SUSE-SU-2024:0210-1: Security update for erlang
This update for erlang fixes the following issues: CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218192)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/erlang-dialyzerto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-epmdto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlangto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-reltool-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-jinterfaceto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-et-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-wx-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-observerto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-diameter-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-docto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-wxto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-debuginfoto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-debugsourceto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-etto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-jinterface-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-observer-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-debuggerto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-reltoolto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-wx-debuginfoto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-diameterto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-epmd-debuginfoto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-dialyzer-debuginfoto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-dialyzer-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade
suse/erlang-debugger-srcto a version that resolves this vulnerability.Fixed in 23.3.4.19-150300.3.14.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-210=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-210=1