Skip to content
Critical Information Disclosure Fix for Erlang in Fedora 43 and 44

Critical Information Disclosure Fix for Erlang in Fedora 43 and 44

First seen 23 Jun 2026, 02:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 24, 2026 at 02:01 UTC
  • •CVE-2026-48855 allows information disclosure via symlink resolution in SFTP.
  • •Fedora 43 and 44 users are affected; updates were released on June 13, 2026.
  • •Users should apply the patch using the 'dnf' update program to secure their systems.

Fedora has released important updates for Erlang to address CVE-2026-48855, a vulnerability that allows information disclosure through symlink resolution in SFTP. This flaw affects users of Fedora 43 and 44, with the fix backported by Peter Lemenkov. The CVE was published on June 10, 2026, and the updates were made available on June 13, 2026. Users are advised to upgrade their systems using the 'dnf' update program to mitigate the risk. The vulnerability could potentially expose sensitive information, impacting security for applications relying on Erlang's SSH capabilities. The updates are critical for maintaining system integrity and user privacy.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 90d ago How this analysis works

Timeline

2026-06-10
CVE-2026-48855 published
CVE-2026-48855 was published, detailing an information disclosure vulnerability in Erlang's SSH.
Linuxsecurity
2026-06-13
Fedora releases updates for Erlang
Peter Lemenkov backported fixes for CVE-2026-48855 in Fedora 43 and 44.
Linuxsecurity
2026-06-23
Security advisory published
Linuxsecurity published advisories for Fedora 43 and 44 regarding the critical fix for Erlang.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Fedora and CVE-2026-48855 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3