OESA-2025-1492

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1492
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1492.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1492
Upstream
Published
2025-05-09T12:43:06Z
Modified
2025-08-12T05:50:02.886047Z
Summary
erlang security update
Details

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson.

Security Fix(es):

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names (64 characters) provided in KEX init message. Big KEX init packet may lead to inefficient processing of the error data. As a result, large amount of memory will be allocated for processing malicious data. Versions OTP-27.3.1, OTP-26.2.5.10, and OTP-25.3.2.19 fix the issue. Some workarounds are available. One may set option parallel_login to false and/or reduce the max_sessions option.(CVE-2025-30211)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS-SP4 / erlang

Package

Name
erlang
Purl
pkg:rpm/openEuler/erlang&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.3.4.9-6.oe2203sp4

Ecosystem specific 

{
    "aarch64": [
        "erlang-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-asn1-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-common_test-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-compiler-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-crypto-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-debugger-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-debuginfo-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-debugsource-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-dialyzer-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-diameter-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-edoc-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-eldap-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-erl_docgen-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-erl_interface-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-erts-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-et-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-eunit-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-examples-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-ftp-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-hipe-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-inets-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-jinterface-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-kernel-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-megaco-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-mnesia-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-observer-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-odbc-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-os_mon-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-parsetools-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-public_key-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-reltool-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-runtime_tools-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-sasl-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-snmp-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-ssh-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-ssl-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-stdlib-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-syntax_tools-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-tftp-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-tools-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-wx-23.3.4.9-6.oe2203sp4.aarch64.rpm",
        "erlang-xmerl-23.3.4.9-6.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "erlang-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-asn1-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-common_test-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-compiler-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-crypto-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-debugger-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-debuginfo-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-debugsource-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-dialyzer-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-diameter-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-edoc-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-eldap-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-erl_docgen-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-erl_interface-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-erts-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-et-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-eunit-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-examples-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-ftp-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-hipe-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-inets-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-jinterface-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-kernel-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-megaco-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-mnesia-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-observer-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-odbc-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-os_mon-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-parsetools-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-public_key-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-reltool-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-runtime_tools-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-sasl-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-snmp-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-ssh-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-ssl-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-stdlib-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-syntax_tools-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-tftp-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-tools-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-wx-23.3.4.9-6.oe2203sp4.x86_64.rpm",
        "erlang-xmerl-23.3.4.9-6.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "erlang-23.3.4.9-6.oe2203sp4.src.rpm"
    ]
}