Vulnerable: version 28.0 is affected by 20 known vulnerabilities. See below.
lang/erlang-runtime28 28.0 DragonFly
Functional programming language from Ericsson
- System
- DragonFly
- Repository
- DPorts
- Maintainer
- [email protected] (as in FreeBSD)
- License
- APACHE20
- Categories
- java, lang, parallel
- Package size
- 40415.7 KiB, 103087.3 KiB installed
Description
Erlang is a programming language used to build massively scalable soft real-time systems with requirements on high availability. Some of its uses are in telecoms, banking, e-commerce, computer telephony and instant messaging. Erlang's runtime system has built-in support for concurrency, distribution and fault tolerance.
This port contains a standalone runtime environment of Erlang 28 to be used during the development of OTP applications.
In the other systems
| System | Port | Version |
|---|---|---|
| DragonFly | lang/erlang-runtime28 | 28.0 |
| FreeBSD | lang/erlang-runtime28 | 28.5.0.8 |
| MidnightBSD | lang/erlang-runtime28 | 28.5.0.8 |
| HardenedBSD | lang/erlang-runtime28 | 28.5.0.7 |
| GhostBSD | lang/erlang-runtime28 | 28.5.0.6 |
Install
Binary package:
pkg install erlang-runtime28
From DPorts:
cd /usr/dports/lang/erlang-runtime28 && make install clean
Dependencies
Run dependencies 2
No port depends on this one.
Configuration
No options to configure.
- Service scripts
- none
Message after installing
Known vulnerabilities 20
- — Erlang/OTP -- multiple vulnerabilities in ssl, inets, public_key and snmp
- — Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1
- — Erlang/OTP -- remote crash via gen_tcp with {packet,4}
- — Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap
- — erlang -- SSH plaintext recovery attack against CBC ciphers
- — Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass
- — Erlang/OTP -- TLS denial of service using invalid certificate chains
- — Erlang/OTP -- denial of service via exponential certificate policy tree growth
- — Erlang/OTP -- megaco flex scanner buffer overflow
- — Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input
- — Erlang/OTP -- heap corruption decoding invalidly encoded large tuples
- — Erlang/OTP -- relative path traversal in the zip module
- — Erlang/OTP -- denial of service in epmd
- — Erlang/OTP -- buffer overflow parsing SCTP ERROR/ABORT chunks
- — Erlang/OTP -- stack overflow in ei_s_print_term for very large integer terms
- — Erlang/OTP -- FTP passive-mode client does not validate server response IP
- — Erlang/OTP -- httpc leaks authentication headers on cross-host redirect
- — Erlang/OTP -- SFTP READLINK discloses server filesystem paths
- — Erlang/OTP -- TLS distribution check_ip flag does not enforce same-LAN constraint
- — Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints