git: 8d731c8d43e7 - main - security/vuxml: Document remaining Erlang/OTP vulnerabilities
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 01 Sep 2026 20:04:55 UTC
The branch main has been updated by olgeni:
URL: https://cgit.FreeBSD.org/ports/commit/?id=8d731c8d43e7ee7cd595aa30e42ef0b61be8ad6e
commit 8d731c8d43e7ee7cd595aa30e42ef0b61be8ad6e
Author: Jimmy Olgeni <olgeni@FreeBSD.org>
AuthorDate: 2026-09-01 20:02:03 +0000
Commit: Jimmy Olgeni <olgeni@FreeBSD.org>
CommitDate: 2026-09-01 20:02:03 +0000
security/vuxml: Document remaining Erlang/OTP vulnerabilities
Upstream published 16 advisories alongside OTP 29.0.6, 28.5.0.6 and
27.3.4.17. CVE-2026-75538 already had an entry; add a combined one for
the other 15, which share the same affected packages and fixed versions.
Most are in the inets httpd and httpc implementations: HTTP request
smuggling, two mod_auth authentication bypasses and several denial of
service issues, plus unbounded integer conversion in stdlib, snmp and
eldap.
Also add the now-published GHSA reference to the CVE-2026-75538 entry.
---
security/vuxml/vuln/2026.xml | 86 ++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 86 insertions(+)
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index b51797d56078..c76239e29d8a 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,88 @@
+ <vuln vid="e9dfc357-a63f-11f1-9195-4c526214c986">
+ <topic>Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap</topic>
+ <affects>
+ <package>
+ <name>erlang</name>
+ <range><lt>28.5.0.6,4</lt></range>
+ </package>
+ <package>
+ <name>erlang-runtime27</name>
+ <range><lt>27.3.4.17</lt></range>
+ </package>
+ <package>
+ <name>erlang-runtime28</name>
+ <range><lt>28.5.0.6</lt></range>
+ </package>
+ <package>
+ <name>erlang-runtime29</name>
+ <range><lt>29.0.6</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Erlang/OTP project reports:</p>
+ <blockquote cite="https://github.com/erlang/otp/security/advisories">
+ <p>OTP 29.0.6, 28.5.0.6 and 27.3.4.17 fix the following
+ issues, most of them in the inets httpd and httpc
+ implementations:</p>
+ <ul>
+ <li>CVE-2026-55951: httpc Memory Exhaustion via Unbounded Header Accumulation.</li>
+ <li>CVE-2026-59696: stdlib: Denial-of-Service enabled by Unbounded Integer Conversion.</li>
+ <li>CVE-2026-66357: HTTP Request Smuggling via obs-fold Header Continuation in httpd.</li>
+ <li>CVE-2026-66835: Possible directory protection bypass in Erlang-OTP inets httpd.</li>
+ <li>CVE-2026-69664: Denial of Service via Malformed Chunk Size in httpd.</li>
+ <li>CVE-2026-70399: Denial of Service via Unenforced Default max_clients Limit in httpd.</li>
+ <li>CVE-2026-70405: snmp: Denial-of-Service enabled by Unbounded Integer Conversion.</li>
+ <li>CVE-2026-70409: eldap: Denial-of-Service enabled by Unbounded Integer Conversion.</li>
+ <li>CVE-2026-71380: Denial of Service via Body-Read Timeout Gap in httpd (Slowloris Variant).</li>
+ <li>CVE-2026-71562: inets: Denial-of-Service enabled by Unbounded Integer Conversion.</li>
+ <li>CVE-2026-73270: Authentication Bypass via Case-Insensitive Filesystem Path Matching in httpd mod_auth.</li>
+ <li>CVE-2026-73276: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping in httpd.</li>
+ <li>CVE-2026-73812: HTTP Request Smuggling via Transfer-Encoding and Content-Length in httpd.</li>
+ <li>CVE-2026-74835: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception in httpd.</li>
+ <li>CVE-2026-74994: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth (dets/mnesia backends).</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2026-55951</cvename>
+ <cvename>CVE-2026-59696</cvename>
+ <cvename>CVE-2026-66357</cvename>
+ <cvename>CVE-2026-66835</cvename>
+ <cvename>CVE-2026-69664</cvename>
+ <cvename>CVE-2026-70399</cvename>
+ <cvename>CVE-2026-70405</cvename>
+ <cvename>CVE-2026-70409</cvename>
+ <cvename>CVE-2026-71380</cvename>
+ <cvename>CVE-2026-71562</cvename>
+ <cvename>CVE-2026-73270</cvename>
+ <cvename>CVE-2026-73276</cvename>
+ <cvename>CVE-2026-73812</cvename>
+ <cvename>CVE-2026-74835</cvename>
+ <cvename>CVE-2026-74994</cvename>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-f9fw-mg7q-4g3x</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-8qw4-2chm-mvj2</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-qh2f-33hj-37qf</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-r4vv-vc2c-2fw6</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-mr35-8h7w-w3gq</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-pwvh-c689-f8q5</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-q7cq-pfgf-5hr7</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-9vgh-c8cm-m9p4</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-5vp4-58hc-h8cc</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-cqx9-9hq6-m8wf</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-mh78-93cr-jx8f</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-6v7q-jwgh-cx8p</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-7j6m-4ffg-hg46</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-8qrh-x566-5xv5</url>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-c3cq-q8x6-547g</url>
+ </references>
+ <dates>
+ <discovery>2026-09-01</discovery>
+ <entry>2026-09-01</entry>
+ </dates>
+ </vuln>
+
<vuln vid="62b56853-a609-11f1-9195-4c526214c986">
<topic>Erlang/OTP -- remote crash via gen_tcp with {packet,4}</topic>
<affects>
@@ -34,6 +119,7 @@
</description>
<references>
<cvename>CVE-2026-75538</cvename>
+ <url>https://github.com/erlang/otp/security/advisories/GHSA-8m6r-2pj2-25pm</url>
<url>https://github.com/erlang/otp/releases/tag/OTP-29.0.6</url>
<url>https://github.com/erlang/otp/releases/tag/OTP-28.5.0.6</url>
<url>https://github.com/erlang/otp/releases/tag/OTP-27.3.4.17</url>