[Git][security-tracker-team/security-tracker][master] Add CVE-2026-94200/erlang

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
432e9557 by Salvatore Bonaccorso at 2026-10-15T09:26:29+02:00
Add CVE-2026-94200/erlang

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -417,7 +417,14 @@ CVE-2026-95101 (Description NGINX Plus and NGINX Open Source have a vulnerabilit
 CVE-2026-94348 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an I ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-94200 (Improper Validation of Consistency within Input vulnerability in Erlan ...)
-	TODO: check
+	- erlang <unfixed>
+	NOTE: https://github.com/erlang/otp/security/advisories/GHSA-m5mh-q53w-67jq
+	NOTE: https://cna.erlef.org/cves/CVE-2026-94200.html
+	NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-94200
+	NOTE: Introduced with: https://github.com/erlang/otp/commit/0abe6f66db0d295cd06b0efab3bdb3caa2803930 (OTP-23.3)
+	NOTE: Fixed by: https://github.com/erlang/otp/commit/66febc190e6dc42a5c4aedbfe250bf9a2edc2d5e (OTP-29.1.2)
+	NOTE: Fixed by: https://github.com/erlang/otp/commit/00a333bcf2800b69f540369b54167e897dae7219 (OTP-28.5.0.8)
+	NOTE: Fixed by: https://github.com/erlang/otp/commit/cd0334854bf3ef56dc16f9fb728efe88fb05c4ac (OTP-27.3.4.19)
 CVE-2026-94197 (An authentication and authorization bypass vulnerability exists in F5  ...)
 	NOT-FOR-US: F5
 CVE-2026-93683 (A flaw was found in the DPDK vhost library. When handling a virtio ind ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/432e95579e09cf30bfb1ee866aefda0b9d61c972

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/432e95579e09cf30bfb1ee866aefda0b9d61c972
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/6950c72d/attachment.htm>