Red Hat Security Advisory

RHSA-2026:83217

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images erlang27-27.3.4.19-0.1.hum1@aarch64, erlang27-27.3.4.19-0.1.hum1@s390x, erlang27-27.3.4.19-0.1.hum1@src +47

Fixes 2 records

TI-2026-74334 CVE-2026-94200

Erlang OTP ssl client crash from malicious NewSessionTicket early_data

LOW 36

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00461 Published 2026-10-14 Partial fix CWE-1288

TI-2026-74310 CVE-2026-105236

Erlang/OTP session resumption skips SNI client certificate checks

LOW 28

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listene…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00357 Published 2026-10-14 Partial fix CWE-295