SUSE-SU-2018:0974-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:0974-1

Related

Published

2018-04-18T06:29:08Z

Modified

2018-04-18T06:29:08Z

Summary

Security update for erlang

Details

This update for erlang fixes the following security issue:

CVE-2017-1000385: An erlang TLS server configured with cipher suites using RSA key exchange, may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server's private key itself. (bsc#1070960)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17.5.6-3.3.1

{
    "binaries": [
        {
            "erlang": "17.5.6-3.3.1",
            "erlang-epmd": "17.5.6-3.3.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17.5.6-3.3.1

{
    "binaries": [
        {
            "erlang": "17.5.6-3.3.1",
            "erlang-epmd": "17.5.6-3.3.1"
        }
    ]
}