UnratedFix available
UBUNTU-CVE-2026-66835
Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash. httpd_request:validate_uri/1 normalises the request URI with uri_string:normalize/1, which performs RFC 3986 dot-segment removal but does not collapse empty path segments, so a doubled slash survives. mod_alias:real_name/3 concatenates the document root with that URI, and mod_auth:secret_path/3 then decides whether the result lies inside a protected directory block by running the configured directory path as an unanchored regular expression against it. The doubled slash breaks the contiguous substring the regex needs, so the request is treated as unprotected and no authentication challenge is issued, while mod_get opens the same path and the operating system collapses the doubled slash and returns the protected file. The same path mismatch also evades the per-path accounting in mod_security. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.
Announced Group revision 1
Original source ↗UBUNTU-CVE-2026-66835
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-66835
erlang
Source reference: /affected/0/package/name
- Affected versions
- 1:16.b.1-dfsg-4ubuntu1
Source reference:
/affected/0/versions1:16.b.2-dfsg-1ubuntu1Source reference:
/affected/0/versions1:16.b.2-dfsg-2ubuntu1Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu1Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2.1Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2.2Source reference:
/affected/0/versions1:16.b.3-dfsg-1ubuntu2.2+esm1Source reference:
/affected/0/versions - Fixed versions
- 1:16.b.3-dfsg-1ubuntu2.2+esm2
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/1/package/name
- Affected versions
- 1:18.0-dfsg-1ubuntu1
Source reference:
/affected/1/versions1:18.0-dfsg-1ubuntu2Source reference:
/affected/1/versions1:18.2-dfsg-2ubuntu1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu2Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3.1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3.1+esm1Source reference:
/affected/1/versions1:18.3-dfsg-1ubuntu3.1+esm2Source reference:
/affected/1/versions - Fixed versions
- 1:18.3-dfsg-1ubuntu3.1+esm3
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/2/package/name
- Affected versions
- 1:20.0.4+dfsg-1ubuntu1
Source reference:
/affected/2/versions1:20.1.2+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.3+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.4+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.5+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.6+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.1.7+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.2.1+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu1Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu2Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu2+esm1Source reference:
/affected/2/versions1:20.2.2+dfsg-1ubuntu2+esm2Source reference:
/affected/2/versions - Fixed versions
- 1:20.2.2+dfsg-1ubuntu2+esm3
Source reference:
/affected/2/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/3/package/name
- Affected versions
- 1:22.0.7+dfsg-1build1
Source reference:
/affected/3/versions1:22.2+dfsg-1Source reference:
/affected/3/versions1:22.2.1+dfsg-1Source reference:
/affected/3/versions1:22.2.2+dfsg-1Source reference:
/affected/3/versions1:22.2.3+dfsg-1Source reference:
/affected/3/versions1:22.2.3+dfsg-2Source reference:
/affected/3/versions1:22.2.4+dfsg-1Source reference:
/affected/3/versions1:22.2.7+dfsg-1Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.2Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.3Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.4Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.5Source reference:
/affected/3/versions1:22.2.7+dfsg-1ubuntu0.5+esm1Source reference:
/affected/3/versions - Fixed versions
- 1:22.2.7+dfsg-1ubuntu0.5+esm2
Source reference:
/affected/3/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/4/package/name
- Affected versions
- 1:23.2.6+dfsg-1build1
Source reference:
/affected/4/versions1:24.1.1+dfsg-1Source reference:
/affected/4/versions1:24.1.4+dfsg-1Source reference:
/affected/4/versions1:24.1.5+dfsg-1Source reference:
/affected/4/versions1:24.1.5+dfsg-1ubuntu1Source reference:
/affected/4/versions1:24.2+dfsg-1Source reference:
/affected/4/versions1:24.2.1+dfsg-1Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.1Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.2Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.3Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.4Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.5Source reference:
/affected/4/versions1:24.2.1+dfsg-1ubuntu0.6Source reference:
/affected/4/versions - Fixed versions
- 1:24.2.1+dfsg-1ubuntu0.7
Source reference:
/affected/4/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/5/package/name
- Affected versions
- 1:25.2.3+dfsg-1
Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu1Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu3Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.1Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.2Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.3Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.4Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.5Source reference:
/affected/5/versions1:25.3.2.8+dfsg-1ubuntu4.6Source reference:
/affected/5/versions - Fixed versions
- 1:25.3.2.8+dfsg-1ubuntu4.7
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
erlang
Source reference: /affected/6/package/name
- Affected versions
- 1:27.3.4.1+dfsg-1build1
Source reference:
/affected/6/versions1:27.3.4.3+dfsg-1Source reference:
/affected/6/versions1:27.3.4.4+dfsg-1Source reference:
/affected/6/versions1:27.3.4.6+dfsg-1Source reference:
/affected/6/versions - Fixed versions
- 1:27.3.4.6+dfsg-1ubuntu0.1
Source reference:
/affected/6/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"1:16.b.1-dfsg-4ubuntu1",
"1:16.b.2-dfsg-1ubuntu1",
"1:16.b.2-dfsg-2ubuntu1",
"1:16.b.3-dfsg-1ubuntu1",
"1:16.b.3-dfsg-1ubuntu2",
"1:16.b.3-dfsg-1ubuntu2.1",
"1:16.b.3-dfsg-1ubuntu2.2",
"1:16.b.3-dfsg-1ubuntu2.2+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-appmon",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-base",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-corba",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-et",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-gs",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ic",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ic-java",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-percept",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-pman",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-src",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-test-server",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-toolbar",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-tv",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-typer",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-webtool",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2+esm2"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:18.3-dfsg-1ubuntu3.1+esm3"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra-legacy%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1:18.0-dfsg-1ubuntu1",
"1:18.0-dfsg-1ubuntu2",
"1:18.2-dfsg-2ubuntu1",
"1:18.3-dfsg-1ubuntu1",
"1:18.3-dfsg-1ubuntu2",
"1:18.3-dfsg-1ubuntu3",
"1:18.3-dfsg-1ubuntu3.1",
"1:18.3-dfsg-1ubuntu3.1+esm1",
"1:18.3-dfsg-1ubuntu3.1+esm2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-base",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-corba",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-et",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-gs",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ic",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ic-java",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-percept",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-src",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-test-server",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-typer",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-webtool",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:18.3-dfsg-1ubuntu3.1+esm3"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:20.2.2+dfsg-1ubuntu2+esm3"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"1:20.0.4+dfsg-1ubuntu1",
"1:20.1.2+dfsg-1ubuntu1",
"1:20.1.3+dfsg-1ubuntu1",
"1:20.1.4+dfsg-1ubuntu1",
"1:20.1.5+dfsg-1ubuntu1",
"1:20.1.6+dfsg-1ubuntu1",
"1:20.1.7+dfsg-1ubuntu1",
"1:20.2.1+dfsg-1ubuntu1",
"1:20.2.2+dfsg-1ubuntu1",
"1:20.2.2+dfsg-1ubuntu2",
"1:20.2.2+dfsg-1ubuntu2+esm1",
"1:20.2.2+dfsg-1ubuntu2+esm2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-base",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-corba",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-et",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ic",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ic-java",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-src",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:20.2.2+dfsg-1ubuntu2+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"1:22.0.7+dfsg-1build1",
"1:22.2+dfsg-1",
"1:22.2.1+dfsg-1",
"1:22.2.2+dfsg-1",
"1:22.2.3+dfsg-1",
"1:22.2.3+dfsg-2",
"1:22.2.4+dfsg-1",
"1:22.2.7+dfsg-1",
"1:22.2.7+dfsg-1ubuntu0.2",
"1:22.2.7+dfsg-1ubuntu0.3",
"1:22.2.7+dfsg-1ubuntu0.4",
"1:22.2.7+dfsg-1ubuntu0.5",
"1:22.2.7+dfsg-1ubuntu0.5+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-base",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-base-hipe",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-et",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-src",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:22.2.7+dfsg-1ubuntu0.5+esm2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:24.2.1+dfsg-1ubuntu0.7"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1:23.2.6+dfsg-1build1",
"1:24.1.1+dfsg-1",
"1:24.1.4+dfsg-1",
"1:24.1.5+dfsg-1",
"1:24.1.5+dfsg-1ubuntu1",
"1:24.2+dfsg-1",
"1:24.2.1+dfsg-1",
"1:24.2.1+dfsg-1ubuntu0.1",
"1:24.2.1+dfsg-1ubuntu0.2",
"1:24.2.1+dfsg-1ubuntu0.3",
"1:24.2.1+dfsg-1ubuntu0.4",
"1:24.2.1+dfsg-1ubuntu0.5",
"1:24.2.1+dfsg-1ubuntu0.6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-base",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-et",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-src",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:24.2.1+dfsg-1ubuntu0.7"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:25.3.2.8+dfsg-1ubuntu4.7"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1:25.2.3+dfsg-1",
"1:25.3.2.8+dfsg-1",
"1:25.3.2.8+dfsg-1ubuntu1",
"1:25.3.2.8+dfsg-1ubuntu3",
"1:25.3.2.8+dfsg-1ubuntu4",
"1:25.3.2.8+dfsg-1ubuntu4.1",
"1:25.3.2.8+dfsg-1ubuntu4.2",
"1:25.3.2.8+dfsg-1ubuntu4.3",
"1:25.3.2.8+dfsg-1ubuntu4.4",
"1:25.3.2.8+dfsg-1ubuntu4.5",
"1:25.3.2.8+dfsg-1ubuntu4.6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-base",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-erl-docgen",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-et",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-manpages",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-src",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:25.3.2.8+dfsg-1ubuntu4.7"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:27.3.4.6+dfsg-1ubuntu0.1"
}
]
}
],
"package": {
"name": "erlang",
"purl": "pkg:deb/ubuntu/erlang?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1:27.3.4.1+dfsg-1build1",
"1:27.3.4.3+dfsg-1",
"1:27.3.4.4+dfsg-1",
"1:27.3.4.6+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-66835.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "erlang",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-asn1",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-base",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-common-test",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-crypto",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-debugger",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-dialyzer",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-diameter",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-edoc",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-eldap",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-et",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-eunit",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-examples",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-ftp",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-inets",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-jinterface",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-megaco",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-mnesia",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-mode",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-nox",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-observer",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-odbc",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-os-mon",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-parsetools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-public-key",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-reltool",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-runtime-tools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-snmp",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-src",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-ssh",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-ssl",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-syntax-tools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-tftp",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-tools",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-wx",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-x11",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
},
{
"binary_name": "erlang-xmerl",
"binary_version": "1:27.3.4.6+dfsg-1ubuntu0.1"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #23723 · Revision 1
- Added to Heist Feed
- Publisher date