FlawAtlas
Search the atlas
SUSE-SU-2026:2010-1 Not scored

Security update for erlang26

This update for erlang26 fixes the following issues Security issues: - CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal (bsc#1258663). - CVE-2026-23941: HTTP Request Smuggling in Erlang OTP (bsc#1259687). - CVE-2026-23942: path traversal vulnerability in Erlang OTP (bsc#1259681). - CVE-2026-23943: denial of service due to improper handling of highly compressed data in Erlang OTP ssh (bsc#1259682). - CVE-2026-28808: incorrect authorization can lead to unauthenticated access to protected CGI scripts (bsc#1261728). - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc#1262503). Non security issue: - Fixes for FIPS mode (jsc#PED-15166.

Exploit probability Not scored
Published May 19, 2026
Required by Not available
Last source change May 20, 2026

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:2010-1

This update for erlang26 fixes the following issues Security issues: - CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal (bsc#1258663). - CVE-2026-23941: HTTP Request Smuggling in Erlang OTP (bsc#1259687). - CVE-2026-23942: path traversal vulnerability in Erlang OTP (bsc#1259681). - CVE-2026-23943: denial of service due to improper handling of highly compressed data in Erlang OTP ssh (bsc#1259682). - CVE-2026-28808: incorrect authorization can lead to unauthenticated access to protected CGI scripts (bsc#1261728). - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SFTP chroot (bsc#1262503). Non security issue: - Fixes for FIPS mode (jsc#PED-15166.

View original source

05 / REFERENCES

Further evidence