Vulnerable: version 25.3.2.7_1,4 is affected by 14 known vulnerabilities. See below.
lang/erlang 25.3.2.7_1,4 DragonFly
Functional programming language from Ericsson
- System
- DragonFly
- Repository
- DPorts
- Maintainer
- [email protected] (as in FreeBSD)
- License
- APACHE20
- Categories
- java, lang, parallel
- Package size
- 36244.7 KiB, 90947.8 KiB installed
Description
Erlang is a programming language used to build massively scalable soft real-time systems with requirements on high availability. Some of its uses are in telecoms, banking, e-commerce, computer telephony and instant messaging. Erlang's runtime system has built-in support for concurrency, distribution and fault tolerance.
In the other systems
| System | Port | Version |
|---|---|---|
| DragonFly | lang/erlang | 25.3.2.7_1,4 |
| FreeBSD | lang/erlang | 28.5.0.8,4 |
| NetBSD | lang/erlang | 27.3.4.7 |
| MidnightBSD | lang/erlang | 25.3.2.20_1,4 |
| HardenedBSD | lang/erlang | 28.5.0.7,4 |
| GhostBSD | lang/erlang | 28.5.0.6,4 |
Install
Binary package:
pkg install erlang
From DPorts:
cd /usr/dports/lang/erlang && make install clean
Dependencies
Run dependencies 3
Configuration
No options to configure.
- Service scripts
- none
Message after installing
Known vulnerabilities 14
- — Erlang/OTP -- multiple vulnerabilities in ssl, inets, public_key and snmp
- — Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1
- — Erlang/OTP -- remote crash via gen_tcp with {packet,4}
- — Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap
- — erlang -- SSH plaintext recovery attack against CBC ciphers
- — Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass
- — Erlang/OTP -- TLS denial of service using invalid certificate chains
- — Erlang/OTP -- megaco flex scanner buffer overflow
- — Erlang/OTP -- heap corruption decoding invalidly encoded large tuples
- — Erlang/OTP -- relative path traversal in the zip module
- — Erlang/OTP -- denial of service in epmd
- — Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints
- — Erlang/OTP -- public_key accepts non-CA certificate as intermediate issuer
- — Erlang - Absolute Path in Zip Module