* Fri Jun 12 2026 Peter Lemenkov - 2.4.1-1 - gun ver. 2.4.1 * Wed Jun 10 2026 Peter Lemenkov - 2.4.0-1 - gun ver. 2.4.0
* Fri Jun 12 2026 Peter Lemenkov - 2.4.1-1 - gun ver. 2.4.1 * Wed Jun 10 2026 Peter Lemenkov - 2.4.0-1 - gun ver. 2.4.0
[ 1 ] Bug #2486315 - erlang-cowlib-2.17.0 is available [ 2 ] Bug #2486350 - erlang-gun-2.4.0 is available [ 3 ] Bug #2486422 - CVE-2026-43972 erlang-gun: Gun: Cross-origin cookie injection leading to session fixation and account takeover. [fedora-all] [ 4 ] Bug #2486423 - CVE-2026-43974 erlang-gun: gun: Denial of Service via unsolicited 101 Switching Protocols response [fedora-all] [ 5 ] Bug #2486424 - CVE-2026-43973 erlang-gun: gun: Denial of Service via unbounded HTTP/1.1 response buffering [fedora-all] [ 6 ] Bug #2487823 - erlang-cowboy-2.16.1 is available [ 7 ] Bug #2487824 - erlang-cowlib-2.17.1 is ...
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2aa86d411f' at the command line. For more information, refer to the dnf documentation available at
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
