Red Hat Security Advisory

RHSA-2022:8857

Red Hat OpenStack Platform 16.2.4 (erlang) security update

Released 2022-12-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.2 erlang-23.3.4.18-1.el8ost, erlang-asn1-23.3.4.18-1.el8ost, erlang-compiler-23.3.4.18-1.el8ost +18

Fixes 1 record

TI-2022-17230 CVE-2022-37026 · GHSA-f399-ff4w-62fm

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a…

MEDIUM 45

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01487 Published 2022-09-21 Partial fix