Debian/erlang: critical 9.8
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.
Action: Upgrade erlang to 1:24.3.4.5+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:24.3.4.5+dfsg-1 | - |
Fixed versions
| 1:24.3.4.5+dfsg-1 |
Sources
published · modified · JSON