[Git][security-tracker-team/security-tracker][master] Add CVE-2026-89422/erlang

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
485fcf8e by Salvatore Bonaccorso at 2026-09-23T05:56:09+02:00
Add CVE-2026-89422/erlang

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -370,7 +370,14 @@ CVE-2026-90462 (A flaw was found in SSSD. When configured with the LDAP access p
 CVE-2026-8849 (Use After Free vulnerability in RTI Connext Professional (Security Plu ...)
 	NOT-FOR-US: RTI Connext
 CVE-2026-89422 (Key Exchange without Entity Authentication vulnerability in Erlang/OTP ...)
-	TODO: check
+	- erlang <unfixed>
+	NOTE: https://github.com/erlang/otp/security/advisories/GHSA-rgxr-4g4w-j875
+	NOTE: https://cna.erlef.org/cves/CVE-2026-89422.html
+	NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-89422
+	NOTE: Introduced with: https://github.com/erlang/otp/commit/21b8a1b0ad0adf200682b3854bc50114ab2b8c62 (OTP-22.2)
+	NOTE: Fixed by: https://github.com/erlang/otp/commit/afec5156361bb50d3607c7c1a453c19b9149b324 (OTP-29.1.1)
+	NOTE: Fixed by: https://github.com/erlang/otp/commit/98c66c858113949c4262d26cd7d426c4b09d2b35 (OTP-28.5.0.7)
+	NOTE: Fixed by: https://github.com/erlang/otp/commit/fd1d9d07fc92ec0d59f96dfb66182195882bb7dd (OTP-27.3.4.18)
 CVE-2026-89420 (Improper Validation of Specified Quantity in Input in ZenHive mpp allo ...)
 	NOT-FOR-US: ZenHive mpp
 CVE-2026-89407 (NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-valid ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/485fcf8efb318a1b0d89e968cf1afc18978d5797

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/485fcf8efb318a1b0d89e968cf1afc18978d5797
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260923/06ba1627/attachment-0001.htm>