FEDORA-2026-c17ea7a74d — security update for erlang-cowboy, erlang-cowlib, & 1 more

stable

erlang-cowboy-2.16.1-1.fc44, erlang-cowlib-2.17.1-1.fc44, & 1 more

FEDORA-2026-c17ea7a74d created by peter 3 months ago for Fedora 44

Gun ver. 2.4.1 and its dependencies

New erlang-gun

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-c17ea7a74d

This update has been submitted for testing by peter.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has obsoleted erlang-cowboy-2.16.0-1.fc44, and has inherited its bugs and notes.

3 months ago

This update has been pushed to testing.

3 months ago

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

approved

3 months ago

Builds

erlang-cowboy-2.16.1-1.fc44

erlang-cowlib-2.17.1-1.fc44

erlang-gun-2.4.1-1.fc44

BZ#2486315 erlang-cowlib-2.17.0 is available

BZ#2486350 erlang-gun-2.4.0 is available

BZ#2486422 CVE-2026-43972 erlang-gun: Gun: Cross-origin cookie injection leading to session fixation and account takeover. [fedora-all]

BZ#2486423 CVE-2026-43974 erlang-gun: gun: Denial of Service via unsolicited 101 Switching Protocols response [fedora-all]

BZ#2486424 CVE-2026-43973 erlang-gun: gun: Denial of Service via unbounded HTTP/1.1 response buffering [fedora-all]

BZ#2487823 erlang-cowboy-2.16.1 is available

BZ#2487824 erlang-cowlib-2.17.1 is available

BZ#2487833 erlang-gun-2.4.1 is available

erlang-cowboy-2.16.1-1.fc44

erlang-cowlib-2.17.1-1.fc44

erlang-gun-2.4.1-1.fc44

Automated Test Results

ignored