Update dependency erlang to v27.3.4 #66

renovate · 2024-12-05T17:25:42Z

This PR contains the following updates:

Package	Update	Change
erlang	minor	`27.1.2` -> `27.3.4`

Release Notes

erlang/otp (erlang)

`v27.3.4`: OTP 27.3.4

Compare Source

Patch Package:           OTP 27.3.4
Git Tag:                 OTP-27.3.4
Date:                    2025-05-08
Trouble Report Id:       OTP-19577, OTP-19599, OTP-19602, OTP-19605,
                         OTP-19608, OTP-19625
Seq num:                 CVE-2025-46712, ERIERL-1220, GH-9707,
                         GH-9720, PR-9696, PR-9724, PR-9753, PR-9765,
                         PR-9767
System:                  OTP
Release:                 27
Application:             erts-15.2.7, kernel-10.2.7, ssh-5.2.11,
                         xmerl-2.1.3
Predecessor:             OTP 27.3.3

Check out the git tag OTP-27.3.4, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

erts-15.2.7

The erts-15.2.7 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fixed an emulator crash when setting an error_handler module that was not yet loaded.

Own Id: OTP-19577
Related Id(s): ERIERL-1220, PR-9696
Fixed a rare bug that could cause an emulator crash after unloading a module or erasing a persistent_term.

Own Id: OTP-19599
Related Id(s): PR-9724

Full runtime dependencies of erts-15.2.7

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.7

Note! The kernel-10.2.7 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.2.5 (first satisfied in OTP 27.3.2)

Fixed Bugs and Malfunctions

With this change, disk_log will not crash when using chunk_step/3 after log size was decreased.

Own Id: OTP-19605
Related Id(s): GH-9720, PR-9765
With this change, disk_log will not run into infinite loop when using chunk/2,3 after log size was decreased.

Own Id: OTP-19608
Related Id(s): GH-9707, PR-9767

Full runtime dependencies of kernel-10.2.7

crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0

ssh-5.2.11

The ssh-5.2.11 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fix KEX strict implementation according to draft-miller-sshm-strict-kex-01 document.

Own Id: OTP-19625
Related Id(s): CVE-2025-46712

Full runtime dependencies of ssh-5.2.11

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

xmerl-2.1.3

The xmerl-2.1.3 application can be applied independently of other applications on a full OTP 27 installation.

Improvements and New Features

A new option to discard whitespace before the xml tag when reading from a stream has been added to the Xmerl SAX parser.
- {discard_ws_before_xml_document, Boolean} - Discard whitespace before xml tag instead of returning a fatal error if set to true (false is default)
Own Id: OTP-19602
Related Id(s): PR-9753

Full runtime dependencies of xmerl-2.1.3

erts-6.0, kernel-8.4, stdlib-2.5

Thanks to

Lý Nhật Tâm

`v27.3.3`: OTP 27.3.3

Compare Source

Patch Package:           OTP 27.3.3
Git Tag:                 OTP-27.3.3
Date:                    2025-04-16
Trouble Report Id:       OTP-19581, OTP-19582, OTP-19585, OTP-19592,
                         OTP-19595
Seq num:                 CVE-2025-32433, ERIERL-1219, ERIERL-1222,
                         PR-9566, PR-9679, PR-9706
System:                  OTP
Release:                 27
Application:             erts-15.2.6, kernel-10.2.6, megaco-4.7.2,
                         ssh-5.2.10, ssl-11.2.12
Predecessor:             OTP 27.3.2

Check out the git tag OTP-27.3.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

erts-15.2.6

The erts-15.2.6 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fixed bug in call_memory tracing that could cause wildly incorrect reported memory values. Bug exists since OTP 27.1.

Also fixed return type spec of trace:info/3.

Own Id: OTP-19581
Related Id(s): ERIERL-1219, PR-9706

Full runtime dependencies of erts-15.2.6

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.6

Note! The kernel-10.2.6 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.2.5 (first satisfied in OTP 27.3.2)

Fixed Bugs and Malfunctions

Fixed bug in call_memory tracing that could cause wildly incorrect reported memory values. Bug exists since OTP 27.1.

Also fixed return type spec of trace:info/3.

Own Id: OTP-19581
Related Id(s): ERIERL-1219, PR-9706

Full runtime dependencies of kernel-10.2.6

crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0

megaco-4.7.2

The megaco-4.7.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Corrected type spec for type mid().

Own Id: OTP-19585
Related Id(s): ERIERL-1222

Full runtime dependencies of megaco-4.7.2

asn1-3.0, debugger-4.0, erts-12.0, et-1.5, kernel-8.0, runtime_tools-1.8.14, stdlib-2.5

ssh-5.2.10

The ssh-5.2.10 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Reception of wrong Unicode does not cause unnecessary processing. US-ASCII fields are not decoded as Unicode.

Own Id: OTP-19582
Related Id(s): PR-9679
SSH daemon disconnects upon receiving connection protocol message for unauthenticated used.

Thanks to Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, Nurullah Erinola, Jörg Schwenk (Ruhr University Bochum).

Own Id: OTP-19595
Related Id(s): CVE-2025-32433

Full runtime dependencies of ssh-5.2.10

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

ssl-11.2.12

Note! The ssl-11.2.12 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Improvements and New Features

Lower log level for user cancelation as this is not an error case. Also handle possible undecrypted close alert during TLS-1.3 handshake.

Own Id: OTP-19592
Related Id(s): PR-9566

Full runtime dependencies of ssl-11.2.12

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

Thanks to

Simon Cornish

`v27.3.2`: OTP 27.3.2

Compare Source

Patch Package:           OTP 27.3.2
Git Tag:                 OTP-27.3.2
Date:                    2025-04-04
Trouble Report Id:       OTP-19482, OTP-19560, OTP-19561, OTP-19562,
                         OTP-19563, OTP-19564, OTP-19565, OTP-19567,
                         OTP-19568, OTP-19569, OTP-19571
Seq num:                 ERIERL-1207, ERIERL-1208, ERIERL-1210,
                         ERIERL-1211, ERIERL-1212, ERIERL-1214,
                         ERIERL-1216, GH-9541, PR-9650, PR-9658,
                         PR-9661, PR-9676
System:                  OTP
Release:                 27
Application:             asn1-5.3.4, compiler-8.6.1, erts-15.2.5,
                         kernel-10.2.5, megaco-4.7.1, snmp-5.18.2,
                         ssl-11.2.11, xmerl-2.1.2
Predecessor:             OTP 27.3.1

Check out the git tag OTP-27.3.2, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

asn1-5.3.4

The asn1-5.3.4 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Negative REAL numbers greater than -1 would be incorrectly encoded (the minus sign would be lost).

Own Id: OTP-19567
Related Id(s): ERIERL-1214, PR-9658

Full runtime dependencies of asn1-5.3.4

erts-14.0, kernel-9.0, stdlib-5.0

compiler-8.6.1

The compiler-8.6.1 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fix the compiler crash when the inner-most tuple in a nested tuple with 3 layers is updated.

Own Id: OTP-19561
Related Id(s): ERIERL-1208, ERIERL-1210, PR-9650

Full runtime dependencies of compiler-8.6.1

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

erts-15.2.5

The erts-15.2.5 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

On Windows, using socket:sendv, a large IOV (size > MAX), the tail was not sent.

Own Id: OTP-19482
Uplift pcre 8.44 to pcre 8.45

Own Id: OTP-19565

Full runtime dependencies of erts-15.2.5

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.5

Note! The kernel-10.2.5 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.2.5 (first satisfied in OTP 27.3.2)

Fixed Bugs and Malfunctions

On Windows, using socket:sendv, a large IOV (size > MAX), the tail was not sent.

Own Id: OTP-19482
gen_tcp connect with a sockaddr with loopback address failed.

Own Id: OTP-19560
Related Id(s): GH-9541
Remove debug printouts from gen_tcp_socket

Own Id: OTP-19564

Full runtime dependencies of kernel-10.2.5

crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0

megaco-4.7.1

The megaco-4.7.1 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Correct type spec for ActionReply

Own Id: OTP-19563
Related Id(s): ERIERL-1216

Full runtime dependencies of megaco-4.7.1

asn1-3.0, debugger-4.0, erts-12.0, et-1.5, kernel-8.0, runtime_tools-1.8.14, stdlib-2.5

snmp-5.18.2

The snmp-5.18.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

When manager receives an v3 inform (request) it used engine-id and full address (including port number) to check if engine was known. This did not work if agent used ephemeral ports for notifications. Has now been changed to only use (context) engine-id and address (without port).

Own Id: OTP-19562
Related Id(s): ERIERL-1207
Fixed snmp_generic (dialyzer) spec for function table_func.

Own Id: OTP-19568
Related Id(s): ERIERL-1211

Full runtime dependencies of snmp-5.18.2

crypto-4.6, erts-12.0, kernel-8.0, mnesia-4.12, runtime_tools-1.8.14, stdlib-5.0

ssl-11.2.11

Note! The ssl-11.2.11 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

Correct the debug functionality for NSS keylogging for TLS-1.3 introduced in OTP-27.3.1 so that TLS-1.3 key updates items always get correct counter value and each item is logged as one single line.

Own Id: OTP-19569
Related Id(s): PR-9661

Full runtime dependencies of ssl-11.2.11

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

xmerl-2.1.2

The xmerl-2.1.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Corrected faulty type specification

Corrected type specification for the input parameter of xmerl_xs:value_of/1.

Also replaced underscore in the return type specifications of xmerl_xs:select/2, xmerl_xpath:string/2 and xmerl_xpath:string/3 with specified return values to improve documentation.

Own Id: OTP-19571
Related Id(s): ERIERL-1212, PR-9676

Full runtime dependencies of xmerl-2.1.2

erts-6.0, kernel-8.4, stdlib-2.5

Thanks to

Björn Gustavsson

`v27.3.1`: OTP 27.3.1

Compare Source

Patch Package:           OTP 27.3.1
Git Tag:                 OTP-27.3.1
Date:                    2025-03-28
Trouble Report Id:       OTP-19391, OTP-19437, OTP-19469, OTP-19525,
                         OTP-19527, OTP-19529, OTP-19542, OTP-19543,
                         OTP-19545, OTP-19546, OTP-19547, OTP-19548,
                         OTP-19549, OTP-19559
Seq num:                 #&#8203;9172, CVE-2025-30211, ERIERL-1204,
                         ERIERL-1205, ERIERL-1206, GH-8891, GH-9483,
                         GH-9554, OTP-19472, OTP-19544, PR-9221,
                         PR-9486, PR-9534, PR-9545, PR-9553, PR-9577,
                         PR-9587, PR-9588, PR-9596, PR-9611, PR-9612
System:                  OTP
Release:                 27
Application:             asn1-5.3.3, erts-15.2.4, kernel-10.2.4,
                         mnesia-4.23.5, ssh-5.2.9, ssl-11.2.10,
                         stdlib-6.2.2
Predecessor:             OTP 27.3

Check out the git tag OTP-27.3.1, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

OTP-27.3.1

Fixed Bugs and Malfunctions

Update used ExDoc version to v0.37.3

Own Id: OTP-19525
Related Id(s): PR-9553

asn1-5.3.3

The asn1-5.3.3 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

The JER backend will now include the SIZE constraint in the type info for OCTET STRINGs, and a SIZE constraint with a range will now be included for BIT STRINGs. This does not change the actual encoding or decoding of JER, but can be useful for tools.

Own Id: OTP-19542
Related Id(s): ERIERL-1204, PR-9588

Improvements and New Features

When using the JSON encoding rules, it is now possible to call the decode/2 function in the following way with data that has already been decoded by json:decode/1:
```
SomeModule:decode(Type, {json_decoded, Decoded}).
```
Own Id: OTP-19547
Related Id(s): ERIERL-1206, PR-9611

Full runtime dependencies of asn1-5.3.3

erts-14.0, kernel-9.0, stdlib-5.0

erts-15.2.4

The erts-15.2.4 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Behavior for socket:recv/3 has been improved. The behavior has also been clarified in the documentation.

Own Id: OTP-19469
Related Id(s): #9172
Trace messages due to receive tracing could potentially be delayed a very long time if the traced process waited in a receive expression without clauses matching on messages (timed wait), or just did not enter a receive expression for a very long time.

Own Id: OTP-19527
Related Id(s): PR-9577
Improve the naming of the (internal) esock mutex(es). It is now possible to configure (as in autoconf) the use of simple names for the esock mutex(es).

Own Id: OTP-19548
Related Id(s): OTP-19472

Full runtime dependencies of erts-15.2.4

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.4

Note! The kernel-10.2.4 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

Behavior for socket:recv/3 has been improved. The behavior has also been clarified in the documentation.

Own Id: OTP-19469
Related Id(s): #9172
An infinite loop in CNAME loop detection that can cause Out Of Memory has been fixed. This affected CNAME lookup with the internal DNS resolver.

Own Id: OTP-19545
Related Id(s): PR-9587, OTP-19544

Full runtime dependencies of kernel-10.2.4

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

mnesia-4.23.5

The mnesia-4.23.5 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

With this change mnesia will merge schema of tables using external backends.

Own Id: OTP-19437
Related Id(s): PR-9534

Full runtime dependencies of mnesia-4.23.5

erts-9.0, kernel-5.3, stdlib-5.0

ssh-5.2.9

The ssh-5.2.9 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Reception of malicious KEX init message does not result with ssh daemon excessive memory usage.

Own Id: OTP-19543
Related Id(s): CVE-2025-30211
Call to ssh:daemon_replace_options does not crash when argument is not a valid daemon ref.

Own Id: OTP-19559
Related Id(s): GH-9554, PR-9545

Full runtime dependencies of ssh-5.2.9

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

ssl-11.2.10

Note! The ssl-11.2.10 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

Correct handling of unassigned signature algorithms to properly ignore them instead of failing the handshake.

Own Id: OTP-19529
Related Id(s): GH-9483, PR-9486
Update key mechanism in CRL cache so that CRL DP with same URI path component becomes distinguishable from each other.

Own Id: OTP-19549
Related Id(s): GH-8891, PR-9612

Improvements and New Features

Add callback for NSS keylogging so that it can work as expected for all scenarios.

Own Id: OTP-19391
Related Id(s): PR-9221

Full runtime dependencies of ssl-11.2.10

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

stdlib-6.2.2

The stdlib-6.2.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fixed crash when fetching initial_call when user code have modified the process_dictionary.

Own Id: OTP-19546
Related Id(s): ERIERL-1205, PR-9596

Full runtime dependencies of stdlib-6.2.2

compiler-5.0, crypto-4.5, erts-15.0, kernel-10.0, sasl-3.0

Thanks to

Alexandre Rodrigues, Marc Worrell, Sergei Shuvatov, zmstone

`v27.3`: OTP 27.3

Compare Source

OTP 27.3

Erlang/OTP 27.3 is the third maintenance patch package for OTP 27, with mostly bug fixes as well as improvements.

For details about bugfixes and potential incompatibilities see the Erlang 27.3 README

The Erlang/OTP source can also be found at GitHub on the official Erlang repository, https://github.com/erlang/otp

Download links for this and previous versions are found here:

https://www.erlang.org/downloads

`v27.2.4`: OTP 27.2.4

Compare Source

Patch Package:           OTP 27.2.4
Git Tag:                 OTP-27.2.4
Date:                    2025-02-20
Trouble Report Id:       OTP-19438, OTP-19466
Seq num:                 CVE-2025-26618, ERIERL-1173, ERIERL-1180
System:                  OTP
Release:                 27
Application:             snmp-5.18.1, ssh-5.2.7
Predecessor:             OTP 27.2.3

Check out the git tag OTP-27.2.4, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

snmp-5.18.1

The snmp-5.18.1 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

SNMP Agent transports type (intAgentTransports) was incorrectly not documented as a list of transports. Also add a couple of config file generation examples.

Own Id: OTP-19438
Related Id(s): ERIERL-1180

Full runtime dependencies of snmp-5.18.1

crypto-4.6, erts-12.0, kernel-8.0, mnesia-4.12, runtime_tools-1.8.14, stdlib-5.0

ssh-5.2.7

The ssh-5.2.7 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

SFTP packets exceeding max packet size are not processed and dropped.

Own Id: OTP-19466
Related Id(s): ERIERL-1173, CVE-2025-26618

Full runtime dependencies of ssh-5.2.7

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

`v27.2.3`: OTP 27.2.3

Compare Source

Patch Package:           OTP 27.2.3
Git Tag:                 OTP-27.2.3
Date:                    2025-02-17
Trouble Report Id:       OTP-19457, OTP-19467, OTP-19486
Seq num:                 ERIERL-1189, ERIERL-1190, PR-9387, PR-9408,
                         PR-9418
System:                  OTP
Release:                 27
Application:             inets-9.3.2, ssl-11.2.8
Predecessor:             OTP 27.2.2

Check out the git tag OTP-27.2.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

inets-9.3.2

The inets-9.3.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Improved robustness of httpd startup procedure.

Own Id: OTP-19486
Related Id(s): ERIERL-1190, PR-9408

Full runtime dependencies of inets-9.3.2

erts-14.0, kernel-9.0, mnesia-4.12, public_key-1.13, runtime_tools-1.8.14, ssl-9.0, stdlib-5.0, stdlib-6.0

ssl-11.2.8

Note! The ssl-11.2.8 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

Setting protocol version to a lower value then supported by default in server API function called after ssl:listen/2 could result in wrong default values being used and connections failing with insufficient security.

Own Id: OTP-19457
Related Id(s): PR-9418
Improve error handling of server name indication fun. This implies that if the sni_fun returns undefined we will attempt connection with original option values, if it returns unrecognized we end the connection with UNRECOGNIZED_NAME alert and if provided options fail option verification we will end the connection with a HANDSHAKE_FAILURE and an error log.

Own Id: OTP-19467
Related Id(s): ERIERL-1189, PR-9387

Full runtime dependencies of ssl-11.2.8

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

`v27.2.2`: OTP 27.2.2

Compare Source

Patch Package:           OTP 27.2.2
Git Tag:                 OTP-27.2.2
Date:                    2025-02-06
Trouble Report Id:       OTP-19240, OTP-19381, OTP-19411, OTP-19445,
                         OTP-19455, OTP-19462
Seq num:                 ERIERL-1174, ERIERL-1177, GH-9112, GH-9117,
                         GH-9177, GH-9208, PR-9273, PR-9286, PR-9322,
                         PR-9356, PR-9372, PR-9377
System:                  OTP
Release:                 27
Application:             compiler-8.5.5, erts-15.2.2, kernel-10.2.2,
                         public_key-1.17.1, ssl-11.2.7
Predecessor:             OTP 27.2.1

Check out the git tag OTP-27.2.2, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

compiler-8.5.5

The compiler-8.5.5 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Eliminated a bug in the alias analysis pass that could potentially cause unsafe optimizations of binary construction or record updates.

Own Id: OTP-19455
Related Id(s): PR-9356

Full runtime dependencies of compiler-8.5.5

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

erts-15.2.2

The erts-15.2.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Disabled an unsafe runtime optimization in binary construction that caused silent memory corruption.

Own Id: OTP-19462
Related Id(s): ERIERL-1177, PR-9372

Full runtime dependencies of erts-15.2.2

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.2

Note! The kernel-10.2.2 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

Fixed a couple of bugs that could make global's internal state inconsistent when a connection was reconnected.

Own Id: OTP-19381
Related Id(s): GH-9112, GH-9117, PR-9377

Full runtime dependencies of kernel-10.2.2

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

public_key-1.17.1

The public_key-1.17.1 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Consider keyCertSign to compatible with extended key usage for TLS client/server auth in CAs, adhere to wide spread implementations

Own Id: OTP-19240
Related Id(s): GH-9208, PR-9286

Full runtime dependencies of public_key-1.17.1

asn1-5.0, crypto-5.0, erts-13.0, kernel-8.0, stdlib-4.0

ssl-11.2.7

Note! The ssl-11.2.7 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

An initiated handshake should always be closed with an alert, some corner cases have been fixed so that this should always be the case.

Own Id: OTP-19411
Related Id(s): ERIERL-1174, PR-9273
Correct option handling to work properly for paused handshaking. Could result in unwanted alerts or or error messages.

Own Id: OTP-19445
Related Id(s): GH-9177, PR-9322

Full runtime dependencies of ssl-11.2.7

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

Thanks to

Frej Drejhammar

`v27.2.1`: OTP 27.2.1

Compare Source

Patch Package:           OTP 27.2.1
Git Tag:                 OTP-27.2.1
Date:                    2025-01-23
Trouble Report Id:       OTP-19385, OTP-19388, OTP-19392, OTP-19407,
                         OTP-19418, OTP-19435, OTP-19439, OTP-19444,
                         OTP-19446
Seq num:                 ERIERL-1165, ERIERL-1166, ERIERL-1179,
                         ERIERL-1183, GH-9065, GH-9163, GH-9211,
                         GH-9237, PR-9139, PR-9155, PR-9156, PR-9161,
                         PR-9234, PR-9274, PR-9309, PR-9314, PR-9318,
                         PR-9327
System:                  OTP
Release:                 27
Application:             common_test-1.27.6, dialyzer-5.3.1,
                         erts-15.2.1, kernel-10.2.1, ssh-5.2.6,
                         tftp-1.2.2
Predecessor:             OTP 27.2

Check out the git tag OTP-27.2.1, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

common_test-1.27.6

The common_test-1.27.6 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Common test will now not crash when running tests with otp26 and earlier, while having previous test resuts from otp27.

Own Id: OTP-19385
Related Id(s): ERIERL-1166, PR-9155, PR-9156

Full runtime dependencies of common_test-1.27.6

compiler-6.0, crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0, kernel-8.4, observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0, stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8

dialyzer-5.3.1

The dialyzer-5.3.1 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fixed a crash caused by the use of opaque types.

Own Id: OTP-19439
Related Id(s): ERIERL-1183, PR-9314

Full runtime dependencies of dialyzer-5.3.1

compiler-8.0, erts-12.0, kernel-8.0, stdlib-5.0, syntax_tools-2.0

erts-15.2.1

The erts-15.2.1 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fixed configure tests for GCC 14

Own Id: OTP-19407
Related Id(s): GH-9211, PR-9234
Fix bug where log printouts would go missing when application_controller is stopping while log messages are being sent.

This bug was introduced by OTP-19078 in Erlang/OTP 26.2.5.

Own Id: OTP-19418
Related Id(s): GH-9163, PR-9274

Full runtime dependencies of erts-15.2.1

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.1

Note! The kernel-10.2.1 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

Fix the default group_leader to reply {error,request} on invalid I/O requests instead of crashing.

This bug was introduced in Erlang/OTP 27.2.

Own Id: OTP-19444
Related Id(s): GH-9237, PR-9318

Full runtime dependencies of kernel-10.2.1

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

ssh-5.2.6

The ssh-5.2.6 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

With this change, type specs for ssh:connection_info/1,2 functions are fixed so they include {error, term()} return value.

Own Id: OTP-19388
Related Id(s): ERIERL-1165, PR-9161
With this change, ssh client accepts a banner sent during processing keyboard interactive user authentication.

Own Id: OTP-19392
Related Id(s): GH-9065, PR-9139
With this change, large sftp transfers does not hang. Redundant window adjustment are not requested.

Own Id: OTP-19435
Related Id(s): PR-9309

Full runtime dependencies of ssh-5.2.6

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

tftp-1.2.2

The tftp-1.2.2 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

Fix specs in tftp:read_file function.

Own Id: OTP-19446
Related Id(s): ERIERL-1179, PR-9327

Full runtime dependencies of tftp-1.2.2

erts-6.0, kernel-6.0, stdlib-5.0

Thanks to

Alexandre Rodrigues, Luke Bakken

`v27.2`: OTP 27.2

Compare Source

OTP 27.2

Erlang/OTP 27.2 is the second maintenance patch package for OTP 27, with mostly bug fixes as well as improvements.

Potential incompatibilities:

The HTTP client now correctly takes into account the full_result request option when returning an asynchronous request.

For details about bugfixes and potential incompatibilities see the Erlang 27.2 README

The Erlang/OTP source can also be found at GitHub on the official Erlang repository, https://github.com/erlang/otp

Download links for this and previous versions are found here

https://www.erlang.org/downloads

`v27.1.3`: OTP 27.1.3

Compare Source

Patch Package:           OTP 27.1.3
Git Tag:                 OTP-27.1.3
Date:                    2024-12-05
Trouble Report Id:       OTP-19240, OTP-19293, OTP-19311, OTP-19325,
                         OTP-19326, OTP-19328, OTP-19332, OTP-19340,
                         OTP-19350, OTP-19352, OTP-19357, OTP-19365,
                         OTP-19366, OTP-19374
Seq num:                 #&#8203;8989, CVE-2024-53846, ERIERL-1134,
                         ERIERL-1139, ERIERL-1147, ERIERL-1157,
                         GH-8929, GH-9009, GH-9014, GH-9100,
                         OTP-19061, OTP-19240, OTP-19532, PR-8840,
                         PR-8924, PR-8931, PR-8980, PR-8995, PR-9001,
                         PR-9024, PR-9053, PR-9080, PR-9111, PR-9130
System:                  OTP
Release:                 27
Application:             common_test-1.27.4, compiler-8.5.3,
                         erts-15.1.3, kernel-10.1.2,
                         public_key-1.16.4, ssh-5.2.4, ssl-11.2.5
Predecessor:             OTP 27.1.2

Check out the git tag OTP-27.1.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

common_test-1.27.4

The common_test-1.27.4 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

With this change, cth_surefire hook module handles group path reduction for a skipped group. This fixes a bug manifesting with improper group path for a group executed after a group which was skipped.

Own Id: OTP-19365
Related Id(s): ERIERL-1157, PR-9080

Improvements and New Features

With this change, prefix option can be specified in cth_conn_log option list. Option allows to specify how much of additional information is added in raw log output.

Own Id: OTP-19293
Related Id(s): ERIERL-1139, PR-8924, PR-8931

Full runtime dependencies of common_test-1.27.4

compiler-6.0, crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0, kernel-8.4, observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0, stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8

compiler-8.5.3

The compiler-8.5.3 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

In rare circumstances, the destructive tuple update optimization could be applied when it was unsafe.

Own Id: OTP-19340
Related Id(s): GH-9014, PR-9024
In rare circumstances involving appending to multiple binaries, the compile could emit unsafe code that would crash the runtime system.

Own Id: OTP-19374
Related Id(s): GH-9100, PR-9111

Full runtime dependencies of compiler-8.5.3

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

erts-15.1.3

The erts-15.1.3 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

gen_udp:send on domain local can leak inet_reply messages.

Own Id: OTP-19332
Related Id(s): #8989
net:getifaddrs does not properly report the running flag on windows.

Own Id: OTP-19366
Related Id(s): ERIERL-1134, OTP-19061

Full runtime dependencies of erts-15.1.3

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.1.2

Note! The kernel-10.1.2 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

On windows the socket:recv could return with success ({ok, Data}) even though not all data had been read.

Own Id: OTP-19328
gen_udp:send on domain local can leak inet_reply messages.

Own Id: OTP-19332
Related Id(s): #8989
Failure to create an UDP IPv6 socket when inet_backend = socket with certain IPv6 socket options.

Own Id: OTP-19357
net:getifaddrs does not properly report the running flag on windows.

Own Id: OTP-19366
Related Id(s): ERIERL-1134, OTP-19061

Full runtime dependencies of kernel-10.1.2

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

public_key-1.16.4

The public_key-1.16.4 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

If both ext-key-usage and key-usage are defined for a certificate it should be checked that these usages are consistent with each other. This will have the affect that such certificates where the ext-key-usages is marked as critical and the usages is consistent with the key-use it can be considered valid without mandatory application specific checks for the ext-key-useage extension.

Own Id: OTP-19240
Related Id(s): PR-8840, OTP-19532
Handle decoding of EDDSA key properly, when decoding a PEM file that contains only the public EDDSA key.

Own Id: OTP-19350
Related Id(s): GH-9009, PR-9053

Full runtime dependencies of public_key-1.16.4

asn1-3.0, crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5

ssh-5.2.4

The ssh-5.2.4 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

With this change, ssh connection does not crash upon receiving exit-signal message for an already terminated channel.

Own Id: OTP-19326
Related Id(s): GH-8929, PR-8995

Full runtime dependencies of ssh-5.2.4

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

ssl-11.2.5

Note! The ssl-11.2.5 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

Avoid generating an internal alert for case that should have been an orderly shutdown by the supervisor.

Own Id: OTP-19311
Related Id(s): PR-8980
If present, extended key-usage TLS (SSL) role check (pk-clientAuth, pk-serverAuth) should always be performed for peer-cert. An intermediate CA cert may relax the requirement if AnyExtendedKeyUsage purpose is present.

In OTP-25.3.2.8, OTP-26.2 and OTP-27.0 these requirements became too relaxed. There where two problems, firstly the peer cert extension was only checked if it was marked critical, and secondly the CA cert check did not assert the relaxed AnyExtendedKeyUsage purpose.

This could result in that certificates might be misused for purposes not intended by the certificate authority.

Thanks to Bryan Paxton for reporting the issue.

Own Id: OTP-19352
Related Id(s): PR-9130, CVE-2024-53846, OTP-19240

Improvements and New Features

Back port certificate_authorities option for TLS-1.3 servers to pre TLS-1.3 servers to enable them to disable the sending of certificate authorities in their certificate request. This will have same affect as the the TLS-1.3 server option although it is handled by a different mechanism in these versions, where the functionality is described to be more of a guidance, although some pre TLS clients have proven to make it mandatory as in TLS-1.3 extension handling.

Own Id: OTP-19325
Related Id(s): ERIERL-1147, PR-9001

Full runtime dependencies of ssl-11.2.5

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

Thanks to

Frej Drejhammar, zmstone

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coveralls · 2024-12-05T17:32:32Z

coverage: 73.589%. remained the same
when pulling 92c9fa5 on renovate/erlang-27.x
into ffc4238 on main.

renovate bot changed the title ~~Update dependency erlang to v27.1.3~~ Update dependency erlang to v27.2 Dec 11, 2024

renovate bot force-pushed the renovate/erlang-27.x branch from fd07cbc to 92c9fa5 Compare December 11, 2024 15:07

renovate bot changed the title ~~Update dependency erlang to v27.2~~ Update dependency erlang to v27.2.1 Jan 23, 2025

renovate bot force-pushed the renovate/erlang-27.x branch from 92c9fa5 to ac1cf3e Compare January 23, 2025 20:56

renovate bot changed the title ~~Update dependency erlang to v27.2.1~~ Update dependency erlang to v27.2.2 Feb 6, 2025

renovate bot force-pushed the renovate/erlang-27.x branch from ac1cf3e to adf6250 Compare February 6, 2025 14:43

renovate bot force-pushed the renovate/erlang-27.x branch from adf6250 to 2b13d89 Compare February 17, 2025 18:58

renovate bot changed the title ~~Update dependency erlang to v27.2.2~~ Update dependency erlang to v27.2.3 Feb 17, 2025

renovate bot changed the title ~~Update dependency erlang to v27.2.3~~ Update dependency erlang to v27.2.4 Feb 20, 2025

renovate bot force-pushed the renovate/erlang-27.x branch from 2b13d89 to 81f8e1f Compare February 20, 2025 16:32

renovate bot changed the title ~~Update dependency erlang to v27.2.4~~ Update dependency erlang to v27.3 Mar 5, 2025

renovate bot force-pushed the renovate/erlang-27.x branch from 81f8e1f to b4f2099 Compare March 5, 2025 15:35

renovate bot changed the title ~~Update dependency erlang to v27.3~~ Update dependency erlang to v27.3.1 Mar 28, 2025

renovate bot force-pushed the renovate/erlang-27.x branch 2 times, most recently from 90f4671 to f5fdad8 Compare April 4, 2025 09:49

renovate bot changed the title ~~Update dependency erlang to v27.3.1~~ Update dependency erlang to v27.3.2 Apr 4, 2025

renovate bot force-pushed the renovate/erlang-27.x branch from f5fdad8 to 43058c2 Compare April 16, 2025 15:10

renovate bot changed the title ~~Update dependency erlang to v27.3.2~~ Update dependency erlang to v27.3.3 Apr 16, 2025

Update dependency erlang to v27.3.4

98955cb

renovate bot force-pushed the renovate/erlang-27.x branch from 43058c2 to 98955cb Compare May 8, 2025 19:51

renovate bot changed the title ~~Update dependency erlang to v27.3.3~~ Update dependency erlang to v27.3.4 May 8, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency erlang to v27.3.4 #66

Update dependency erlang to v27.3.4 #66

Uh oh!

renovate bot commented Dec 5, 2024 •

edited

Loading

Uh oh!

coveralls commented Dec 5, 2024 •

edited

Loading

Uh oh!

Uh oh!

Update dependency erlang to v27.3.4 #66

Are you sure you want to change the base?

Update dependency erlang to v27.3.4 #66

Uh oh!

Conversation

renovate bot commented Dec 5, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v27.3.4: OTP 27.3.4

erts-15.2.7

Fixed Bugs and Malfunctions

Full runtime dependencies of erts-15.2.7

kernel-10.2.7

Fixed Bugs and Malfunctions

Full runtime dependencies of kernel-10.2.7

ssh-5.2.11

Fixed Bugs and Malfunctions

Full runtime dependencies of ssh-5.2.11

xmerl-2.1.3

Improvements and New Features

Full runtime dependencies of xmerl-2.1.3

Thanks to

v27.3.3: OTP 27.3.3

erts-15.2.6

Fixed Bugs and Malfunctions

Full runtime dependencies of erts-15.2.6

kernel-10.2.6

Fixed Bugs and Malfunctions

Full runtime dependencies of kernel-10.2.6

megaco-4.7.2

Fixed Bugs and Malfunctions

Full runtime dependencies of megaco-4.7.2

ssh-5.2.10

Fixed Bugs and Malfunctions

Full runtime dependencies of ssh-5.2.10

ssl-11.2.12

Improvements and New Features

Full runtime dependencies of ssl-11.2.12

Thanks to

v27.3.2: OTP 27.3.2

asn1-5.3.4

Fixed Bugs and Malfunctions

Full runtime dependencies of asn1-5.3.4

compiler-8.6.1

Fixed Bugs and Malfunctions

Full runtime dependencies of compiler-8.6.1

erts-15.2.5

Fixed Bugs and Malfunctions

Full runtime dependencies of erts-15.2.5

kernel-10.2.5

Fixed Bugs and Malfunctions

Full runtime dependencies of kernel-10.2.5

megaco-4.7.1

Fixed Bugs and Malfunctions

Full runtime dependencies of megaco-4.7.1

snmp-5.18.2

Fixed Bugs and Malfunctions

Full runtime dependencies of snmp-5.18.2

ssl-11.2.11

Fixed Bugs and Malfunctions

Full runtime dependencies of ssl-11.2.11

xmerl-2.1.2

Fixed Bugs and Malfunctions

Full runtime dependencies of xmerl-2.1.2

Thanks to

v27.3.1: OTP 27.3.1

OTP-27.3.1

Fixed Bugs and Malfunctions

asn1-5.3.3

Fixed Bugs and Malfunctions

Improvements and New Features

Full runtime dependencies of asn1-5.3.3

erts-15.2.4

Fixed Bugs and Malfunctions

Full runtime dependencies of erts-15.2.4

kernel-10.2.4

Fixed Bugs and Malfunctions

Full runtime dependencies of kernel-10.2.4

mnesia-4.23.5

Fixed Bugs and Malfunctions

renovate bot commented Dec 5, 2024 •

edited

Loading

`v27.3.4`: OTP 27.3.4

`v27.3.3`: OTP 27.3.3

`v27.3.2`: OTP 27.3.2

`v27.3.1`: OTP 27.3.1

`v27.3`: OTP 27.3

`v27.2.4`: OTP 27.2.4

`v27.2.3`: OTP 27.2.3

`v27.2.2`: OTP 27.2.2

`v27.2.1`: OTP 27.2.1