[SECURITY] Fedora 44 Update: erlang-cowlib-2.17.1-1.fc44

Support library for manipulating Web protocols...

[SECURITY] Fedora 44 Update: erlang-gun-2.4.1-1.fc44

Erlang HTTP client with support for HTTP/1.1, HTTP/2, Websocket and more...

[SECURITY] Fedora 44 Update: erlang-cowboy-2.16.1-1.fc44

Small, fast, modular HTTP server written in Erlang...

Fedora 44 : erlang-cowboy / erlang-cowlib / erlang-gun (2026-c17ea7a74d)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-c17ea7a74d advisory. Gun ver. 2.4.1 and its dependencies ---- New erlang-gun Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : erlang-cowboy / erlang-cowlib / erlang-gun (2026-2aa86d411f)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-2aa86d411f advisory. Gun ver. 2.4.1 and its dependencies ---- New erlang-gun Tenable has extracted the preceding description block directly from the Fedora security...

Photon OS 5.0: Erlang PHSA-2026-5.0-0883

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0883. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2

CVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...

CVE-2026-48855 affecting package erlang for versions less than 26.2.5.21-2

CVE-2026-48855 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...

CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2

CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...

CVE-2026-49759 affecting package erlang for versions less than 26.2.5.21-2

CVE-2026-49759 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...

CVE-2026-48858 affecting package erlang for versions less than 26.2.5.21-2

CVE-2026-48858 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...

CVE-2026-48860 affecting package erlang for versions less than 26.2.5.21-2

CVE-2026-48860 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...

CVE-2026-48860

A flaw was found in Erlang/OTP. The inettlsdist:checkip/1 function, responsible for enforcing a LAN allowlist for Erlang distribution over TLS, incorrectly uses inet:sockname/1 instead of inet:peername/1 to obtain the peer's IP address. This allows an unauthenticated attacker, possessing a...

CVE-2026-49759

A flaw was found in Erlang OTP Open Telecom Platform erts, specifically within the inetdrv component. An unauthenticated remote attacker can exploit a stack-based buffer overflow vulnerability by sending a specially crafted Stream Control Transmission Protocol SCTP ERROR chunk. This can lead to a...

Important Photon OS Security Update - PHSA-2026-5.0-0883

Updates of 'libpng', 'erlang' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0883

Updates of 'libpng', 'erlang' packages of Photon OS have been released...

CVE-2026-48858

A flaw was found in Erlang/OTP's FTP File Transfer Protocol client, specifically within the ftpinternal module. A remote attacker, by operating a malicious or compromised FTP server, could exploit an unvalidated IP address in the server's passive mode PASV response. This vulnerability, known as...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code...

EEF-CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc

Summary Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote...

CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows into a call site that invokes it, achieve remote code...