
CVE catalog
CVE-2025-4748
Erlang vulnerabilities
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.
- Severity
- Medium · CVSS 4.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "erlang",
"status": "fixed",
"release": "sid",
"version": "1:29.1.2+dfsg-1"
},
{
"name": "erlang",
"status": "fixed",
"release": "forky",
"version": "1:29.1.1+dfsg-1"
},
{
"name": "erlang",
"status": "fixed",
"release": "trixie",
"version": "1:27.3.4.1+dfsg-1+deb13u3"
},
{
"name": "erlang",
"status": "fixed",
"release": "trixie-security",
"version": "1:27.3.4.1+dfsg-1+deb13u4"
},
{
"name": "erlang",
"status": "fixed",
"release": "bookworm",
"version": "1:25.2.3+dfsg-1+deb12u4"
},
{
"name": "erlang",
"status": "vulnerable",
"release": "bookworm-security",
"version": "1:25.2.3+dfsg-1+deb12u1"
}
],
"fixed_versions": [
{
"bug": 1107939,
"name": "erlang",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "1:27.3.4.1+dfsg-1"
},
{
"bug": 1107939,
"name": "erlang",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "1:27.3.4.1+dfsg-1"
},
{
"bug": 1107939,
"name": "erlang",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "1:27.3.4.1+dfsg-1"
},
{
"bug": 1107939,
"name": "erlang",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "1:25.2.3+dfsg-1+deb12u2"
}
],
"distribution_packages": [
{
"name": "erlang",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-asn1",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-base",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-common-test",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-crypto",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-debugger",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-dev",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-dialyzer",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-diameter",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-doc",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-edoc",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-eldap",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-erl-docgen",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-et",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-eunit",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-examples",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-ftp",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-inets",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-jinterface",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-manpages",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-megaco",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-mnesia",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-mode",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-nox",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-observer",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-odbc",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-os-mon",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-parsetools",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-public-key",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-reltool",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-runtime-tools",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-snmp",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-src",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-ssh",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-ssl",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-syntax-tools",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-tftp",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-tools",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-wx",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-x11",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang-xmerl",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4"
},
{
"name": "erlang",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:22.2.7+dfsg-1ubuntu0.5+esm3"
}
]
}
],
"release": "pro",
"versions": [
"1:22.0.7+dfsg-1build1",
"1:22.2+dfsg-1",
"1:22.2.1+dfsg-1",
"1:22.2.2+dfsg-1",
"1:22.2.3+dfsg-1",
"1:22.2.3+dfsg-2",
"1:22.2.4+dfsg-1",
"1:22.2.7+dfsg-1",
"1:22.2.7+dfsg-1ubuntu0.2",
"1:22.2.7+dfsg-1ubuntu0.3",
"1:22.2.7+dfsg-1ubuntu0.4",
"1:22.2.7+dfsg-1ubuntu0.5",
"1:22.2.7+dfsg-1ubuntu0.5+esm1",
"1:22.2.7+dfsg-1ubuntu0.5+esm2"
],
"ecosystem": "deb",
"fixed_version": "1:22.2.7+dfsg-1ubuntu0.5+esm3",
"provider_record_id": "UBUNTU-CVE-2025-4748"
},
{
"name": "erlang",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:24.2.1+dfsg-1ubuntu0.5"
}
]
}
],
"release": "22.04",
"versions": [
"1:23.2.6+dfsg-1build1",
"1:24.1.1+dfsg-1",
"1:24.1.4+dfsg-1",
"1:24.1.5+dfsg-1",
"1:24.1.5+dfsg-1ubuntu1",
"1:24.2+dfsg-1",
"1:24.2.1+dfsg-1",
"1:24.2.1+dfsg-1ubuntu0.1",
"1:24.2.1+dfsg-1ubuntu0.2",
"1:24.2.1+dfsg-1ubuntu0.3",
"1:24.2.1+dfsg-1ubuntu0.4"
],
"ecosystem": "deb",
"fixed_version": "1:24.2.1+dfsg-1ubuntu0.5",
"provider_record_id": "UBUNTU-CVE-2025-4748"
},
{
"name": "erlang",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:25.3.2.8+dfsg-1ubuntu4.4"
}
]
}
],
"release": "24.04",
"versions": [
"1:25.2.3+dfsg-1",
"1:25.3.2.8+dfsg-1",
"1:25.3.2.8+dfsg-1ubuntu1",
"1:25.3.2.8+dfsg-1ubuntu3",
"1:25.3.2.8+dfsg-1ubuntu4",
"1:25.3.2.8+dfsg-1ubuntu4.1",
"1:25.3.2.8+dfsg-1ubuntu4.2",
"1:25.3.2.8+dfsg-1ubuntu4.3"
],
"ecosystem": "deb",
"fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.4",
"provider_record_id": "UBUNTU-CVE-2025-4748"
},
{
"name": "erlang",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:27.3.4.1+dfsg-1"
}
]
}
],
"release": "25.10",
"versions": [
"1:27.3+dfsg-1ubuntu1",
"1:27.3+dfsg-1ubuntu1.1"
],
"ecosystem": "deb",
"fixed_version": "1:27.3.4.1+dfsg-1",
"provider_record_id": "UBUNTU-CVE-2025-4748"
},
{
"name": "erlang",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "27.1.3-160000.5.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "27.1.3-160000.5.1",
"provider_record_id": "SUSE-SU-2026:22082-1"
},
{
"name": "erlang",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "27.1.3-160000.5.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "27.1.3-160000.5.1",
"provider_record_id": "SUSE-SU-2026:22082-1"
},
{
"name": "erlang",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "27.1.3-160000.5.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "27.1.3-160000.5.1",
"provider_record_id": "OPENSUSE-SU-2026:20907-1"
},
{
"name": "erlang27",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "27.1.3-2.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "27.1.3-2.1",
"provider_record_id": "OPENSUSE-SU-2026:10947-1"
},
{
"name": "erlang",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "23.3.4.19-150300.3.23.3"
}
]
}
],
"release": "linux enterprise module for server applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "23.3.4.19-150300.3.23.3",
"provider_record_id": "SUSE-SU-2025:02332-1"
},
{
"name": "erlang",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "23.3.4.19-150300.3.23.3"
}
]
}
],
"release": "linux enterprise module for server applications 15 sp7",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "23.3.4.19-150300.3.23.3",
"provider_record_id": "SUSE-SU-2025:02332-1"
},
{
"name": "erlang",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "23.3.4.19-150300.3.23.3"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "23.3.4.19-150300.3.23.3",
"provider_record_id": "SUSE-SU-2025:02332-1"
},
{
"name": "erlang26",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2.1-150300.7.14.3"
}
]
}
],
"release": "linux enterprise module for server applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "26.2.1-150300.7.14.3",
"provider_record_id": "SUSE-SU-2025:02331-1"
},
{
"name": "erlang26",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2.1-150300.7.14.3"
}
]
}
],
"release": "linux enterprise module for server applications 15 sp7",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "26.2.1-150300.7.14.3",
"provider_record_id": "SUSE-SU-2025:02331-1"
},
{
"name": "erlang26",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2.1-150300.7.14.3"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "26.2.1-150300.7.14.3",
"provider_record_id": "SUSE-SU-2025:02331-1"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [erlang]Unknown
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-asn1]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-base]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-common-test]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-crypto]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-debugger]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-dev]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-dialyzer]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-diameter]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-doc]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-edoc]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-eldap]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-erl-docgen]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-et]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-eunit]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-examples]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-ftp]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-inets]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-jinterface]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
- [erlang-manpages]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected · Fixed:
1:25.2.3+dfsg-1+deb12u2usn · erlang · debian · bookworm; usn · erlang · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10947-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-4748]
- [https://osv.dev/vulnerability/DLA-4376-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02331-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02332-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22082-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-4748]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10947-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20907-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-4748]
- [https://ubuntu.com/security/notices/USN-7656-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1333.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]