Debian/erlang: critical 9.8
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.
Action: Upgrade erlang to 1:24.3.4.5+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:24.3.4.5+dfsg-1 | - |
Fixed versions
| 1:24.3.4.5+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2022-37026#Debian:13/erlang
- https://security-tracker.debian.org/tracker/CVE-2022-37026
published · modified · JSON