BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
DEBIAN SECURITY ADVISORYDEBIANVERIFIED

PUBLISHER UPDATE · DSA-6580-1

DSA-6580-1 release notes and known issues

DSA-6580-1 erlang - security update

Scope: Debian. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. The affected components include the HTTP client and server, SSH, TLS, ASN.1 decoding, the network driver, and URI, LDAP and SNMP parsing. The update tightens protocol validation and HTTP/SSH resource limits. Applications relying on previously permissive behavior may need adjustment. https://security-tracker.debian.org/tracker/DSA-6580-1

Improvements and security content

  • Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. The affected components include the HTTP client and server, SSH, TLS, ASN.1 decoding, the network driver, and URI, LDAP and SNMP parsing. The update tightens protocol validation and HTTP/SSH resource limits. Applications relying on previously permissive behavior may need adjustment. https://security-tracker.debian.org/tracker/DSA-6580-1

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • Debian

Affected versions

  • See the official publisher source for applicability.

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Debian 12 BookwormOpen lifecycle record →

Official publisher evidence

DEBIANVERIFIED

DSA-6580-1 erlang - security update

Checked 30 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.

Open the official publisher source