CVE-2026-32147 affecting package erlang for versions less than 26.2.5.20-1

CVE-2026-32147 affecting package erlang for versions less than 26.2.5.20-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32147

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to modify file attributes outside the configured chroot directory. The SFTP daemon sshsftpd stores the raw, user-supplied path in file...