{"id":"RHSA-2026:39809","summary":"Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (erlang) security update","modified":"2026-07-16T10:17:02.015750985Z","published":"2026-07-16T10:10:35Z","upstream":["CVE-2026-42789","CVE-2026-42790"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:39809"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482093"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482286"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39809.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-42789"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-42789"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42789"},{"type":"ARTICLE","url":"https://cna.erlef.org/cves/CVE-2026-42789.html"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq"},{"type":"ARTICLE","url":"https://osv.dev/vulnerability/EEF-CVE-2026-42789"},{"type":"ARTICLE","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-42790"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-42790"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42790"},{"type":"ARTICLE","url":"https://cna.erlef.org/cves/CVE-2026-42790.html"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457"},{"type":"ARTICLE","url":"https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447"},{"type":"ARTICLE","url":"https://osv.dev/vulnerability/EEF-CVE-2026-42790"}],"affected":[{"package":{"name":"erlang","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-asn1","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-asn1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-asn1-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-asn1-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-compiler","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-compiler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-crypto","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-crypto"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-crypto-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-crypto-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-debugsource","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-eldap","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-eldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-erl_interface-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-erl_interface-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-erts","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-erts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-erts-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-erts-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-gdb-tools-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-gdb-tools-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-inets","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-inets"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-kernel","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-mnesia","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-mnesia"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-odbc-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-odbc-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-os_mon","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-os_mon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-os_mon-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-os_mon-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-parsetools","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-parsetools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-public_key","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-public_key"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-runtime_tools","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-runtime_tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-runtime_tools-debuginfo","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-runtime_tools-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-sasl","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-sasl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-snmp","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-snmp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-ssl","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-ssl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-stdlib","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-stdlib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-syntax_tools","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-syntax_tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-tools","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}},{"package":{"name":"erlang-xmerl","ecosystem":"Red Hat:openstack:18.0::el9","purl":"pkg:rpm/redhat/erlang-xmerl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.2.5.21-2.el9ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:39809.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"}]}