Red Hat Security Advisory

RHSA-2026:39809

Red Hat OpenStack Services on OpenShift 18.0 (erlang) security update

Released 2026-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Services on OpenShift 18.0 erlang-26.2.5.21-2.el9ost, erlang-asn1-26.2.5.21-2.el9ost, erlang-compiler-26.2.5.21-2.el9ost +17

Fixes 2 records

TI-2026-31010 CVE-2026-42790

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

LOW 35

Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in TLS hostname verification.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00345 Published 2026-05-27 Partial fix CWE-295

TI-2026-31009 CVE-2026-42789

Non-CA certificate accepted as intermediate issuer in public_key path validation

LOW 31

Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00383 Published 2026-05-27 Partial fix CWE-295