SB20260902105 - Fedora 44 update for erlang

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260902105

SB20260902105 - Fedora 44 update for erlang

Published: September 2, 2026

Security Bulletin ID SB20260902105
CSH Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Algorithm Downgrade (CVE-ID: CVE-2026-55953)

CWE-ID: CWE-757 - Selection of Less-Secure Algorithm During Negotiat

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to read and modify data transmitted over the connection.

The vulnerability exists due to selection of a less-secure algorithm during negotiation in the OTP TLS/DTLS client cipher suite validation logic when processing a ServerHello message. A remote attacker can select an anonymous cipher suite that was not offered by the client to read and modify data transmitted over the connection.

This affects TLS versions up to 1.2 and all DTLS versions, while TLS-1.3 connections are not affected. The issue can bypass the client\'s verify_peer setting because anonymous cipher suites do not require a server certificate.


Remediation

Install update from vendor's website.

References