Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP request smuggling, or bypass of authentication and access restrictions, including TLS server impersonation. The affected components include the HTTP client and server, SSH, TLS, ASN.1 decoding, the network driver, and URI, LDAP and SNMP parsing. The update tightens protocol validation and HTTP/SSH resource limits. Applications relying on previously permissive behavior may need adjustment. https://security-tracker.debian.org/tracker/DSA-6580-1