CVE-2026-54887 affecting package erlang for versions less than 26.2.5.21-5

CVE-2026-54887 affecting package erlang for versions less than 26.2.5.21-5. A patched version of the package is available...

CVE-2026-54887

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...