• [SECURITY] [DSA 5906-1] erlang security update

    From Moritz Muehlenhoff@21:1/5 to All on Sun Apr 20 11:30:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5906-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    April 20, 2025 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : erlang
    CVE ID : CVE-2023-48795 CVE-2025-26618 CVE-2025-30211
    CVE-2025-32433

    Several vulnerabilities were discovered in the Erlang/OTP implementation
    of the SSH protocol, which may result in denial of service or the
    execution of arbitrary code.

    For the stable distribution (bookworm), these problems have been fixed in version 1:25.2.3+dfsg-1+deb12u1.

    We recommend that you upgrade your erlang packages.

    For the detailed security status of erlang please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/erlang

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmgEvPUACgkQEMKTtsN8 Tja2cA/8C1U+nWgZtUC/jU7TAE+YzrjHpsl782LfjbvK/2PTvgwO5XqFFDAacslC TlldcWRnwi9Rn3ENCmO/KWEwVqq8n3Ge4KmG16DYYgGdXrHUR/wEL8H8BwMMkjPl ++dSHGeQ/UkDPZo2zcXkeetrYbF65q1nEx3Ig6av2YISTDXdTm+mYk8yDbWpkk00 dw/xHuDy8NC77ScMLVriuqla0rhF9/CP8R/Gq4HX24W5IIvQhJJNK3XTdHZGSnCz RVTKUh2SCZ0rrgqDVtD8esjkzX1N+zQ+3A3AIEPI0BzBgs9eOKjTeeYwE3R8hUDr c2yQwNfo67c8L/Qh5fvg2NrRr5Zol8YaRNQ2FF4pvHE+yDJgreX23EXiPLOKA0kW xVOsQJl/LdUx7xL7fh1wvktWvwDbH1lGrBcpJEiD5jZmfyN+iHHZBZLZzg7nbC+v NOCLvglTFHpmwZv4UNOsjIf0qT3rwDv+D/vdsp2ZSfKHC8PcHPUj6rLN1iTCCQTk br+IPy7JPY022n7q+DKYQV1QpppYf2yy6iLtLIIdl9DpMJ2yDSWTGnki57ftSdZR T66zvs2IRc9+ImV4ntjGiSaa8Rb0uFDH7tcAipLvyOPv/YT5dKF2dw5+TbdcKJAE QONxN/o0MbIAnvVLmDfNjjll8ks62+4z5gSShryrkXB0PHpf9PU=
    =SdPB
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)