https://github.com/erlang/otp/security/advisories/GHSA-79c4-cvv7-4qm3
@@ -459,7 +459,7 @@ CVE-2025-48041 (Allocation of Resources Without Limits or Throttling vulnerabili
NOTE: https://github.com/erlang/otp/commit/5f9af63eec4657a37663828d206517828cb9f288 (OTP-27.3.4.3, OTP-28.0.3)
NOTE: https://github.com/erlang/otp/commit/d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401 (OTP-26.2.5.15)
CVE-2025-48040 (Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh ...)
- - erlang <unfixed> (bug #1115091)
+ - erlang 1:27.3.4.3+dfsg-1 (bug #1115091)
[trixie] - erlang <no-dsa> (Minor issue)
[bookworm] - erlang <no-dsa> (Minor issue)
NOTE: https://github.com/erlang/otp/security/advisories/GHSA-h7rg-6rjg-4cph
@@ -467,7 +467,7 @@ CVE-2025-48040 (Uncontrolled Resource Consumption vulnerability in Erlang OTP ss
NOTE: https://github.com/erlang/otp/commit/7cd7abb7e19e16b027eaee6a54e1f6fbbe21181a (OTP-27.3.4.3, OTP-28.0.3)
NOTE: https://github.com/erlang/otp/commit/548f1295d86d0803da884db8685cc16d461d0d5a (OTP-26.2.5.15)
CVE-2025-48039 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- - erlang <unfixed> (bug #1115092)
+ - erlang 1:27.3.4.3+dfsg-1 (bug #1115092)
[trixie] - erlang <no-dsa> (Minor issue)
[bookworm] - erlang <no-dsa> (Minor issue)
NOTE: https://github.com/erlang/otp/security/advisories/GHSA-rr5p-6856-j7h8
@@ -475,7 +475,7 @@ CVE-2025-48039 (Allocation of Resources Without Limits or Throttling vulnerabili
NOTE: https://github.com/erlang/otp/commit/c242e6458967e9514bea351814151695807a54ac (OTP-27.3.4.3, OTP-28.0.3)
NOTE: https://github.com/erlang/otp/commit/043ee3c943e2977c1acdd740ad13992fd60b6bf0 (OTP-26.2.5.15)
CVE-2025-48038 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- - erlang <unfixed> (bug #1115093)
+ - erlang 1:27.3.4.3+dfsg-1 (bug #1115093)
[trixie] - erlang <no-dsa> (Minor issue)
[bookworm] - erlang <no-dsa> (Minor issue)
NOTE: https://github.com/erlang/otp/security/advisories/GHSA-pvj7-9652-7h9r
@@ -656443,7 +656443,7 @@ CVE-2016-1000110 (The CGIHandler class in Python before 2.7.12 does not protect
CVE-2016-1000109 (HHVM does not attempt to address RFC 3875 section 4.1.18 namespace con ...)
- hhvm 3.12.11+dfsg-1 (unimportant)
CVE-2016-1000107 (inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1 ...)
- - erlang <unfixed> (unimportant; bug #1115086)
+ - erlang 1:27.3.4.3+dfsg-1 (unimportant; bug #1115086)
NOTE: https://bugs.erlang.org/browse/ERL-198
NOTE: https://github.com/erlang/otp/security/advisories/GHSA-wrj5-4mmp-gvr8
NOTE: Fixed by (merge): https://github.com/erlang/otp/commit/13b092a06ab9fad685890d0e963ad8095d0f31ec (OTP-28.0.4)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d75910ddb77045026317d6273cef44fa98e9902
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d75910ddb77045026317d6273cef44fa98e9902
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250915/bad7abcb/attachment.htm>
More information about the debian-security-tracker-commits
mailing list