UbuntuUpdates.org

Package "erlang"

Name: erlang

Description:

Concurrent, real-time, distributed functional language
Latest version: 1:18.3-dfsg-1ubuntu3.1
Release: xenial (16.04)
Level: security
Repository: universe
Homepage: http://www.erlang.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "erlang"

All arch deb package
APT INSTALL

Other versions of "erlang" in Xenial

Repository Area Version
base main 1:18.3-dfsg-1ubuntu3
base universe 1:18.3-dfsg-1ubuntu3
security main 1:18.3-dfsg-1ubuntu3.1
updates main 1:18.3-dfsg-1ubuntu3.1
updates universe 1:18.3-dfsg-1ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:18.3-dfsg-1ubuntu3.1 2018-02-14 16:07:08 UTC

  erlang (1:18.3-dfsg-1ubuntu3.1) xenial-security; urgency=medium

  * SECURITY UPDATE: heap overflow in PCRE
    - debian/patches/CVE-2016-10253.patch: add mutual recursion detection
      to erts/emulator/pcre/pcre_compile.c.
    - CVE-2016-10253
  * SECURITY UPDATE: Adaptive Chosen Ciphertext attack in TLS server
    - debian/patches/CVE-2017-1000385.patch: add countermeasurements for
      Bleichenbacher attack in lib/ssl/src/ssl_connection.erl,
      lib/ssl/src/ssl_connection.hrl, lib/ssl/src/tls_connection.erl.
    - CVE-2017-1000385

 -- Marc Deslauriers <email address hidden> Thu, 07 Dec 2017 08:07:14 -0500
CVE-2016-10253 An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions


About   -   Send Feedback to @ubuntu_updates