Packages / Debian 13 (Trixie) / interpreters / erlang-ftp

[Source: erlang]

Package: erlang-ftp (1:27.3.4.1+dfsg-1+deb13u2)

Erlang/OTP FTP client

Other Packages Related to erlang-ftp:

  • dep: [erlang-base] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP virtual machine and base applications

  • dep: [erlang-runtime-tools] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP runtime tracing/debugging tools

  • dep: [erlang-ssl] (= 1:27.3.4.1+dfsg-1+deb13u2)

    Erlang/OTP implementation of SSL

  • sug: [erlang]

    Concurrent, real-time, distributed functional language

  • sug: [erlang-doc]

    Erlang/OTP HTML documentation

Download erlang-ftp

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64105 KiB167 KiBlist of filesDownload
arm64105 KiB167 KiBlist of filesDownload

Package file paths (12)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp.app
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp_app.beam
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp.appup
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp.beam
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp_internal.beam
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp_progress.beam
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp_response.beam
  • /usr/lib/erlang/lib/ftp-1.2.3/ebin/ftp_sup.beam
  • /usr/share/doc/erlang-ftp/AUTHORS.gz
  • /usr/share/doc/erlang-ftp/changelog.Debian.gz
  • /usr/share/doc/erlang-ftp/copyright
  • /usr/share/doc/erlang-ftp/README.Debian

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browserBuild an image that includes erlang-ftp

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:27.3.4.1+dfsg-1+deb13u2trixie / mainamd64Debian 13 · main · amd64105 KiB167 KiBpool/main/e/erlang/erlang-ftp_27.3.4.1+dfsg-1+deb13u2_amd64.deb
1:27.3.4.1+dfsg-1+deb13u2trixie / mainarm64Debian 13 · main · arm64105 KiB167 KiBpool/main/e/erlang/erlang-ftp_27.3.4.1+dfsg-1+deb13u2_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-105236]

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host

Medium(6.3)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-94200]

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a deni

High(8.2)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-65634]

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshak

High(8.2)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-68956]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are neve

High(7.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-89422]

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the

Critical(9.3)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-59696]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of dig

Medium(6.9)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-70405]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length fi

Medium(6.3)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-70409]

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port compon

Medium(6.3)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-74994]

The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single s

Medium(6.5)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-55951]

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-59250]

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denia

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

[CVE-2026-59251]

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate c

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected · Fixed: 1:27.3.4.1+dfsg-1+deb13u3

    nvd · erlang · debian · 13

[CVE-2026-66357]

httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines). Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This missing feature beca

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-66835]

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash.

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-69664]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked bo

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-70399]

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large nu

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-71380]

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-73270]

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by requesting them with diffe

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-73276]

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OT

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[CVE-2026-73812]

httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_bod

Critical(9.1)Affected
Details (2)

  • 1:27.3.4.1+dfsg-1+deb13u2 · amd64 · trixie

    Affected

    nvd · erlang · debian · 13

  • 1:27.3.4.1+dfsg-1+deb13u2 · arm64 · trixie

    Affected

    nvd · erlang · debian · 13

[Next results]

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:27.3.4.1+dfsg-1+deb13u2 / amd64Observed Sep 1, 2026sha256 97d815acffc7…e5d33ba0Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 97d815acffc726aa2c50210369bb1584e291796a71affb3e75fde94ae5d33ba0

Verify download

printf '%s %s\n' '97d815acffc726aa2c50210369bb1584e291796a71affb3e75fde94ae5d33ba0' 'erlang-ftp_27.3.4.1+dfsg-1+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:27.3.4.1+dfsg-1+deb13u2 / arm64Observed Sep 1, 2026sha256 f272f0d764c3…2a635b28Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): f272f0d764c342d1977bebb41d77a892b97208dff52c7d3e799ae54a2a635b28

Verify download

printf '%s %s\n' 'f272f0d764c342d1977bebb41d77a892b97208dff52c7d3e799ae54a2a635b28' 'erlang-ftp_27.3.4.1+dfsg-1+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Sources

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 22, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9

    Repository-signature verification record
    Signed-object SHA-256
    f439c50d207c42e50abd7db7804b0afa16eb57b67775cfa0996234176aeb26a1
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 23, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9
    Observed SHA-256
    b73a1740425aea0488611a259fc19dc11cfac8d606ee5f523a8c900144b243e9
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb

    Repository-signature verification record
    Signed-object SHA-256
    c13e14954da612661e2e587cb7322aa15f235cc84f8d2ca4a2706f314ee5145d
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Observed SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Result
    match verified