{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42789.json" } ], "title": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation", "tracking": { "current_release_date": "2026-07-15T12:20:28+00:00", "generator": { "date": "2026-07-15T12:20:28+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.2" } }, "id": "CVE-2026-42789", "initial_release_date": "2026-05-27T12:23:06.355000+00:00", "revision_history": [ { "date": "2026-05-27T12:23:06.355000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-06-08T11:10:35+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-07-15T12:20:28+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 16.2", "product": { "name": "Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:16.2" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform 16.2" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 17.1", "product": { "name": "Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform 17.1" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Services on OpenShift 18.0", "product": { "name": "Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:18.0::el9" } } } ], "category": "product_family", "name": "Red Hat OpenStack Services on OpenShift" }, { "category": "product_version", "name": "erlang-hipe", "product": { "name": "erlang-hipe", "product_id": "erlang-hipe", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-hipe" } } }, { "category": "product_version", "name": "erlang-ssl", "product": { "name": "erlang-ssl", "product_id": "erlang-ssl", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-ssl" } } }, { "category": "product_version", "name": "erlang-parsetools", "product": { "name": "erlang-parsetools", "product_id": "erlang-parsetools", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-parsetools" } } }, { "category": "product_version", "name": "erlang-tools", "product": { "name": "erlang-tools", "product_id": "erlang-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-tools" } } }, { "category": "product_version", "name": "erlang-kernel", "product": { "name": "erlang-kernel", "product_id": "erlang-kernel", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-kernel" } } }, { "category": "product_version", "name": "erlang-stdlib", "product": { "name": "erlang-stdlib", "product_id": "erlang-stdlib", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-stdlib" } } }, { "category": "product_version", "name": "erlang.src", "product": { "name": "erlang.src", "product_id": "erlang.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang?arch=src" } } }, { "category": "product_version", "name": "erlang-eldap", "product": { "name": "erlang-eldap", "product_id": "erlang-eldap", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-eldap" } } }, { "category": "product_version", "name": "erlang-crypto", "product": { "name": "erlang-crypto", "product_id": "erlang-crypto", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-crypto" } } }, { "category": "product_version", "name": "erlang-syntax_tools", "product": { "name": "erlang-syntax_tools", "product_id": "erlang-syntax_tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-syntax_tools" } } }, { "category": "product_version", "name": "erlang-public_key", "product": { "name": "erlang-public_key", "product_id": "erlang-public_key", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-public_key" } } }, { "category": "product_version", "name": "erlang-sasl", "product": { "name": "erlang-sasl", "product_id": "erlang-sasl", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-sasl" } } }, { "category": "product_version", "name": "erlang-xmerl", "product": { "name": "erlang-xmerl", "product_id": "erlang-xmerl", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-xmerl" } } }, { "category": "product_version", "name": "erlang-compiler", "product": { "name": "erlang-compiler", "product_id": "erlang-compiler", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-compiler" } } }, { "category": "product_version", "name": "erlang-os_mon", "product": { "name": "erlang-os_mon", "product_id": "erlang-os_mon", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-os_mon" } } }, { "category": "product_version", "name": "erlang-snmp", "product": { "name": "erlang-snmp", "product_id": "erlang-snmp", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-snmp" } } }, { "category": "product_version", "name": "erlang-asn1", "product": { "name": "erlang-asn1", "product_id": "erlang-asn1", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-asn1" } } }, { "category": "product_version", "name": "erlang-erts", "product": { "name": "erlang-erts", "product_id": "erlang-erts", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-erts" } } }, { "category": "product_version", "name": "erlang-inets", "product": { "name": "erlang-inets", "product_id": "erlang-inets", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-inets" } } }, { "category": "product_version", "name": "erlang-runtime_tools", "product": { "name": "erlang-runtime_tools", "product_id": "erlang-runtime_tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-runtime_tools" } } }, { "category": "product_version", "name": "erlang-mnesia", "product": { "name": "erlang-mnesia", "product_id": "erlang-mnesia", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-mnesia" } } }, { "branches": [ { "category": "product_version", "name": "erlang-0:26.2.5.21-2.el9ost.src", "product": { "name": "erlang-0:26.2.5.21-2.el9ost.src", "product_id": "erlang-0:26.2.5.21-2.el9ost.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang@26.2.5.21-2.el9ost?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-asn1@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-compiler@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-crypto@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-eldap@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-erts@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-inets@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-kernel@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-mnesia@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-os_mon@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-parsetools@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-public_key@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-runtime_tools@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-sasl@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-snmp@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-ssl@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-stdlib@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-syntax_tools@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-tools@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-xmerl@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-debugsource@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-erts-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-gdb-tools-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } }, { "category": "product_version", "name": "erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product": { "name": "erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_id": "erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@26.2.5.21-2.el9ost?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "erlang-0:26.2.5.21-2.el9ost.src as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-0:26.2.5.21-2.el9ost.src" }, "product_reference": "erlang-0:26.2.5.21-2.el9ost.src", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-asn1-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-asn1-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-compiler-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-compiler-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-crypto-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-crypto-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-eldap-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-eldap-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-erts-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-erts-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-inets-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-inets-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-kernel-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-kernel-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-public_key-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-public_key-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-sasl-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-sasl-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-snmp-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-snmp-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-ssl-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-ssl-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-tools-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-tools-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0", "product_id": "9Base-RHOSO-18.0:erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64" }, "product_reference": "erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "relates_to_product_reference": "9Base-RHOSO-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-asn1 as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-asn1" }, "product_reference": "erlang-asn1", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-compiler as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-compiler" }, "product_reference": "erlang-compiler", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-crypto as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-crypto" }, "product_reference": "erlang-crypto", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-eldap as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-eldap" }, "product_reference": "erlang-eldap", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-erts as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-erts" }, "product_reference": "erlang-erts", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-hipe as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-hipe" }, "product_reference": "erlang-hipe", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-inets as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-inets" }, "product_reference": "erlang-inets", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-kernel as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-kernel" }, "product_reference": "erlang-kernel", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-mnesia as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-mnesia" }, "product_reference": "erlang-mnesia", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-os_mon as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-os_mon" }, "product_reference": "erlang-os_mon", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-parsetools as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-parsetools" }, "product_reference": "erlang-parsetools", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-public_key as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-public_key" }, "product_reference": "erlang-public_key", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-runtime_tools as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-runtime_tools" }, "product_reference": "erlang-runtime_tools", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-sasl as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-sasl" }, "product_reference": "erlang-sasl", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-snmp as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-snmp" }, "product_reference": "erlang-snmp", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-ssl as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-ssl" }, "product_reference": "erlang-ssl", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-stdlib as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-stdlib" }, "product_reference": "erlang-stdlib", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-syntax_tools as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-syntax_tools" }, "product_reference": "erlang-syntax_tools", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-tools as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-tools" }, "product_reference": "erlang-tools", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-xmerl as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang-xmerl" }, "product_reference": "erlang-xmerl", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang.src as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:erlang.src" }, "product_reference": "erlang.src", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-asn1 as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-asn1" }, "product_reference": "erlang-asn1", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-compiler as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-compiler" }, "product_reference": "erlang-compiler", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-crypto as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-crypto" }, "product_reference": "erlang-crypto", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-eldap as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-eldap" }, "product_reference": "erlang-eldap", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-erts as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-erts" }, "product_reference": "erlang-erts", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-inets as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-inets" }, "product_reference": "erlang-inets", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-kernel as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-kernel" }, "product_reference": "erlang-kernel", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-mnesia as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-mnesia" }, "product_reference": "erlang-mnesia", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-os_mon as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-os_mon" }, "product_reference": "erlang-os_mon", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-parsetools as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-parsetools" }, "product_reference": "erlang-parsetools", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-public_key as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-public_key" }, "product_reference": "erlang-public_key", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-runtime_tools as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-runtime_tools" }, "product_reference": "erlang-runtime_tools", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-sasl as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-sasl" }, "product_reference": "erlang-sasl", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-snmp as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-snmp" }, "product_reference": "erlang-snmp", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-ssl as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-ssl" }, "product_reference": "erlang-ssl", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-stdlib as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-stdlib" }, "product_reference": "erlang-stdlib", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-syntax_tools as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-syntax_tools" }, "product_reference": "erlang-syntax_tools", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-tools as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-tools" }, "product_reference": "erlang-tools", "relates_to_product_reference": "red_hat_openstack_platform_17.1" }, { "category": "default_component_of", "full_product_name": { "name": "erlang-xmerl as a component of Red Hat OpenStack Platform 17.1", "product_id": "red_hat_openstack_platform_17.1:erlang-xmerl" }, "product_reference": "erlang-xmerl", "relates_to_product_reference": "red_hat_openstack_platform_17.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-42789", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2026-05-27T15:10:36.175135+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2482093" } ], "notes": [ { "category": "description", "text": "A flaw was found in Erlang OTP's public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.", "title": "Vulnerability description" }, { "category": "summary", "text": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important vulnerability where Erlang OTP's `public_key` module improperly validates certificate chains. A remote attacker with an existing end-entity certificate from a trusted Certificate Authority can forge new leaf certificates, leading to compromised server or client identity verification in TLS/mTLS connections. This impacts applications within Red Hat OpenStack Platform and Community Projects that utilize the default verifier in the OTP `ssl` application. Because an attacker must be able to create or locate a certificate with specific attributes, Red Hat assesses the impact of this vulnerability as Important.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOSO-18.0:erlang-0:26.2.5.21-2.el9ost.src", "9Base-RHOSO-18.0:erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64" ], "known_affected": [ "red_hat_openstack_platform_16.2:erlang-asn1", "red_hat_openstack_platform_16.2:erlang-compiler", "red_hat_openstack_platform_16.2:erlang-crypto", "red_hat_openstack_platform_16.2:erlang-eldap", "red_hat_openstack_platform_16.2:erlang-erts", "red_hat_openstack_platform_16.2:erlang-hipe", "red_hat_openstack_platform_16.2:erlang-inets", "red_hat_openstack_platform_16.2:erlang-kernel", "red_hat_openstack_platform_16.2:erlang-mnesia", "red_hat_openstack_platform_16.2:erlang-os_mon", "red_hat_openstack_platform_16.2:erlang-parsetools", "red_hat_openstack_platform_16.2:erlang-public_key", "red_hat_openstack_platform_16.2:erlang-runtime_tools", "red_hat_openstack_platform_16.2:erlang-sasl", "red_hat_openstack_platform_16.2:erlang-snmp", "red_hat_openstack_platform_16.2:erlang-ssl", "red_hat_openstack_platform_16.2:erlang-stdlib", "red_hat_openstack_platform_16.2:erlang-syntax_tools", "red_hat_openstack_platform_16.2:erlang-tools", "red_hat_openstack_platform_16.2:erlang-xmerl", "red_hat_openstack_platform_16.2:erlang.src", "red_hat_openstack_platform_17.1:erlang-asn1", "red_hat_openstack_platform_17.1:erlang-compiler", "red_hat_openstack_platform_17.1:erlang-crypto", "red_hat_openstack_platform_17.1:erlang-eldap", "red_hat_openstack_platform_17.1:erlang-erts", "red_hat_openstack_platform_17.1:erlang-inets", "red_hat_openstack_platform_17.1:erlang-kernel", "red_hat_openstack_platform_17.1:erlang-mnesia", "red_hat_openstack_platform_17.1:erlang-os_mon", "red_hat_openstack_platform_17.1:erlang-parsetools", "red_hat_openstack_platform_17.1:erlang-public_key", "red_hat_openstack_platform_17.1:erlang-runtime_tools", "red_hat_openstack_platform_17.1:erlang-sasl", "red_hat_openstack_platform_17.1:erlang-snmp", "red_hat_openstack_platform_17.1:erlang-ssl", "red_hat_openstack_platform_17.1:erlang-stdlib", "red_hat_openstack_platform_17.1:erlang-syntax_tools", "red_hat_openstack_platform_17.1:erlang-tools", "red_hat_openstack_platform_17.1:erlang-xmerl" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-42789" }, { "category": "external", "summary": "RHBZ#2482093", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42789", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42789" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789" }, { "category": "external", "summary": "https://cna.erlef.org/cves/CVE-2026-42789.html", "url": "https://cna.erlef.org/cves/CVE-2026-42789.html" }, { "category": "external", "summary": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db", "url": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db" }, { "category": "external", "summary": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd", "url": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd" }, { "category": "external", "summary": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq", "url": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq" }, { "category": "external", "summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42789", "url": "https://osv.dev/vulnerability/EEF-CVE-2026-42789" }, { "category": "external", "summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions", "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions" } ], "release_date": "2026-05-27T12:23:06.355000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-15T09:55:47+00:00", "details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "9Base-RHOSO-18.0:erlang-0:26.2.5.21-2.el9ost.src", "9Base-RHOSO-18.0:erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64" ], "url": "https://access.redhat.com/errata/RHSA-2026:39809" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "9Base-RHOSO-18.0:erlang-0:26.2.5.21-2.el9ost.src", "9Base-RHOSO-18.0:erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "red_hat_openstack_platform_16.2:erlang-asn1", "red_hat_openstack_platform_16.2:erlang-compiler", "red_hat_openstack_platform_16.2:erlang-crypto", "red_hat_openstack_platform_16.2:erlang-eldap", "red_hat_openstack_platform_16.2:erlang-erts", "red_hat_openstack_platform_16.2:erlang-hipe", "red_hat_openstack_platform_16.2:erlang-inets", "red_hat_openstack_platform_16.2:erlang-kernel", "red_hat_openstack_platform_16.2:erlang-mnesia", "red_hat_openstack_platform_16.2:erlang-os_mon", "red_hat_openstack_platform_16.2:erlang-parsetools", "red_hat_openstack_platform_16.2:erlang-public_key", "red_hat_openstack_platform_16.2:erlang-runtime_tools", "red_hat_openstack_platform_16.2:erlang-sasl", "red_hat_openstack_platform_16.2:erlang-snmp", "red_hat_openstack_platform_16.2:erlang-ssl", "red_hat_openstack_platform_16.2:erlang-stdlib", "red_hat_openstack_platform_16.2:erlang-syntax_tools", "red_hat_openstack_platform_16.2:erlang-tools", "red_hat_openstack_platform_16.2:erlang-xmerl", "red_hat_openstack_platform_16.2:erlang.src", "red_hat_openstack_platform_17.1:erlang-asn1", "red_hat_openstack_platform_17.1:erlang-compiler", "red_hat_openstack_platform_17.1:erlang-crypto", "red_hat_openstack_platform_17.1:erlang-eldap", "red_hat_openstack_platform_17.1:erlang-erts", "red_hat_openstack_platform_17.1:erlang-inets", "red_hat_openstack_platform_17.1:erlang-kernel", "red_hat_openstack_platform_17.1:erlang-mnesia", "red_hat_openstack_platform_17.1:erlang-os_mon", "red_hat_openstack_platform_17.1:erlang-parsetools", "red_hat_openstack_platform_17.1:erlang-public_key", "red_hat_openstack_platform_17.1:erlang-runtime_tools", "red_hat_openstack_platform_17.1:erlang-sasl", "red_hat_openstack_platform_17.1:erlang-snmp", "red_hat_openstack_platform_17.1:erlang-ssl", "red_hat_openstack_platform_17.1:erlang-stdlib", "red_hat_openstack_platform_17.1:erlang-syntax_tools", "red_hat_openstack_platform_17.1:erlang-tools", "red_hat_openstack_platform_17.1:erlang-xmerl" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_openstack_platform_16.2:erlang-asn1", "red_hat_openstack_platform_16.2:erlang-compiler", "red_hat_openstack_platform_16.2:erlang-crypto", "red_hat_openstack_platform_16.2:erlang-eldap", "red_hat_openstack_platform_16.2:erlang-erts", "red_hat_openstack_platform_16.2:erlang-hipe", "red_hat_openstack_platform_16.2:erlang-inets", "red_hat_openstack_platform_16.2:erlang-kernel", "red_hat_openstack_platform_16.2:erlang-mnesia", "red_hat_openstack_platform_16.2:erlang-os_mon", "red_hat_openstack_platform_16.2:erlang-parsetools", "red_hat_openstack_platform_16.2:erlang-public_key", "red_hat_openstack_platform_16.2:erlang-runtime_tools", "red_hat_openstack_platform_16.2:erlang-sasl", "red_hat_openstack_platform_16.2:erlang-snmp", "red_hat_openstack_platform_16.2:erlang-ssl", "red_hat_openstack_platform_16.2:erlang-stdlib", "red_hat_openstack_platform_16.2:erlang-syntax_tools", "red_hat_openstack_platform_16.2:erlang-tools", "red_hat_openstack_platform_16.2:erlang-xmerl", "red_hat_openstack_platform_16.2:erlang.src", "red_hat_openstack_platform_17.1:erlang-asn1", "red_hat_openstack_platform_17.1:erlang-compiler", "red_hat_openstack_platform_17.1:erlang-crypto", "red_hat_openstack_platform_17.1:erlang-eldap", "red_hat_openstack_platform_17.1:erlang-erts", "red_hat_openstack_platform_17.1:erlang-inets", "red_hat_openstack_platform_17.1:erlang-kernel", "red_hat_openstack_platform_17.1:erlang-mnesia", "red_hat_openstack_platform_17.1:erlang-os_mon", "red_hat_openstack_platform_17.1:erlang-parsetools", "red_hat_openstack_platform_17.1:erlang-public_key", "red_hat_openstack_platform_17.1:erlang-runtime_tools", "red_hat_openstack_platform_17.1:erlang-sasl", "red_hat_openstack_platform_17.1:erlang-snmp", "red_hat_openstack_platform_17.1:erlang-ssl", "red_hat_openstack_platform_17.1:erlang-stdlib", "red_hat_openstack_platform_17.1:erlang-syntax_tools", "red_hat_openstack_platform_17.1:erlang-tools", "red_hat_openstack_platform_17.1:erlang-xmerl" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "9Base-RHOSO-18.0:erlang-0:26.2.5.21-2.el9ost.src", "9Base-RHOSO-18.0:erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "red_hat_openstack_platform_16.2:erlang-asn1", "red_hat_openstack_platform_16.2:erlang-compiler", "red_hat_openstack_platform_16.2:erlang-crypto", "red_hat_openstack_platform_16.2:erlang-eldap", "red_hat_openstack_platform_16.2:erlang-erts", "red_hat_openstack_platform_16.2:erlang-hipe", "red_hat_openstack_platform_16.2:erlang-inets", "red_hat_openstack_platform_16.2:erlang-kernel", "red_hat_openstack_platform_16.2:erlang-mnesia", "red_hat_openstack_platform_16.2:erlang-os_mon", "red_hat_openstack_platform_16.2:erlang-parsetools", "red_hat_openstack_platform_16.2:erlang-public_key", "red_hat_openstack_platform_16.2:erlang-runtime_tools", "red_hat_openstack_platform_16.2:erlang-sasl", "red_hat_openstack_platform_16.2:erlang-snmp", "red_hat_openstack_platform_16.2:erlang-ssl", "red_hat_openstack_platform_16.2:erlang-stdlib", "red_hat_openstack_platform_16.2:erlang-syntax_tools", "red_hat_openstack_platform_16.2:erlang-tools", "red_hat_openstack_platform_16.2:erlang-xmerl", "red_hat_openstack_platform_16.2:erlang.src", "red_hat_openstack_platform_17.1:erlang-asn1", "red_hat_openstack_platform_17.1:erlang-compiler", "red_hat_openstack_platform_17.1:erlang-crypto", "red_hat_openstack_platform_17.1:erlang-eldap", "red_hat_openstack_platform_17.1:erlang-erts", "red_hat_openstack_platform_17.1:erlang-inets", "red_hat_openstack_platform_17.1:erlang-kernel", "red_hat_openstack_platform_17.1:erlang-mnesia", "red_hat_openstack_platform_17.1:erlang-os_mon", "red_hat_openstack_platform_17.1:erlang-parsetools", "red_hat_openstack_platform_17.1:erlang-public_key", "red_hat_openstack_platform_17.1:erlang-runtime_tools", "red_hat_openstack_platform_17.1:erlang-sasl", "red_hat_openstack_platform_17.1:erlang-snmp", "red_hat_openstack_platform_17.1:erlang-ssl", "red_hat_openstack_platform_17.1:erlang-stdlib", "red_hat_openstack_platform_17.1:erlang-syntax_tools", "red_hat_openstack_platform_17.1:erlang-tools", "red_hat_openstack_platform_17.1:erlang-xmerl" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "9Base-RHOSO-18.0:erlang-0:26.2.5.21-2.el9ost.src", "9Base-RHOSO-18.0:erlang-asn1-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-asn1-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-compiler-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-crypto-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-debugsource-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-eldap-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erl_interface-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-erts-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-gdb-tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-inets-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-kernel-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-mnesia-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-odbc-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-os_mon-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-parsetools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-public_key-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-runtime_tools-debuginfo-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-sasl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-snmp-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-ssl-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-stdlib-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-syntax_tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-tools-0:26.2.5.21-2.el9ost.x86_64", "9Base-RHOSO-18.0:erlang-xmerl-0:26.2.5.21-2.el9ost.x86_64", "red_hat_openstack_platform_16.2:erlang-asn1", "red_hat_openstack_platform_16.2:erlang-compiler", "red_hat_openstack_platform_16.2:erlang-crypto", "red_hat_openstack_platform_16.2:erlang-eldap", "red_hat_openstack_platform_16.2:erlang-erts", "red_hat_openstack_platform_16.2:erlang-hipe", "red_hat_openstack_platform_16.2:erlang-inets", "red_hat_openstack_platform_16.2:erlang-kernel", "red_hat_openstack_platform_16.2:erlang-mnesia", "red_hat_openstack_platform_16.2:erlang-os_mon", "red_hat_openstack_platform_16.2:erlang-parsetools", "red_hat_openstack_platform_16.2:erlang-public_key", "red_hat_openstack_platform_16.2:erlang-runtime_tools", "red_hat_openstack_platform_16.2:erlang-sasl", "red_hat_openstack_platform_16.2:erlang-snmp", "red_hat_openstack_platform_16.2:erlang-ssl", "red_hat_openstack_platform_16.2:erlang-stdlib", "red_hat_openstack_platform_16.2:erlang-syntax_tools", "red_hat_openstack_platform_16.2:erlang-tools", "red_hat_openstack_platform_16.2:erlang-xmerl", "red_hat_openstack_platform_16.2:erlang.src", "red_hat_openstack_platform_17.1:erlang-asn1", "red_hat_openstack_platform_17.1:erlang-compiler", "red_hat_openstack_platform_17.1:erlang-crypto", "red_hat_openstack_platform_17.1:erlang-eldap", "red_hat_openstack_platform_17.1:erlang-erts", "red_hat_openstack_platform_17.1:erlang-inets", "red_hat_openstack_platform_17.1:erlang-kernel", "red_hat_openstack_platform_17.1:erlang-mnesia", "red_hat_openstack_platform_17.1:erlang-os_mon", "red_hat_openstack_platform_17.1:erlang-parsetools", "red_hat_openstack_platform_17.1:erlang-public_key", "red_hat_openstack_platform_17.1:erlang-runtime_tools", "red_hat_openstack_platform_17.1:erlang-sasl", "red_hat_openstack_platform_17.1:erlang-snmp", "red_hat_openstack_platform_17.1:erlang-ssl", "red_hat_openstack_platform_17.1:erlang-stdlib", "red_hat_openstack_platform_17.1:erlang-syntax_tools", "red_hat_openstack_platform_17.1:erlang-tools", "red_hat_openstack_platform_17.1:erlang-xmerl" ] } ], "title": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation" } ] }