Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
485fcf8e by Salvatore Bonaccorso at 2026-09-23T05:56:09+02:00
Add CVE-2026-89422/erlang
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -370,7 +370,14 @@ CVE-2026-90462 (A flaw was found in SSSD. When configured
with the LDAP access p
CVE-2026-8849 (Use After Free vulnerability in RTI Connext Professional
(Security Plu ...)
NOT-FOR-US: RTI Connext
CVE-2026-89422 (Key Exchange without Entity Authentication vulnerability in
Erlang/OTP ...)
- TODO: check
+ - erlang <unfixed>
+ NOTE:
https://github.com/erlang/otp/security/advisories/GHSA-rgxr-4g4w-j875
+ NOTE: https://cna.erlef.org/cves/CVE-2026-89422.html
+ NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-89422
+ NOTE: Introduced with:
https://github.com/erlang/otp/commit/21b8a1b0ad0adf200682b3854bc50114ab2b8c62
(OTP-22.2)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/afec5156361bb50d3607c7c1a453c19b9149b324
(OTP-29.1.1)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/98c66c858113949c4262d26cd7d426c4b09d2b35
(OTP-28.5.0.7)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/fd1d9d07fc92ec0d59f96dfb66182195882bb7dd
(OTP-27.3.4.18)
CVE-2026-89420 (Improper Validation of Specified Quantity in Input in ZenHive
mpp allo ...)
NOT-FOR-US: ZenHive mpp
CVE-2026-89407 (NumberInput.looksLikeValidNumber() in FasterXML jackson-core
pre-valid ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/485fcf8efb318a1b0d89e968cf1afc18978d5797
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/485fcf8efb318a1b0d89e968cf1afc18978d5797
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
