tocsin

Debian/erlang: medium 4.8

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTL

Action: Upgrade erlang to 1:27.3.4.1+dfsg-1+deb13u3 or later.

Affected

introducedfixedlast affected
01:27.3.4.1+dfsg-1+deb13u3-

Fixed versions

1:27.3.4.1+dfsg-1+deb13u3

Sources

published · modified · JSON