{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"High" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"erlang security update", "category":"general", "title":"Synopsis" }, { "text":"An update for erlang is now available for openEuler-22.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson.\n\nSecurity Fix(es):\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery.\n\nThe SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of file:read_link/2 to the client without calling chroot_filename/2 to strip the backend root prefix. An authenticated SFTP client can create a symlink inside the chroot pointing to /; ssh_sftpd resolves the target to the absolute backend root and stores it on disk. Reading the symlink back via SSH_FXP_READLINK returns that absolute path, for example /data/sftp, instead of the chrooted value /.\n\nThe information disclosed is the absolute filesystem path of the SFTP root directory and of any symlink targets within it. No file contents, credentials, or access to paths outside the root directory are obtainable through this issue alone.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before 29.0.2, 28.5.0.2 and 27.3.4.13 corresponding to ssh from 3.0.1 before 6.0.1, 5.5.2.1 and 5.2.11.8.(CVE-2026-48855)\n\nSensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.\n\nThe httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary. httpc_response:redirect/2 constructs the redirected request by updating only the host field of the header record; all other fields (including authorization and proxy_authorization) are copied verbatim. The redirect target host is never compared against the original host.\n\nautoredirect defaults to true, so this affects all httpc callers that do not explicitly disable automatic redirects.\n\nAn attacker who controls a server that the victim contacts via httpc can issue a cross-origin 3xx redirect to a server they also control. The Authorization header (including Basic credentials derived from URL userinfo via httpc_request:handle_user_info/2) is forwarded to the redirect target, allowing credential theft. The same applies to the Proxy-Authorization header.\n\nThis vulnerability is associated with program files lib/inets/src/http_client/httpc_response.erl.\n\nThis issue affects OTP from 17.0 before 29.0.2, 28.5.0.2 and 27.3.4.13 corresponding to inets from 5.10 before 9.7.1, 9.6.2.2 and 9.3.2.6.(CVE-2026-48856)\n\nServer-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address.\n\nThe ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_extension=false) extracts the IP address from the server's 227 response and passes it directly to gen_tcp:connect/4 without validating it against the control connection peer address. The adjacent EPSV handlers correctly call peername(CSock) to derive the IP from the control connection, but the PASV handler does not. A malicious or compromised FTP server can redirect the client's data connection to an arbitrary internal host and port. On read operations (ftp:ls/1,2, ftp:nlist/1,2, ftp:recv/2,3), data from the redirected target is returned to the caller. On write operations (ftp:send/2,3, ftp:append/2,3), file content is sent to the redirected target. This enables SSRF against internal hosts, cloud metadata endpoints, and FTP bounce attacks against third-party hosts.\n\nThe vulnerable path is the default configuration (mode=passive, ipfamily=inet, ftp_extension=false). RFC 2577 section 3 explicitly recommends validating the PASV response IP against the control connection peer.\n\nThe ftp application is deprecated and scheduled for removal in OTP-30.\n\nThis vulnerability is associated with program files lib/inets/src/ftp/ftp_internal.erl (inets 5.10.4 through 6.5, OTP 17.4 through 20.3) and lib/ftp/src/ftp_internal.erl (ftp 1.0 and later, OTP 21.0 and later).\n\nThis issue affects OTP from OTP 17.4 before 29.0.2, 28.5.0.2 and 27.3.4.13 corresponding to inets from 5.10.4 before 7.0 and ftp from 1.0 before 1.2.6, 1.2.4.1 and 1.2.3.1.(CVE-2026-48858)\n\nStack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk.\n\nThe sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated ErlDrvTermData spec[] array without checking bounds. A remote attacker who has established an SCTP association to a listening port can send a single crafted SCTP ERROR chunk containing enough cause codes to overflow the stack buffer, crashing the VM. The attacker can only write 16-bit values interleaved with a fixed tag, so the overflow does not provide a controlled return address, limiting exploitation to Denial of Service.\n\nA crafted SCTP ERROR chunk may also leak bits and pieces of Erlang VM memory into the received error packet observed by the Erlang process. Such data is already readable by the user running the Erlang VM, so the disclosure scope is limited.\n\nThis issue affects OTP from OTP 17.0 before 27.3.4.13, 28.5.0.2 and 29.0.2, corresponding to erts from 6.0 before 15.2.7.9, 16.4.0.2 and 17.0.2.(CVE-2026-49759)\n\nStack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow.\n\nThis vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term.\n\nThe C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large integer (encoded representation exceeding 2000 characters), the buffer overflows. The overflow bytes are restricted to the ASCII values of 0-9 and A-F, which limits exploitation to Denial of Service.\n\nThe companion function ei_print_term, which prints directly to a FILE instead of a memory buffer, does not contain this bug.\n\nThis issue affects OTP from OTP 17.0 before 27.3.4.13, 28.5.0.2 and 29.0.2, corresponding to erl_interface from 3.7.16 before 5.5.2.1, 5.7.0.1 and 5.8.1.(CVE-2026-49760)\n\nObservable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory.\n\nThe SSH_FXP_REALPATH handler in ssh_sftpd calls relate_file_name/3 with Canonicalize=false, unlike every other SFTP operation handler. This allows .. components in the requested path to bypass the is_within_root/2 check without being resolved. The un-canonicalized path then enters resolve_symlinks/2, which walks up the directory tree above the configured root and issues read_link() syscalls on arbitrary filesystem paths.\n\nAn authenticated SFTP client can exploit this by sending a REALPATH request with a crafted traversal path. The server response differs depending on whether the target path exists on the host filesystem (SSH_FXP_NAME when the path resolves successfully, SSH_FX_NO_SUCH_FILE when it does not). This creates a path-existence oracle that an attacker can use to enumerate the filesystem structure outside the configured root, including the existence of sensitive files, directories, and mount points.\n\nThe vulnerability leaks only the existence of paths. No file contents, credentials, or write access are obtainable through this issue alone. The information gained may assist further attacks when combined with other vulnerabilities.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routine ssh_sftpd:handle_op/4.\n\nThis issue affects OTP from OTP 17.0 until OTP 29.0.3, 28.5.0.3, and 27.3.4.14 corresponding to ssh from 3.0.1 until 6.0.2, 5.5.2.2, and 5.2.11.9.(CVE-2026-53422)\n\nLoop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to render an SFTP channel permanently unresponsive.\n\nThe handle_data/4 function in ssh_sftpd contains a catch-all clause that accepts channel data of any type. When channel data with a non-zero type code (SSH_MSG_CHANNEL_EXTENDED_DATA) arrives with an empty pending buffer and a payload at or below the SFTP packet size limit, the clause tail-calls itself with identical arguments, creating an infinite loop.\n\nThe SFTP protocol operates exclusively on normal channel data (type 0). Extended data (non-zero type) is meaningless for SFTP and is never sent by conforming clients. However, the SSH protocol permits any channel participant to send extended data on an open channel, so an authenticated SFTP client can trigger the loop by sending SSH_MSG_CHANNEL_EXTENDED_DATA with any data_type_code and any non-empty payload at or below the size limit.\n\nThe targeted ssh_sftpd process enters an infinite tail-recursive loop. It never processes another message, its message queue grows without bound, and it can only be stopped by killing the process. BEAM's reduction-based scheduler preemption continues to function, so other processes on the node are not starved, but each stuck channel process consumes its full CPU time share continuously and accumulates unbounded message queue memory. Opening many channels amplifies the CPU and memory impact.\n\nErlang/OTP SSH configurations using the default max_channels setting (infinity) allow an authenticated user to open unlimited channels per connection, amplifying the attack without requiring multiple TCP connections or authentications.\n\nNo file contents, credentials, or write access are obtainable through this issue. The impact is limited to denial of service on targeted SFTP channels, with secondary CPU degradation and memory growth.\n\nThis vulnerability is associated with program file lib/ssh/src/ssh_sftpd.erl and program routine ssh_sftpd:handle_data/4.\n\nThis issue affects OTP from OTP 17.0 until OTP 29.0.3, 28.5.0.3, and 27.3.4.14 corresponding to ssh from 3.0.1 until 6.0.2, 5.5.2.2, and 5.2.11.9.(CVE-2026-54886)\n\nUse of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass.\n\nOn DTLS server startup, dtls_server_connection:initial_hello/3 initializes previous_cookie_secret to the empty binary (<<>>) instead of a random value. Because HMAC with an empty key is deterministic, anyone who observes the plaintext ClientHello can compute dtls_handshake:cookie(<<>>, IP, Port, Hello) and forge a valid DTLS cookie before the first rotation of the cookie secret. The DTLS cookie (RFC 6347 §4.2.1) is a denial-of-service mitigation that prevents spoofed source IPs from forcing the server to allocate state and perform expensive cryptographic operations; it is not an authentication mechanism. During the window from server startup until the first secret rotation (0 to 15 seconds), an attacker who can observe the plaintext ClientHello can bypass the source address verification, enabling DTLS handshake amplification with spoofed source addresses.\n\nThis vulnerability is associated with program file lib/ssl/src/dtls_server_connection.erl and program routine dtls_server_connection:initial_hello/3.\n\nThis issue affects OTP from OTP 20.0 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 8.2 before 11.7.3, 11.6.0.3 and 11.2.12.10.(CVE-2026-54887)\n\nImproper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data.\n\nThe function tls_gen_connection:handle_protocol_record/3 rejects APPLICATION_DATA records that arrive in pre-handshake states when the TLS endpoint acts as a server, but does not apply the same check when the endpoint acts as a client. A network-positioned attacker can send plaintext APPLICATION_DATA records to the client during the handshake. The records are buffered and, once the handshake completes successfully, delivered to the application as if they were authenticated post-handshake data. The attacker cannot observe the client's response or steer the connection, so the impact is limited to blind injection of unauthenticated bytes. The injection window is wider for TLS versions prior to TLS 1.3 than for TLS 1.3.\n\nThis vulnerability is associated with program file lib/ssl/src/tls_gen_connection.erl.\n\nThis issue affects OTP from OTP 17.0 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 5.3.4 before 11.7.3, 11.6.0.3 and 11.2.12.10. TLS 1.3 is affected starting with OTP 22.0, when TLS 1.3 support was added.(CVE-2026-54891)\n\nThe Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3:handle_pre_shared_key/3, an OfferedPreSharedKeys record with a mismatched number of identities and binders is forwarded directly to tls_server_session_ticket:use/4, which crashes the session ticket handler process.\n\nAn unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handling on that listener. New TLS 1.3 handshakes complete but subsequently crash when the server attempts to issue a session ticket, effectively making TLS 1.3 unusable on the affected listener until the ssl application is restarted. TLS 1.2 connections are not affected.\n\nThis issue affects OTP from 22.2 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 9.5 before 11.7.3, 11.6.0.3 and 11.2.12.10.(CVE-2026-55952)", "category":"general", "title":"Description" }, { "text":"An update for erlang is now available for openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"High", "category":"general", "title":"Severity" }, { "text":"erlang", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-3043", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" }, { "summary":"CVE-2026-48855", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-48855&packageName=erlang" }, { "summary":"CVE-2026-48856", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-48856&packageName=erlang" }, { "summary":"CVE-2026-48858", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-48858&packageName=erlang" }, { "summary":"CVE-2026-49759", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-49759&packageName=erlang" }, { "summary":"CVE-2026-49760", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-49760&packageName=erlang" }, { "summary":"CVE-2026-53422", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53422&packageName=erlang" }, { "summary":"CVE-2026-54886", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-54886&packageName=erlang" }, { "summary":"CVE-2026-54887", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-54887&packageName=erlang" }, { "summary":"CVE-2026-54891", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-54891&packageName=erlang" }, { "summary":"CVE-2026-55952", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55952&packageName=erlang" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48855" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48856" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48858" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49759" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49760" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53422" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54886" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54887" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54891" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55952" }, { "summary":"openEuler-SA-2026-3043 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3043.json" } ], "title":"An update for erlang is now available for openEuler-22.03-LTS-SP4", "tracking":{ "initial_release_date":"2026-07-21T09:46:27+08:00", "revision_history":[ { "date":"2026-07-21T09:46:27+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-07-21T09:46:27+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-07-21T09:46:27+08:00", "id":"openEuler-SA-2026-3043", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"openEuler-22.03-LTS-SP4", "name":"openEuler-22.03-LTS-SP4" }, "name":"openEuler-22.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-erts-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-erts-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-erts-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-et-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-et-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-et-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-examples-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-examples-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-examples-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-inets-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-inets-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-inets-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-observer-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-observer-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-observer-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-tools-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-wx-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-wx-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-wx-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "name":"erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64.rpm" }, "name":"erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-23.3.4.9-11.oe2203sp4.src.rpm", "name":"erlang-23.3.4.9-11.oe2203sp4.src.rpm" }, "name":"erlang-23.3.4.9-11.oe2203sp4.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-erts-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-erts-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-erts-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-et-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-et-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-et-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-examples-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-examples-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-examples-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-inets-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-inets-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-inets-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-observer-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-observer-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-observer-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-tools-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-wx-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-wx-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-wx-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "name":"erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64.rpm" }, "name":"erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-erts-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-erts-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-et-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-et-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-examples-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-examples-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-inets-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-inets-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-observer-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-observer-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-tools-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-tools-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-wx-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-wx-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "name":"erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-23.3.4.9-11.oe2203sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "name":"erlang-23.3.4.9-11.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-erts-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-erts-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-et-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-et-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-examples-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-examples-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-inets-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-inets-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-observer-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-observer-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-tools-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-tools-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-wx-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-wx-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64", "name":"erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-48855", "notes":[ { "text":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery.\n\nThe SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of file:read_link/2 to the client without calling chroot_filename/2 to strip the backend root prefix. An authenticated SFTP client can create a symlink inside the chroot pointing to /; ssh_sftpd resolves the target to the absolute backend root and stores it on disk. Reading the symlink back via SSH_FXP_READLINK returns that absolute path, for example /data/sftp, instead of the chrooted value /.\n\nThe information disclosed is the absolute filesystem path of the SFTP root directory and of any symlink targets within it. No file contents, credentials, or access to paths outside the root directory are obtainable through this issue alone.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before 29.0.2, 28.5.0.2 and 27.3.4.13 corresponding to ssh from 3.0.1 before 6.0.1, 5.5.2.1 and 5.2.11.8.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-48855" }, { "cve":"CVE-2026-48856", "notes":[ { "text":"Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.\n\nThe httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary. httpc_response:redirect/2 constructs the redirected request by updating only the host field of the header record; all other fields (including authorization and proxy_authorization) are copied verbatim. The redirect target host is never compared against the original host.\n\nautoredirect defaults to true, so this affects all httpc callers that do not explicitly disable automatic redirects.\n\nAn attacker who controls a server that the victim contacts via httpc can issue a cross-origin 3xx redirect to a server they also control. The Authorization header (including Basic credentials derived from URL userinfo via httpc_request:handle_user_info/2) is forwarded to the redirect target, allowing credential theft. The same applies to the Proxy-Authorization header.\n\nThis vulnerability is associated with program files lib/inets/src/http_client/httpc_response.erl.\n\nThis issue affects OTP from 17.0 before 29.0.2, 28.5.0.2 and 27.3.4.13 corresponding to inets from 5.10 before 9.7.1, 9.6.2.2 and 9.3.2.6.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-48856" }, { "cve":"CVE-2026-48858", "notes":[ { "text":"Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address.\n\nThe ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_extension=false) extracts the IP address from the server's 227 response and passes it directly to gen_tcp:connect/4 without validating it against the control connection peer address. The adjacent EPSV handlers correctly call peername(CSock) to derive the IP from the control connection, but the PASV handler does not. A malicious or compromised FTP server can redirect the client's data connection to an arbitrary internal host and port. On read operations (ftp:ls/1,2, ftp:nlist/1,2, ftp:recv/2,3), data from the redirected target is returned to the caller. On write operations (ftp:send/2,3, ftp:append/2,3), file content is sent to the redirected target. This enables SSRF against internal hosts, cloud metadata endpoints, and FTP bounce attacks against third-party hosts.\n\nThe vulnerable path is the default configuration (mode=passive, ipfamily=inet, ftp_extension=false). RFC 2577 section 3 explicitly recommends validating the PASV response IP against the control connection peer.\n\nThe ftp application is deprecated and scheduled for removal in OTP-30.\n\nThis vulnerability is associated with program files lib/inets/src/ftp/ftp_internal.erl (inets 5.10.4 through 6.5, OTP 17.4 through 20.3) and lib/ftp/src/ftp_internal.erl (ftp 1.0 and later, OTP 21.0 and later).\n\nThis issue affects OTP from OTP 17.4 before 29.0.2, 28.5.0.2 and 27.3.4.13 corresponding to inets from 5.10.4 before 7.0 and ftp from 1.0 before 1.2.6, 1.2.4.1 and 1.2.3.1.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-48858" }, { "cve":"CVE-2026-49759", "notes":[ { "text":"Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk.\n\nThe sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated ErlDrvTermData spec[] array without checking bounds. A remote attacker who has established an SCTP association to a listening port can send a single crafted SCTP ERROR chunk containing enough cause codes to overflow the stack buffer, crashing the VM. The attacker can only write 16-bit values interleaved with a fixed tag, so the overflow does not provide a controlled return address, limiting exploitation to Denial of Service.\n\nA crafted SCTP ERROR chunk may also leak bits and pieces of Erlang VM memory into the received error packet observed by the Erlang process. Such data is already readable by the user running the Erlang VM, so the disclosure scope is limited.\n\nThis issue affects OTP from OTP 17.0 before 27.3.4.13, 28.5.0.2 and 29.0.2, corresponding to erts from 6.0 before 15.2.7.9, 16.4.0.2 and 17.0.2.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.2, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-49759" }, { "cve":"CVE-2026-49760", "notes":[ { "text":"Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow.\n\nThis vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term.\n\nThe C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large integer (encoded representation exceeding 2000 characters), the buffer overflows. The overflow bytes are restricted to the ASCII values of 0-9 and A-F, which limits exploitation to Denial of Service.\n\nThe companion function ei_print_term, which prints directly to a FILE instead of a memory buffer, does not contain this bug.\n\nThis issue affects OTP from OTP 17.0 before 27.3.4.13, 28.5.0.2 and 29.0.2, corresponding to erl_interface from 3.7.16 before 5.5.2.1, 5.7.0.1 and 5.8.1.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-49760" }, { "cve":"CVE-2026-53422", "notes":[ { "text":"Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory.\n\nThe SSH_FXP_REALPATH handler in ssh_sftpd calls relate_file_name/3 with Canonicalize=false, unlike every other SFTP operation handler. This allows .. components in the requested path to bypass the is_within_root/2 check without being resolved. The un-canonicalized path then enters resolve_symlinks/2, which walks up the directory tree above the configured root and issues read_link() syscalls on arbitrary filesystem paths.\n\nAn authenticated SFTP client can exploit this by sending a REALPATH request with a crafted traversal path. The server response differs depending on whether the target path exists on the host filesystem (SSH_FXP_NAME when the path resolves successfully, SSH_FX_NO_SUCH_FILE when it does not). This creates a path-existence oracle that an attacker can use to enumerate the filesystem structure outside the configured root, including the existence of sensitive files, directories, and mount points.\n\nThe vulnerability leaks only the existence of paths. No file contents, credentials, or write access are obtainable through this issue alone. The information gained may assist further attacks when combined with other vulnerabilities.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routine ssh_sftpd:handle_op/4.\n\nThis issue affects OTP from OTP 17.0 until OTP 29.0.3, 28.5.0.3, and 27.3.4.14 corresponding to ssh from 3.0.1 until 6.0.2, 5.5.2.2, and 5.2.11.9.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-53422" }, { "cve":"CVE-2026-54886", "notes":[ { "text":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to render an SFTP channel permanently unresponsive.\n\nThe handle_data/4 function in ssh_sftpd contains a catch-all clause that accepts channel data of any type. When channel data with a non-zero type code (SSH_MSG_CHANNEL_EXTENDED_DATA) arrives with an empty pending buffer and a payload at or below the SFTP packet size limit, the clause tail-calls itself with identical arguments, creating an infinite loop.\n\nThe SFTP protocol operates exclusively on normal channel data (type 0). Extended data (non-zero type) is meaningless for SFTP and is never sent by conforming clients. However, the SSH protocol permits any channel participant to send extended data on an open channel, so an authenticated SFTP client can trigger the loop by sending SSH_MSG_CHANNEL_EXTENDED_DATA with any data_type_code and any non-empty payload at or below the size limit.\n\nThe targeted ssh_sftpd process enters an infinite tail-recursive loop. It never processes another message, its message queue grows without bound, and it can only be stopped by killing the process. BEAM's reduction-based scheduler preemption continues to function, so other processes on the node are not starved, but each stuck channel process consumes its full CPU time share continuously and accumulates unbounded message queue memory. Opening many channels amplifies the CPU and memory impact.\n\nErlang/OTP SSH configurations using the default max_channels setting (infinity) allow an authenticated user to open unlimited channels per connection, amplifying the attack without requiring multiple TCP connections or authentications.\n\nNo file contents, credentials, or write access are obtainable through this issue. The impact is limited to denial of service on targeted SFTP channels, with secondary CPU degradation and memory growth.\n\nThis vulnerability is associated with program file lib/ssh/src/ssh_sftpd.erl and program routine ssh_sftpd:handle_data/4.\n\nThis issue affects OTP from OTP 17.0 until OTP 29.0.3, 28.5.0.3, and 27.3.4.14 corresponding to ssh from 3.0.1 until 6.0.2, 5.5.2.2, and 5.2.11.9.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-54886" }, { "cve":"CVE-2026-54887", "notes":[ { "text":"Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass.\n\nOn DTLS server startup, dtls_server_connection:initial_hello/3 initializes previous_cookie_secret to the empty binary (<<>>) instead of a random value. Because HMAC with an empty key is deterministic, anyone who observes the plaintext ClientHello can compute dtls_handshake:cookie(<<>>, IP, Port, Hello) and forge a valid DTLS cookie before the first rotation of the cookie secret. The DTLS cookie (RFC 6347 §4.2.1) is a denial-of-service mitigation that prevents spoofed source IPs from forcing the server to allocate state and perform expensive cryptographic operations; it is not an authentication mechanism. During the window from server startup until the first secret rotation (0 to 15 seconds), an attacker who can observe the plaintext ClientHello can bypass the source address verification, enabling DTLS handshake amplification with spoofed source addresses.\n\nThis vulnerability is associated with program file lib/ssl/src/dtls_server_connection.erl and program routine dtls_server_connection:initial_hello/3.\n\nThis issue affects OTP from OTP 20.0 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 8.2 before 11.7.3, 11.6.0.3 and 11.2.12.10.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.8, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-54887" }, { "cve":"CVE-2026-54891", "notes":[ { "text":"Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data.\n\nThe function tls_gen_connection:handle_protocol_record/3 rejects APPLICATION_DATA records that arrive in pre-handshake states when the TLS endpoint acts as a server, but does not apply the same check when the endpoint acts as a client. A network-positioned attacker can send plaintext APPLICATION_DATA records to the client during the handshake. The records are buffered and, once the handshake completes successfully, delivered to the application as if they were authenticated post-handshake data. The attacker cannot observe the client's response or steer the connection, so the impact is limited to blind injection of unauthenticated bytes. The injection window is wider for TLS versions prior to TLS 1.3 than for TLS 1.3.\n\nThis vulnerability is associated with program file lib/ssl/src/tls_gen_connection.erl.\n\nThis issue affects OTP from OTP 17.0 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 5.3.4 before 11.7.3, 11.6.0.3 and 11.2.12.10. TLS 1.3 is affected starting with OTP 22.0, when TLS 1.3 support was added.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.7, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-54891" }, { "cve":"CVE-2026-55952", "notes":[ { "text":"The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3:handle_pre_shared_key/3, an OfferedPreSharedKeys record with a mismatched number of identities and binders is forwarded directly to tls_server_session_ticket:use/4, which crashes the session ticket handler process.\n\nAn unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handling on that listener. New TLS 1.3 handshakes complete but subsequently crash when the server attempts to issue a session ticket, effectively making TLS 1.3 unusable on the affected listener until the ssl application is restarted. TLS 1.2 connections are not affected.\n\nThis issue affects OTP from 22.2 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 9.5 before 11.7.3, 11.6.0.3 and 11.2.12.10.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ], "details":"erlang security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3043" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.2, "vectorString":"CVSS:3.1/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.src", "openEuler-22.03-LTS-SP4:erlang-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-asn1-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-common_test-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-compiler-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-crypto-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugger-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debuginfo-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-debugsource-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-dialyzer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-diameter-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-edoc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eldap-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_docgen-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erl_interface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-erts-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-et-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-eunit-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-examples-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-hipe-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-inets-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-jinterface-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-kernel-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-megaco-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-mnesia-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-observer-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-odbc-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-os_mon-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-parsetools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-public_key-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-reltool-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-runtime_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-sasl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-snmp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssh-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-ssl-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-stdlib-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-syntax_tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tftp-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-tools-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-wx-23.3.4.9-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:erlang-xmerl-23.3.4.9-11.oe2203sp4.x86_64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-55952" } ] }