openSUSE erlang27 Key Denial of Service and Buffer Overflow Fix 2026

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

This update for erlang27 fixes the following issues:

* CVE-2026-42792: epmd permanent DoS via EMFILE on accept(2) in erts

* CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via

check_dir_level depth-counter bypass (bsc#1272909).

* CVE-2026-48855: Exposure of Sensitive Information to an Unauthorized Actor

vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery.

The SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of

file:read_l (bsc#1268139).

* CVE-2026-48856: Sensitive Data Exposure vulnerability in Erlang OTP inets

(httpc_response module) allows Retrieve Embedded Sensitive Data. The httpc

client forwards the Authorization and Proxy-Authorization request headers to

* CVE-2026-48858: Server-Side Request Forgery (SSRF) allows FTP bounce attacks

and SSRF via an unvalidated PASV response IP address (bsc#1268142).

* CVE-2026-48860: Erlang/OTP ssl (inet_tls_dist module)...

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-4358

* openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64)

* erlang27-diameter-27.1.3-150300.7.7.1

* erlang27-epmd-debuginfo-27.1.3-150300.7.7.1

* erlang27-jinterface-27.1.3-150300.7.7.1

* erlang27-jinterface-src-27.1.3-150300.7.7.1

* erlang27-reltool-27.1.3-150300.7.7.1

* erlang27-debugsource-27.1.3-150300.7.7.1

* erlang27-dialyzer-src-27.1.3-150300.7.7.1

* erlang27-27.1.3-150300.7.7.1

* erlang27-epmd-27.1.3-150300.7.7.1

* erlang27-diameter-src-27.1.3-150300.7.7.1

* erlang27-debuginfo-27.1.3-150300.7.7.1

* erlang27-dialyzer-27.1.3-150300.7.7.1

* erlang27-reltool-src-27.1.3-150300.7.7.1

* erlang27-dialyzer-debuginfo-27.1.3-150300.7.7.1

* erlang27-src-27.1.3-150300.7.7.1

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases