Packages / Debian 13 (Trixie) / interpreters / erlang-common-test

[Source: erlang]

Package: erlang-common-test (1:27.3.4.1+dfsg-1+deb13u2)

Erlang/OTP application for automated testing

Other Packages Related to erlang-common-test:

  • dep: [erlang-base] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP virtual machine and base applications

  • dep: [erlang-crypto] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP cryptographic modules

  • dep: [erlang-debugger] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP application for debugging and testing

  • dep: [erlang-ftp] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP FTP client

  • dep: [erlang-runtime-tools] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP runtime tracing/debugging tools

  • dep: [erlang-snmp] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP SNMP applications

  • dep: [erlang-ssh] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP implementation of SSH protocol

  • dep: [erlang-syntax-tools] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP modules for handling abstract Erlang syntax trees

  • dep: [erlang-tools] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP various tools

  • dep: [erlang-xmerl] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP XML tools

  • dep: [libjs-jquery]

    JavaScript library for dynamic web applications

  • dep: [libjs-jquery-tablesorter]

    jQuery flexible client-side table sorting plugin

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • sug: [erlang]

    Concurrent, real-time, distributed functional language

  • sug: [erlang-doc]

    Erlang/OTP HTML documentation

Download erlang-common-test

ArchitecturePackage sizeInstalled sizeFilesPackage
amd641.3 MiB1.9 MiBlist of filesDownload
arm641.3 MiB2.0 MiBlist of filesDownload

Package file paths (63)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/ct_run
  • /usr/lib/erlang/bin/ct_run
  • /usr/lib/erlang/erts-15.2.7/bin/ct_run
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/common_test.app
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/common_test.appup
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_config.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_config_plain.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_config_xml.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_conn_log_h.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_cover.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_default_gl.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/cte_track.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_event.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_framework.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_ftp.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_gen_conn.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_groups.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/cth_conn_log.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/cth_log_redirect.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_hooks.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_hooks_lock.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/cth_surefire.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_logs.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_make.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_master.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_master_event.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_master_logs.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_master_status.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_netconfc.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_property_test.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_release_test.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_repeat.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_rpc.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_run.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_slave.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_snmp.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_ssh.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_suite.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_telnet.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_telnet_client.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_testspec.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/ct_util.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/erl2html2.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/test_server.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/test_server_ctrl.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/test_server_gl.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/test_server_io.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/test_server_node.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/test_server_sup.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/ebin/unix_telnet.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/priv/ct_default.css
  • /usr/lib/erlang/lib/common_test-1.27.7/priv/jquery-latest.js
  • /usr/lib/erlang/lib/common_test-1.27.7/priv/jquery.tablesorter.min.js
  • /usr/lib/erlang/lib/common_test-1.27.7/priv/tile1.jpg
  • /usr/lib/erlang/lib/common_test-1.27.7/proper_ext/ct_proper_ext.beam
  • /usr/lib/erlang/lib/common_test-1.27.7/proper_ext/ct_proper_ext.erl
  • /usr/share/doc/erlang-common-test/AUTHORS.gz
  • /usr/share/doc/erlang-common-test/changelog.Debian.gz
  • /usr/share/doc/erlang-common-test/copyright
  • /usr/share/doc/erlang-common-test/README.Debian
  • /usr/share/lintian/overrides/erlang-common-test
  • /usr/share/man/man1/ct_run.1.gz

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browserBuild an image that includes erlang-common-test

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:27.3.4.1+dfsg-1+deb13u2trixie / mainamd64Debian 13 · main · amd641.3 MiB1.9 MiBpool/main/e/erlang/erlang-common-test_27.3.4.1+dfsg-1+deb13u2_amd64.deb
1:27.3.4.1+dfsg-1+deb13u2trixie / mainarm64Debian 13 · main · arm641.3 MiB2.0 MiBpool/main/e/erlang/erlang-common-test_27.3.4.1+dfsg-1+deb13u2_arm64.deb
1:27.3.4.1+dfsg-1+deb13u4trixie-security / mainamd64Debian 13 security · main · amd641.3 MiB1.9 MiBpool/updates/main/e/erlang/erlang-common-test_27.3.4.1+dfsg-1+deb13u4_amd64.deb
1:27.3.4.1+dfsg-1+deb13u3trixie-security / mainarm64Debian 13 security · main · arm641.3 MiB2.0 MiBpool/updates/main/e/erlang/erlang-common-test_27.3.4.1+dfsg-1+deb13u3_arm64.deb
1:27.3.4.1+dfsg-1+deb13u3 (withdrawn)trixie-security / mainamd64Debian 13 security · main · amd641.3 MiB1.9 MiBpool/updates/main/e/erlang/erlang-common-test_27.3.4.1+dfsg-1+deb13u3_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-105236]

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host

Medium(6.3)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-94200]

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a deni

High(8.2)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-65634]

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshak

High(8.2)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-68956]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are neve

High(7.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-89422]

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the

Critical(9.3)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-59696]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of dig

Medium(6.9)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-70405]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length fi

Medium(6.3)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-70409]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port compon

Medium(6.3)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-74994]

The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single s

Medium(6.5)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-55951]

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-59250]

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denia

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Fixed · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Fixed · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Fixed · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

[CVE-2026-59251]

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate c

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Fixed · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Fixed · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Fixed · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

[CVE-2026-66357]

httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines). Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature beca

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-66835]

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash.

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-69664]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked bo

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-70399]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large nu

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-71380]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-73270]

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by requesting them with diffe

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-73276]

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OT

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[CVE-2026-73812]

httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_bod

Critical(9.1)Affected
Details (5)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · amd64 · trixie-security · Historical version

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u3 · arm64 · trixie-security

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u4 · amd64 · trixie-security

    Affected

    nvd · erlang · debian · 13

[Next results]

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:27.3.4.1+dfsg-1+deb13u2 / amd64Observed Sep 1, 2026sha256 d83ca05a0141…d8fa865eSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): d83ca05a01415b52c947f260c607f9f442513ea253e8001b84dc2445d8fa865e

Verify download

printf '%s %s\n' 'd83ca05a01415b52c947f260c607f9f442513ea253e8001b84dc2445d8fa865e' 'erlang-common-test_27.3.4.1+dfsg-1+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:27.3.4.1+dfsg-1+deb13u2 / arm64Observed Sep 1, 2026sha256 dcd7ae092912…44018273Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): dcd7ae092912b9933b02d5ec665d6490c0a5a035b17b7cda9b4ed91e44018273

Verify download

printf '%s %s\n' 'dcd7ae092912b9933b02d5ec665d6490c0a5a035b17b7cda9b4ed91e44018273' 'erlang-common-test_27.3.4.1+dfsg-1+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:27.3.4.1+dfsg-1+deb13u4 / amd64Observed Oct 23, 2026 – Oct 24, 2026sha256 0a45cdb54b0f…f4cd8f99Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 0a45cdb54b0fc27511803c6c70e2aa093f62f9f87598142c45ffa874f4cd8f99

Verify download

printf '%s %s\n' '0a45cdb54b0fc27511803c6c70e2aa093f62f9f87598142c45ffa874f4cd8f99' 'erlang-common-test_27.3.4.1+dfsg-1+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1:27.3.4.1+dfsg-1+deb13u3 / arm64Observed Sep 1, 2026sha256 196a92184a0c…c175b340Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 196a92184a0c7f628374f68a9d6b23d1fbdd9392b3e4d0291d49add8c175b340

Verify download

printf '%s %s\n' '196a92184a0c7f628374f68a9d6b23d1fbdd9392b3e4d0291d49add8c175b340' 'erlang-common-test_27.3.4.1+dfsg-1+deb13u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

1:27.3.4.1+dfsg-1+deb13u3 / amd64Observed Aug 25, 2026 – Oct 22, 2026sha256 a23017628acd…2a21e68dSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): a23017628acd907bd30d9af54d11cbc20170df48ae90aeae2ce425b62a21e68d

Verify download

printf '%s %s\n' 'a23017628acd907bd30d9af54d11cbc20170df48ae90aeae2ce425b62a21e68d' 'erlang-common-test_27.3.4.1+dfsg-1+deb13u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Sources

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 22, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9

    Repository-signature verification record
    Signed-object SHA-256
    f439c50d207c42e50abd7db7804b0afa16eb57b67775cfa0996234176aeb26a1
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 23, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9
    Observed SHA-256
    b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb

    Repository-signature verification record
    Signed-object SHA-256
    91d37059a95d845e2eabb95c1797194ba92ce678abb790bf16c7a785c470246a
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Observed SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Result
    match verified