Packages / Debian 12 (Bookworm) / interpreters / erlang-erl-docgen

Package: erlang-erl-docgen (1:25.2.3+dfsg-1+deb12u4)

Erlang/OTP documentation stylesheets

Other Packages Related to erlang-erl-docgen:

  • dep: [erlang-base] (= 1:25.2.3+dfsg-1+deb12u4)

    Macchina virtuale Erlang/OTP e applicazioni di base

  • dep: [erlang-edoc] (= 1:25.2.3+dfsg-1+deb12u4)

    Modulo Erlang/OTP per generare documentazione

  • dep: [erlang-xmerl] (= 1:25.2.3+dfsg-1+deb12u4)

    Strumenti XML Erlang/OTP

  • sug: [xsltproc]

    processore da riga di comando XSLT 1.0

  • sug: [fop]

    XML formatter driven by XSL Formatting Objects (XSL-FO.) - app

  • sug: [erlang]

    Linguaggio funzionale concorrente, in tempo reale e distribuito

  • sug: [erlang-manpages]

    Erlang/OTP manual pages

  • sug: [erlang-doc]

    Erlang/OTP HTML/PDF documentation

Download erlang-erl-docgen

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64178 KiB648 KiBlist of filesDownload
arm64178 KiB648 KiBlist of filesDownload

Percorsi file del pacchetto (50)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/erlang/lib/erl_docgen-1.4/ebin/docgen_edoc_xml_cb.beam
  • /usr/lib/erlang/lib/erl_docgen-1.4/ebin/docgen_otp_specs.beam
  • /usr/lib/erlang/lib/erl_docgen-1.4/ebin/docgen_xmerl_xml_cb.beam
  • /usr/lib/erlang/lib/erl_docgen-1.4/ebin/docgen_xml_to_chunk.beam
  • /usr/lib/erlang/lib/erl_docgen-1.4/ebin/erl_docgen.app
  • /usr/lib/erlang/lib/erl_docgen-1.4/ebin/erl_docgen.appup
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/bin/codeline_preprocessing.escript
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/bin/xml_from_edoc.escript
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/css/highlight.css
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/css/otp_doc.css
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/application.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/appref.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/book.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/chapter.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/common.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/common.entities.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/common.header.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/common.image.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/common.refs.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/common.table.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/comref.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/cref.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/erlref.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/fileref.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd_html_entities/xhtml-lat1.ent
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd_man_entities/xhtml-lat1.ent
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/part.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/xhtml1-frameset.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/xhtml1-strict.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/xhtml1-transitional.dtd
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/xhtml-special.ent
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/dtd/xhtml-symbol.ent
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/images/erlang-logo.gif
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/images/erlang-logo.png
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/js/flipmenu/flip_closed.gif
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/js/flipmenu/flipmenu.js
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/js/flipmenu/flip_open.gif
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/js/flipmenu/flip_static.gif
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_eix.xsl
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_funcs.xsl
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_html_params.xsl
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_html.xsl
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_man.xsl
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_pdf_params.xsl
  • /usr/lib/erlang/lib/erl_docgen-1.4/priv/xsl/db_pdf.xsl
  • /usr/share/doc/erlang-erl-docgen/AUTHORS.gz
  • /usr/share/doc/erlang-erl-docgen/changelog.Debian.gz
  • /usr/share/doc/erlang-erl-docgen/copyright
  • /usr/share/doc/erlang-erl-docgen/README.Debian
  • /usr/share/lintian/overrides/erlang-erl-docgen

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:25.2.3+dfsg-1+deb12u4bookworm / mainamd64Debian 12 · main · amd64179 KiB649 KiBpool/main/e/erlang/erlang-erl-docgen_25.2.3+dfsg-1+deb12u4_amd64.deb
1:25.2.3+dfsg-1+deb12u4bookworm / mainarm64Debian 12 · main · arm64179 KiB649 KiBpool/main/e/erlang/erlang-erl-docgen_25.2.3+dfsg-1+deb12u4_arm64.deb
1:25.2.3+dfsg-1+deb12u1bookworm-security / mainamd64Debian 12 security · main · amd64178 KiB648 KiBpool/updates/main/e/erlang/erlang-erl-docgen_25.2.3+dfsg-1+deb12u1_amd64.deb
1:25.2.3+dfsg-1+deb12u1bookworm-security / mainarm64Debian 12 security · main · arm64178 KiB648 KiBpool/updates/main/e/erlang/erlang-erl-docgen_25.2.3+dfsg-1+deb12u1_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVEGravitàImpatto per versione
[CVE-2026-105236]

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host

Medium(6.3)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-94200]

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a deni

High(8.2)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-65634]

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshak

High(8.2)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-68956]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are neve

High(7.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-89422]

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the

Critical(9.3)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-59696]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of dig

Medium(6.9)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-70405]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length fi

Medium(6.3)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-70409]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port compon

Medium(6.3)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-74994]

The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single s

Medium(6.5)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-55951]

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-59250]

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denia

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-59251]

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate c

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-66357]

httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines). Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature beca

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-66835]

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash.

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-69664]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked bo

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-70399]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large nu

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-71380]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-73270]

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by requesting them with diffe

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-73276]

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OT

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[CVE-2026-73812]

httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_bod

Critical(9.1)Interessata
Dettagli (4)
  • 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

  • 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security

    Interessata

    nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

[Altri risultati]

Ultima sincronizzazione:

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:25.2.3+dfsg-1+deb12u4 / amd64Osservato Sep 1, 2026sha256 f45d5ce84240…5a235f07Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): f45d5ce84240edc4f25fd0753574e138f77f3d3e01a6f1b5490826205a235f07

Verifica download

printf '%s %s\n' 'f45d5ce84240edc4f25fd0753574e138f77f3d3e01a6f1b5490826205a235f07' 'erlang-erl-docgen_25.2.3+dfsg-1+deb12u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

1:25.2.3+dfsg-1+deb12u4 / arm64Osservato Sep 1, 2026sha256 c6dff07ffc2f…fddeb509Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): c6dff07ffc2ff2601d5b0251aeaceee2d0c55453dc66842db22fdc1dfddeb509

Verifica download

printf '%s %s\n' 'c6dff07ffc2ff2601d5b0251aeaceee2d0c55453dc66842db22fdc1dfddeb509' 'erlang-erl-docgen_25.2.3+dfsg-1+deb12u4_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

1:25.2.3+dfsg-1+deb12u1 / amd64Osservato Sep 1, 2026sha256 a4db17e6cefa…a5a26e60Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): a4db17e6cefa8eb7b78667944e6af1b68a816f99453ee790116b8833a5a26e60

Verifica download

printf '%s %s\n' 'a4db17e6cefa8eb7b78667944e6af1b68a816f99453ee790116b8833a5a26e60' 'erlang-erl-docgen_25.2.3+dfsg-1+deb12u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main amd64

1:25.2.3+dfsg-1+deb12u1 / arm64Osservato Sep 1, 2026sha256 13f2baf0c15a…63e054aaImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 13f2baf0c15aa82d678ad25e6cafea62f0548e7041294a0134649f8163e054aa

Verifica download

printf '%s %s\n' '13f2baf0c15aa82d678ad25e6cafea62f0548e7041294a0134649f8163e054aa' 'erlang-erl-docgen_25.2.3+dfsg-1+deb12u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main arm64

Fonti

  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified