Ubuntu alert USN-7961-1 (erlang)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7961-1] Erlang vulnerability
Date:
             
 
Wed, 14 Jan 2026 15:08:03 +0000
Message-ID:
             
 
<E1vg2Tb-0007y9-5v@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7961-1
January 14, 2026

erlang vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Erlang could allow unintended access to network services.

Software Description:
- erlang: Concurrent, real-time, distributed functional language

Details:

It was discovered that Erlang incorrectly validated peer certificates
when incorrect extended key usage was presented. A remote attacker could
possibly use this issue to bypass SSL key usage restrictions.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  erlang                          1:25.3.2.8+dfsg-1ubuntu4.6
  erlang-ssl                      1:25.3.2.8+dfsg-1ubuntu4.6

After a standard system update you need to reboot your computer to make all
the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7961-1
  CVE-2024-53846

Package Information:
  https://launchpad.net/ubuntu/+source/erlang/1:25.3.2.8+df...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=KIVq
-----END PGP SIGNATURE-----