gpp_maybe Security update for erlang

SUSE-SLE-Module-Server-Applications-15-SP7-2026-1714

This update for erlang fixes the following issues: - CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal (bsc#1258663). - CVE-2026-23941: HTTP Request Smuggling in Erlang OTP (bsc#1259687). - CVE-2026-23942: path traversal vulnerability in Erlang OTP (bsc#1259681). - CVE-2026-23943: denial of service due to improper handling of highly compressed data in Erlang OTP ssh (bsc#1259682). - CVE-2026-28808: incorrect authorization can lead to unauthenticated access to protected CGI scripts (bsc#1261728).

Release Date

May 6 2026
References

Bugzilla: 1258663, 1259681, 1259682, 1259687, 1261728
CVEs: CVE-2026-21620, CVE-2026-23941, CVE-2026-23942, CVE-2026-23943, CVE-2026-28808
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.7 s390x

Packages

erlang
General-purpose programming language and runtime environment

23.3.4.19-150300.3.32.1 lock rpm lock src

erlang-epmd
Erlang Port Mapper daemon

23.3.4.19-150300.3.32.1 lock rpm

Server Applications Module 15.7 x86_64

Packages

erlang
General-purpose programming language and runtime environment

23.3.4.19-150300.3.32.1 lock rpm lock src

erlang-epmd
Erlang Port Mapper daemon

23.3.4.19-150300.3.32.1 lock rpm

Server Applications Module 15.7 ppc64le

Packages

erlang
General-purpose programming language and runtime environment

23.3.4.19-150300.3.32.1 lock rpm lock src

erlang-epmd
Erlang Port Mapper daemon

23.3.4.19-150300.3.32.1 lock rpm

Server Applications Module 15.7 aarch64

Packages

erlang
General-purpose programming language and runtime environment

23.3.4.19-150300.3.32.1 lock rpm lock src

erlang-epmd
Erlang Port Mapper daemon

23.3.4.19-150300.3.32.1 lock rpm