Debian/erlang: high 7.4
The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The clie
Action: Upgrade erlang to 1:27.3.4.1+dfsg-1+deb13u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:27.3.4.1+dfsg-1+deb13u3 | - |
Fixed versions
| 1:27.3.4.1+dfsg-1+deb13u3 |
Sources
- osv: DEBIAN-CVE-2026-55953#Debian:13/erlang
- https://security-tracker.debian.org/tracker/CVE-2026-55953
published · modified · JSON