UnratedFix available
UBUNTU-CVE-2026-55951
The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers/6 accumulates every header into a list before the length check runs (which only fires after the terminating CRLF CRLF is received). A malicious or compromised HTTP server can send an arbitrarily large number of headers, or headers with very large values, causing the client process to allocate unbounded memory until the system runs out of memory or the BEAM VM crashes. A proof-of-concept server sending 100,000 headers of roughly 4000 bytes each caused the client VM to allocate over 13 GB of memory in under 30 seconds. Any application using httpc:request/4,5 to connect to untrusted servers is affected. No authentication is required: any server the client connects to (including via a redirect or man-in-the-middle) can trigger the exhaustion. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.
Announced Group revision 1
Original source ↗UBUNTU-CVE-2026-55951
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-55951
erlang
Source reference: /affected/0/package/name
- Affected versions
- 1:16.b.1-dfsg-4ubuntu1
Source reference:
/affected/0/versions1:16.b.2-dfsg-1ubuntu1Source reference:
/affected/0/versions1:16.b.2-dfsg-2ubuntu1Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu1Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2.1Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2.2Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2.2+esm1Source reference:
/affected/0/versions - Fixed versions
- 1:16.b.3-dfsg-1ubuntu2.2+esm2
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/1/package/name
- Affected versions
- 1:18.0-dfsg-1ubuntu1
Source reference:
/affected/1/versions1:18.0-dfsg-1ubuntu2Source reference:
/affected/1/versions1:18.2-dfsg-2ubuntu1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu2Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3.1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3.1+esm1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3.1+esm2Source reference:
/affected/1/versions - Fixed versions
- 1:18.3-dfsg-1ubuntu3.1+esm3
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/2/package/name
- Affected versions
- 1:20.0.4+dfsg-1ubuntu1
Source reference:
/affected/2/versions1:20.1.2+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.3+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.4+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.5+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.6+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.7+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.2.1+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu2Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu2+esm1Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu2+esm2Source reference:
/affected/2/versions - Fixed versions
- 1:20.2.2+dfsg-1ubuntu2+esm3
Source reference:
/affected/2/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/3/package/name
- Affected versions
- 1:22.0.7+dfsg-1build1
Source reference:
/affected/3/versions1:22.2+dfsg-1Source reference:
/affected/3/versions1:22.2.1+dfsg-1Source reference:
/affected/3/versions1:22.2.2+dfsg-1Source reference:
/affected/3/versions1:22.2.3+dfsg-1Source reference:
/affected/3/versions1:22.2.3+dfsg-2Source reference:
/affected/3/versions1:22.2.4+dfsg-1Source reference:
/affected/3/versions1:22.2.7+dfsg-1Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.2Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.3Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.4Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.5Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.5+esm1Source reference:
/affected/3/versions - Fixed versions
- 1:22.2.7+dfsg-1ubuntu0.5+esm2
Source reference:
/affected/3/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/4/package/name
- Affected versions
- 1:23.2.6+dfsg-1build1
Source reference:
/affected/4/versions1:24.1.1+dfsg-1Source reference:
/affected/4/versions1:24.1.4+dfsg-1Source reference:
/affected/4/versions1:24.1.5+dfsg-1Source reference:
/affected/4/versions1:24.1.5+dfsg-1ubuntu1Source reference:
/affected/4/versions1:24.2+dfsg-1Source reference:
/affected/4/versions1:24.2.1+dfsg-1Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.1Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.2Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.3Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.4Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.5Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.6Source reference:
/affected/4/versions - Fixed versions
- 1:24.2.1+dfsg-1ubuntu0.7
Source reference:
/affected/4/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/5/package/name
- Affected versions
- 1:25.2.3+dfsg-1
Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu1Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu3Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.1Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.2Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.3Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.4Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.5Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.6Source reference:
/affected/5/versions - Fixed versions
- 1:25.3.2.8+dfsg-1ubuntu4.7
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/6/package/name
- Affected versions
- 1:27.3.4.1+dfsg-1build1
Source reference:
/affected/6/versions1:27.3.4.3+dfsg-1Source reference:
/affected/6/versions1:27.3.4.4+dfsg-1Source reference:
/affected/6/versions1:27.3.4.6+dfsg-1Source reference:
/affected/6/versions - Fixed versions
- 1:27.3.4.6+dfsg-1ubuntu0.1
Source reference:
/affected/6/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"1:16.b.1-dfsg-4ubuntu1",
"1:16.b.2-dfsg-1ubuntu1",
"1:16.b.2-dfsg-2ubuntu1",
"1:16.b.3-dfsg-1ubuntu1",
"1:16.b.3-dfsg-1ubuntu2",
"1:16.b.3-dfsg-1ubuntu2.1",
"1:16.b.3-dfsg-1ubuntu2.2",
"1:16.b.3-dfsg-1ubuntu2.2+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-appmon",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-base",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-corba",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-et",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-gs",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ic",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ic-java",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-percept",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-pman",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-src",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-test-server",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-toolbar",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-tv",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-typer",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-webtool",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:18.3-dfsg-1ubuntu3.1+esm3"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra-legacy%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1:18.0-dfsg-1ubuntu1",
"1:18.0-dfsg-1ubuntu2",
"1:18.2-dfsg-2ubuntu1",
"1:18.3-dfsg-1ubuntu1",
"1:18.3-dfsg-1ubuntu2",
"1:18.3-dfsg-1ubuntu3",
"1:18.3-dfsg-1ubuntu3.1",
"1:18.3-dfsg-1ubuntu3.1+esm1",
"1:18.3-dfsg-1ubuntu3.1+esm2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-base",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-corba",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-et",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-gs",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ic",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ic-java",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-percept",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-src",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-test-server",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-typer",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-webtool",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:20.2.2+dfsg-1ubuntu2+esm3"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"1:20.0.4+dfsg-1ubuntu1",
"1:20.1.2+dfsg-1ubuntu1",
"1:20.1.3+dfsg-1ubuntu1",
"1:20.1.4+dfsg-1ubuntu1",
"1:20.1.5+dfsg-1ubuntu1",
"1:20.1.6+dfsg-1ubuntu1",
"1:20.1.7+dfsg-1ubuntu1",
"1:20.2.1+dfsg-1ubuntu1",
"1:20.2.2+dfsg-1ubuntu1",
"1:20.2.2+dfsg-1ubuntu2",
"1:20.2.2+dfsg-1ubuntu2+esm1",
"1:20.2.2+dfsg-1ubuntu2+esm2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-base",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-corba",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-et",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ic",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ic-java",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-src",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"1:22.0.7+dfsg-1build1",
"1:22.2+dfsg-1",
"1:22.2.1+dfsg-1",
"1:22.2.2+dfsg-1",
"1:22.2.3+dfsg-1",
"1:22.2.3+dfsg-2",
"1:22.2.4+dfsg-1",
"1:22.2.7+dfsg-1",
"1:22.2.7+dfsg-1ubuntu0.2",
"1:22.2.7+dfsg-1ubuntu0.3",
"1:22.2.7+dfsg-1ubuntu0.4",
"1:22.2.7+dfsg-1ubuntu0.5",
"1:22.2.7+dfsg-1ubuntu0.5+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-base",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-et",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-src",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:24.2.1+dfsg-1ubuntu0.7"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1:23.2.6+dfsg-1build1",
"1:24.1.1+dfsg-1",
"1:24.1.4+dfsg-1",
"1:24.1.5+dfsg-1",
"1:24.1.5+dfsg-1ubuntu1",
"1:24.2+dfsg-1",
"1:24.2.1+dfsg-1",
"1:24.2.1+dfsg-1ubuntu0.1",
"1:24.2.1+dfsg-1ubuntu0.2",
"1:24.2.1+dfsg-1ubuntu0.3",
"1:24.2.1+dfsg-1ubuntu0.4",
"1:24.2.1+dfsg-1ubuntu0.5",
"1:24.2.1+dfsg-1ubuntu0.6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-base",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-et",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-src",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:25.3.2.8+dfsg-1ubuntu4.7"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1:25.2.3+dfsg-1",
"1:25.3.2.8+dfsg-1",
"1:25.3.2.8+dfsg-1ubuntu1",
"1:25.3.2.8+dfsg-1ubuntu3",
"1:25.3.2.8+dfsg-1ubuntu4",
"1:25.3.2.8+dfsg-1ubuntu4.1",
"1:25.3.2.8+dfsg-1ubuntu4.2",
"1:25.3.2.8+dfsg-1ubuntu4.3",
"1:25.3.2.8+dfsg-1ubuntu4.4",
"1:25.3.2.8+dfsg-1ubuntu4.5",
"1:25.3.2.8+dfsg-1ubuntu4.6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-base",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-et",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-src",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:27.3.4.6+dfsg-1ubuntu0.1"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1:27.3.4.1+dfsg-1build1",
"1:27.3.4.3+dfsg-1",
"1:27.3.4.4+dfsg-1",
"1:27.3.4.6+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-55951.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-base",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-et",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-src",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #23731 · Revision 1
- Added to Heist Feed
- Publisher date