Skip to content

Releases: erlang/otp

OTP 25.3.2.15

14 Oct 14:04
Compare
Choose a tag to compare
Patch Package:           OTP 25.3.2.15
Git Tag:                 OTP-25.3.2.15
Date:                    2024-10-14
Trouble Report Id:       OTP-19124, OTP-19158, OTP-19221, OTP-19236,
                         OTP-19238, OTP-19246, OTP-19247, OTP-19252,
                         OTP-19256, OTP-19257, OTP-19265, OTP-19266,
                         OTP-19269, OTP-19274, OTP-19284
Seq num:                 ERIERL-1091, ERIERL-1093, ERIERL-1127,
                         ERIERL-1131, GH-7550, GH-8223, GH-8835,
                         PR-8226, PR-8261, PR-8766, PR-8780, PR-8788,
                         PR-8801, PR-8831, PR-8854, PR-8858, PR-8876,
                         PR-8890, PR-8897, PR-8901, PR-8909
System:                  OTP
Release:                 25
Application:             common_test-1.24.0.4, erts-13.2.2.11,
                         inets-8.3.1.4, public_key-1.13.3.4,
                         ssh-4.15.3.7, ssl-10.9.1.6, stdlib-4.3.1.5
Predecessor:             OTP 25.3.2.14

 Check out the git tag OTP-25.3.2.15, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- POTENTIAL INCOMPATIBILITIES -------------------------------------
 ---------------------------------------------------------------------

  OTP-19158    Application(s): inets

               With this change, HTTP client, when returning an
               asynchronous request, now correctly takes into account
               `OptionRequest - full_result`


 ---------------------------------------------------------------------
 --- common_test-1.24.0.4 --------------------------------------------
 ---------------------------------------------------------------------

 The common_test-1.24.0.4 application can be applied independently of
 other applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19252    Application(s): common_test
               Related Id(s): PR-8858

               With this change, HTML reports include jQuery version
               3.7.1.


  OTP-19265    Application(s): common_test
               Related Id(s): PR-8876

               With this change, jquery and tablesorter licenses are
               added to COPYRIGHT file. Also tablesorter is updated to
               version 2.32.


  OTP-19284    Application(s): common_test
               Related Id(s): ERIERL-1093, PR-8909

               Fixed a bug where the sum of testcases' execution time
               in HTML logs was sometimes miscalculated, and the table
               was not fully printed.


 Full runtime dependencies of common_test-1.24.0.4: compiler-6.0,
 crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0, kernel-8.4,
 observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0,
 stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8


 ---------------------------------------------------------------------
 --- erts-13.2.2.11 --------------------------------------------------
 ---------------------------------------------------------------------

 Note! The erts-13.2.2.11 application *cannot* be applied
       independently of other applications on an arbitrary OTP 25
       installation.

       On a full OTP 25 installation, also the following runtime
       dependencies have to be satisfied:
       -- kernel-8.5 (first satisfied in OTP 25.1)
       -- stdlib-4.1 (first satisfied in OTP 25.1)


 --- Fixed Bugs and Malfunctions ---

  OTP-19269    Application(s): erts
               Related Id(s): GH-8835, PR-8897

               Fixed beam crash that could happen if resetting
               call_time or call_memory trace counters of a function
               while it is called. Bug exists since OTP R16.


 Full runtime dependencies of erts-13.2.2.11: kernel-8.5, sasl-3.3,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- inets-8.3.1.4 ---------------------------------------------------
 ---------------------------------------------------------------------

 The inets-8.3.1.4 application can be applied independently of other
 applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19158    Application(s): inets

               *** POTENTIAL INCOMPATIBILITY ***

               With this change, HTTP client, when returning an
               asynchronous request, now correctly takes into account
               `OptionRequest - full_result`


  OTP-19221    Application(s): inets
               Related Id(s): ERIERL-1091, PR-8788, PR-8801

               With this change, synchronous httpc:request now
               timeouts after `Timeout` specified in `HttpOption
               {timeout, Timeout}`


 Full runtime dependencies of inets-8.3.1.4: erts-13.0, kernel-6.0,
 mnesia-4.12, public_key-1.13, runtime_tools-1.8.14, ssl-9.0,
 stdlib-4.0


 ---------------------------------------------------------------------
 --- public_key-1.13.3.4 ---------------------------------------------
 ---------------------------------------------------------------------

 The public_key-1.13.3.4 application can be applied independently of
 other applications on a full OTP 25 installation.

 --- Improvements and New Features ---

  OTP-19238    Application(s): public_key
               Related Id(s): PR-8831

               Do not hide crypto badarg reason, this error handling
               enhancement facilitates debugging. These kind of
               runtime errors are not documented and should never be
               relied on for matching, they are intended for catching
               input errors early.


 Full runtime dependencies of public_key-1.13.3.4: asn1-3.0,
 crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5


 ---------------------------------------------------------------------
 --- ssh-4.15.3.7 ----------------------------------------------------
 ---------------------------------------------------------------------

 The ssh-4.15.3.7 application can be applied independently of other
 applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19124    Application(s): ssh
               Related Id(s): GH-7550, PR-8766

               With this change, a race condition is removed from ssh
               client connection setup procedure.


  OTP-19246    Application(s): ssh
               Related Id(s): GH-8223, PR-8854

               With this change, ssh:connect is not affected by
               presence of EXIT message in queue.


  OTP-19247    Application(s): ssh
               Related Id(s): PR-8226

               With this change, ssh appends {active, false} option
               after socket options received from user - so that false
               value is always used.


 Full runtime dependencies of ssh-4.15.3.7: crypto-5.0, erts-11.0,
 kernel-6.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-3.15


 ---------------------------------------------------------------------
 --- ssl-10.9.1.6 ----------------------------------------------------
 ---------------------------------------------------------------------

 Note! The ssl-10.9.1.6 application *cannot* be applied independently
       of other applications on an arbitrary OTP 25 installation.

       On a full OTP 25 installation, also the following runtime
       dependency has to be satisfied:
       -- stdlib-4.1 (first satisfied in OTP 25.1)


 --- Fixed Bugs and Malfunctions ---

  OTP-19236    Application(s): ssl
               Related Id(s): PR-8261

               Starting from TLS-1.3 some server handshake alerts
               might arrive after ssl:connection/2,3,4 has returned.
               If the socket is in active mode the controlling process
               will get the alert message, but passive sockets would
               only get {error, closed} on next call to ssl:recv/2,3
               or ssl/setopts/2. Passive sockets calls will now return
               {error, error_alert()} instead.


  OTP-19257    Application(s): ssl
               Related Id(s): ERIERL-1131

               Servers configured to support only version (pre
               TLS-1.2) should ignore hello version extension, as it
               is an unknown extension to them, this will result in
               that new clients that do not support the old server
               version will get an insufficient security alert from
               the server and not a protocol version alert, this is
               consistent with how old servers not able to support
               higher protocol versions work.


  OTP-19274    Application(s): ssl
               Related Id(s): PR-8901

               Correct timeout handling for termination code run for
               own alerts, so that intended timeout is used instead of
               falling back to OS TCP-stack timeout that is
               unreasonably long on some platforms.


 Full runtime dependencies of ssl-10.9.1.6: crypto-5.0, erts-10.0,
 inets-5.10.7, kernel-8.4, public_key-1.11.3, runtime_tools-1.15.1,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- stdlib-4.3.1.5 --------------------------------------------------
 ---------------------------------------------------------------------

 Note! The stdlib-4.3.1.5 application *cannot* be applied
       independently of other applications on an arbitrary OTP 25
       installation.

       On a full OTP 25 installation, also the following runtime
       dependencies have to be satisfied:
       -- erts-13.1 (first satisfied in OTP 25.1)
       -- kernel-8.5.1 (first satisfied in OTP 25.1.1)


 --- Fixed Bugs and Malfunctions ---

  OTP-19256    Application(s): stdlib
               Related Id(s): PR-8780

               With this change, sh...
Read more

OTP 26.2.5.4

09 Oct 10:12
Compare
Choose a tag to compare
Patch Package:           OTP 26.2.5.4
Git Tag:                 OTP-26.2.5.4
Date:                    2024-10-09
Trouble Report Id:       OTP-19124, OTP-19158, OTP-19212, OTP-19217,
                         OTP-19221, OTP-19223, OTP-19235, OTP-19236,
                         OTP-19238, OTP-19246, OTP-19247, OTP-19249,
                         OTP-19251, OTP-19252, OTP-19254, OTP-19256,
                         OTP-19257, OTP-19258, OTP-19265, OTP-19266,
                         OTP-19267, OTP-19269, OTP-19270, OTP-19274,
                         OTP-19284
Seq num:                 ERIERL-1091, ERIERL-1093, ERIERL-1104,
                         ERIERL-1127, ERIERL-1131, ERIERL-1133,
                         ERIERL-1134, ERIERL-1137, ERIERL-1138,
                         GH-6455, GH-7550, GH-8223, GH-8562, GH-8769,
                         GH-8783, GH-8835, GH-8848, GH-8853,
                         OTP-18520, OTP-19061, PR-8226, PR-8261,
                         PR-8762, PR-8766, PR-8780, PR-8788, PR-8800,
                         PR-8801, PR-8831, PR-8837, PR-8854, PR-8858,
                         PR-8866, PR-8876, PR-8890, PR-8892, PR-8897,
                         PR-8898, PR-8901, PR-8909
System:                  OTP
Release:                 26
Application:             common_test-1.26.2.1, compiler-8.4.3.2,
                         crypto-5.4.2.2, erts-14.2.5.4, inets-9.1.0.1,
                         kernel-9.2.4.3, public_key-1.15.1.3,
                         ssh-5.1.4.3, ssl-11.1.4.4, stdlib-5.2.3.2,
                         xmerl-1.3.34.1
Predecessor:             OTP 26.2.5.3

 Check out the git tag OTP-26.2.5.4, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- POTENTIAL INCOMPATIBILITIES -------------------------------------
 ---------------------------------------------------------------------

  OTP-19158    Application(s): inets

               With this change, HTTP client, when returning an
               asynchronous request, now correctly takes into account
               `OptionRequest - full_result`


 ---------------------------------------------------------------------
 --- common_test-1.26.2.1 --------------------------------------------
 ---------------------------------------------------------------------

 The common_test-1.26.2.1 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19252    Application(s): common_test
               Related Id(s): PR-8858

               With this change, HTML reports include jQuery version
               3.7.1.


  OTP-19265    Application(s): common_test
               Related Id(s): PR-8876

               With this change, jquery and tablesorter licenses are
               added to COPYRIGHT file. Also tablesorter is updated to
               version 2.32.


  OTP-19284    Application(s): common_test
               Related Id(s): ERIERL-1093, PR-8909

               Fixed a bug where the sum of testcases' execution time
               in HTML logs was sometimes miscalculated, and the table
               was not fully printed.


 Full runtime dependencies of common_test-1.26.2.1: compiler-6.0,
 crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0, kernel-8.4,
 observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0,
 stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8


 ---------------------------------------------------------------------
 --- compiler-8.4.3.2 ------------------------------------------------
 ---------------------------------------------------------------------

 The compiler-8.4.3.2 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19270    Application(s): compiler
               Related Id(s): GH-8783, PR-8898

               Fixed a bug where bogus code was generated for
               consecutive calls to erlang:setelement/2, potentially
               crashing the emulator.


 Full runtime dependencies of compiler-8.4.3.2: crypto-5.1, erts-13.0,
 kernel-8.4, stdlib-5.0


 ---------------------------------------------------------------------
 --- crypto-5.4.2.2 --------------------------------------------------
 ---------------------------------------------------------------------

 The crypto-5.4.2.2 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19212    Application(s): crypto
               Related Id(s): GH-8562, PR-8762

               crypto built with --enable-fips will now accept an
               OpenSSL 3 lib without fips provider as long as fips
               mode is not enabled.


  OTP-19223    Application(s): crypto
               Related Id(s): GH-8769, PR-8800

               crypto:strong_rand_bytes/2 fixed to work on Ubuntu pro
               with installed FIPS support.


 Full runtime dependencies of crypto-5.4.2.2: erts-9.0, kernel-5.3,
 stdlib-3.9


 ---------------------------------------------------------------------
 --- erts-14.2.5.4 ---------------------------------------------------
 ---------------------------------------------------------------------

 The erts-14.2.5.4 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19235    Application(s): erts, kernel
               Related Id(s): ERIERL-1133, PR-8837

               A bug has been fixed where receiving an SCTP message
               with `gen_sctp` could waste the first fragments of a
               message and only deliver the last fragment.

               This happened with low probability when the OS signaled
               that the socket was ready for reading in combination
               with an internal time-out retry.

               A bug has been fixed with a lingering time-out from
               after an SCTP connect that could stop the flow of
               incoming messages on an active `gen_tcp` socket.


  OTP-19251    Application(s): erts
               Related Id(s): GH-8853

               On Windows, successive failed socket calls caused
               socket to become "uninitialized".


  OTP-19254    Application(s): erts
               Related Id(s): GH-8848

               The socket framework fails to start on a IPv6-only
               Windows machine.


  OTP-19258    Application(s): erts, kernel
               Related Id(s): ERIERL-1134, OTP-19061

               An boolean option `non_block_send` for SCTP, has ben
               added to be able to achieve the old behaviour to avoid
               blocking send operations by passing the OS network
               stack error message (`{error,eagain}` through.


  OTP-19267    Application(s): erts
               Related Id(s): ERIERL-1138, GH-6455, PR-8892, OTP-18520

               The call `gen_tcp:send/2` could hang indefinitely
               despite having set the `send_timeout` option for the
               following unfortunate combination of circumstances:

               * The socket has to be in passive mode. * All output
               buffers had to be filled util the `high_watermark` was
               hit, causing the `gen_tcp:send/2` operation to block. *
               While the send operation was blocked, a
               `gen_tcp:recv/2,3` call had to be done from a different
               process. It had to block, waiting for data for a while
               before completing the operation, and the received
               packet had to fill at least 75% of the receive buffer.

               Under these circumstances he information that a send
               operation was waiting got lost, so the send operation
               that blocked in the first placed would never return.
               The data it had would be sent, though, and send
               operations from other processes, still work.

               This bug has been fixed.


  OTP-19269    Application(s): erts
               Related Id(s): GH-8835, PR-8897

               Fixed beam crash that could happen if resetting
               call_time or call_memory trace counters of a function
               while it is called. Bug exists since OTP R16.


 Full runtime dependencies of erts-14.2.5.4: kernel-9.0, sasl-3.3,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- inets-9.1.0.1 ---------------------------------------------------
 ---------------------------------------------------------------------

 The inets-9.1.0.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19158    Application(s): inets

               *** POTENTIAL INCOMPATIBILITY ***

               With this change, HTTP client, when returning an
               asynchronous request, now correctly takes into account
               `OptionRequest - full_result`


  OTP-19221    Application(s): inets
               Related Id(s): ERIERL-1091, PR-8788, PR-8801

               With this change, synchronous httpc:request now
               timeouts after `Timeout` specified in `HttpOption
               {timeout, Timeout}`


 Full runtime dependencies of inets-9.1.0.1: erts-14.0, kernel-9.0,
 mnesia-4.12, public_key-1.13, runtime_tools-1.8.14, ssl-9.0,
 stdlib-5.0, stdlib-5.0


 ---------------------------------------------------------------------
 --- kernel-9.2.4.3 --------------------------------------------------
 ---------------------------------------------------------------------

 The kernel-9.2.4.3 application can be applied ...
Read more

OTP 27.1.1

30 Sep 13:10
Compare
Choose a tag to compare
Patch Package:           OTP 27.1.1
Git Tag:                 OTP-27.1.1
Date:                    2024-09-30
Trouble Report Id:       OTP-19227, OTP-19236, OTP-19238, OTP-19241,
                         OTP-19245, OTP-19251, OTP-19252, OTP-19254,
                         OTP-19256, OTP-19257
Seq num:                 #8848, #8853, ERIERL-1130, GH-8832, PR-8261,
                         PR-8780, PR-8809, PR-8836, PR-8858
System:                  OTP
Release:                 27
Application:             common_test-1.27.2, erts-15.1.1,
                         public_key-1.16.3, ssl-11.2.3, stdlib-6.1.1
Predecessor:             OTP 27.1

Check out the git tag OTP-27.1.1, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

common_test-1.27.2

The common_test-1.27.2 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • With this change, HTML reports include jQuery version 3.7.1.

    Own Id: OTP-19252
    Related Id(s): PR-8858

Full runtime dependencies of common_test-1.27.2

compiler-6.0, crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0,
kernel-8.4, observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0,
stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8

erts-15.1.1

The erts-15.1.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • On Windows, successive failed socket calls caused socket to become
    "uninitialized".

    Own Id: OTP-19251
    Related Id(s): #8853

  • The socket framework fails to start on a IPv6-only Windows machine.

    Own Id: OTP-19254
    Related Id(s): #8848

Full runtime dependencies of erts-15.1.1

kernel-9.0, sasl-3.3, stdlib-4.1

public_key-1.16.3

The public_key-1.16.3 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Introduction of verify_fun/4 unfortunately introduced an argument switch for
    some specific path validation errors so that verify_fun/3 could under these
    circumstances be called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in reverse order.

    Own Id: OTP-19245
    Related Id(s): GH-8832

Improvements and New Features

  • Do not hide crypto badarg reason, this error handling enhancement facilitates
    debugging. These kind of runtime errors are not documented and should never be
    relied on for matching, they are intended for catching input errors early.

    Own Id: OTP-19238

Full runtime dependencies of public_key-1.16.3

asn1-3.0, crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5

ssl-11.2.3

Note! The ssl-11.2.3 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.2 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

  • Starting from TLS-1.3 some server handshake alerts might arrive after
    ssl:connection/2,3,4 has returned. If the socket is in active mode the
    controlling process will get the alert message, but passive sockets would only
    get {error, closed} on next call to ssl:recv/2,3 or ssl/setopts/2. Passive
    sockets calls will now return {error, error_alert()} instead.

    Own Id: OTP-19236
    Related Id(s): PR-8261

  • Servers configured to support only version (pre TLS-1.2) should ignore hello
    version extension, as it is an unknown extension to them, this will result in
    that new clients that do not support the old server version will get an
    insufficient security alert from the server and not a protocol version alert,
    this is consistent with how old servers not able to support higher protocol
    versions work.

    Own Id: OTP-19257

Full runtime dependencies of ssl-11.2.3

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.2,
runtime_tools-1.15.1, stdlib-6.0

stdlib-6.1.1

The stdlib-6.1.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Remove whitespace stripping of returned binaries in json:decode/3.

    Own Id: OTP-19227
    Related Id(s): ERIERL-1130, PR-8809

  • Fix zip:unzip/2 to not crash when extracting zip files with garbage in the
    Zip64 extra header. This bug was introduced in Erlang 27.1 and has so far only
    been seen on some archives creates by MS Excel.

    Own Id: OTP-19241
    Related Id(s): PR-8836

  • With this change, shutdown procedure handles a race condition between
    supervisor executing a shutdown and child process termination from other
    reason.

    Own Id: OTP-19256
    Related Id(s): PR-8780

Full runtime dependencies of stdlib-6.1.1

compiler-5.0, crypto-4.5, erts-15.0, kernel-10.0, sasl-3.0

Thanks to

Jakub Witczak

OTP 25.3.2.14

19 Sep 05:52
Compare
Choose a tag to compare
Patch Package:           OTP 25.3.2.14
Git Tag:                 OTP-25.3.2.14
Date:                    2024-09-19
Trouble Report Id:       OTP-19170, OTP-19173, OTP-19179, OTP-19206,
                         OTP-19217
Seq num:                 ERIERL-1102, ERIERL-1104, GH-7746, PR-8310
System:                  OTP
Release:                 25
Application:             diameter-2.2.7.2, public_key-1.13.3.3,
                         ssh-4.15.3.6, xmerl-1.3.31.2
Predecessor:             OTP 25.3.2.13

 Check out the git tag OTP-25.3.2.14, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- diameter-2.2.7.2 ------------------------------------------------
 ---------------------------------------------------------------------

 The diameter-2.2.7.2 application can be applied independently of
 other applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19206    Application(s): diameter
               Related Id(s): ERIERL-1102

               `diameter:stop_service/1` has been made more
               synchronous.


 Full runtime dependencies of diameter-2.2.7.2: erts-10.0, kernel-3.2,
 ssl-9.0, stdlib-3.0


 ---------------------------------------------------------------------
 --- public_key-1.13.3.3 ---------------------------------------------
 ---------------------------------------------------------------------

 The public_key-1.13.3.3 application can be applied independently of
 other applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19179    Application(s): public_key

               For completeness handle rsa_pss implicit default value,
               although this will probably not be commonly used as it
               provides very weak security.


 Full runtime dependencies of public_key-1.13.3.3: asn1-3.0,
 crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5


 ---------------------------------------------------------------------
 --- ssh-4.15.3.6 ----------------------------------------------------
 ---------------------------------------------------------------------

 The ssh-4.15.3.6 application can be applied independently of other
 applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19170    Application(s): ssh
               Related Id(s): GH-7746

               The SSh daemon started with a TCP port number argument
               will now re-try obtaining a listen socket before
               returning an error to the user.


  OTP-19173    Application(s): ssh
               Related Id(s): PR-8310

               Robustness has been improved by monitoring the
               connection handler process before casting the socket
               control notification.


 Full runtime dependencies of ssh-4.15.3.6: crypto-5.0, erts-11.0,
 kernel-6.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-3.15


 ---------------------------------------------------------------------
 --- xmerl-1.3.31.2 --------------------------------------------------
 ---------------------------------------------------------------------

 The xmerl-1.3.31.2 application can be applied independently of other
 applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19217    Application(s): xmerl
               Related Id(s): ERIERL-1104

               Corrected export functions from internal structure to
               XML so xmlText items of type cdata are handled
               correctly. They were just exported as normal text
               instead of output in a CDATA section.


 Full runtime dependencies of xmerl-1.3.31.2: erts-6.0, kernel-3.0,
 stdlib-2.5


 ---------------------------------------------------------------------
 --- Thanks to -------------------------------------------------------
 ---------------------------------------------------------------------

 jakob svenningsson


 ---------------------------------------------------------------------
 ---------------------------------------------------------------------
 ---------------------------------------------------------------------

OTP 27.1

18 Sep 08:30
Compare
Choose a tag to compare
Patch Package:           OTP 27.1
Git Tag:                 OTP-27.1
Date:                    2024-09-18
Trouble Report Id:       OTP-17848, OTP-19032, OTP-19097, OTP-19098,
                         OTP-19101, OTP-19102, OTP-19103, OTP-19104,
                         OTP-19105, OTP-19110, OTP-19112, OTP-19113,
                         OTP-19114, OTP-19119, OTP-19122, OTP-19126,
                         OTP-19128, OTP-19129, OTP-19130, OTP-19132,
                         OTP-19133, OTP-19134, OTP-19136, OTP-19138,
                         OTP-19139, OTP-19143, OTP-19145, OTP-19146,
                         OTP-19148, OTP-19153, OTP-19154, OTP-19157,
                         OTP-19163, OTP-19164, OTP-19166, OTP-19167,
                         OTP-19168, OTP-19169, OTP-19170, OTP-19171,
                         OTP-19172, OTP-19173, OTP-19175, OTP-19176,
                         OTP-19178, OTP-19179, OTP-19181, OTP-19182,
                         OTP-19183, OTP-19186, OTP-19187, OTP-19188,
                         OTP-19189, OTP-19190, OTP-19191, OTP-19192,
                         OTP-19193, OTP-19197, OTP-19199, OTP-19200,
                         OTP-19201, OTP-19202, OTP-19203, OTP-19205,
                         OTP-19206, OTP-19208, OTP-19209, OTP-19210,
                         OTP-19211, OTP-19212, OTP-19214, OTP-19215,
                         OTP-19216, OTP-19217, OTP-19218, OTP-19219,
                         OTP-19220, OTP-19222
Seq num:                 #8399, ERIERL-1102, ERIERL-1104, ERIERL-870,
                         GH-4362, GH-7621, GH-7746, GH-8378, GH-8454,
                         GH-8472, GH-8477, GH-8486, GH-8498, GH-8561,
                         GH-8562, GH-8568, GH-8604, GH-8605, GH-8613,
                         GH-8630, GH-8656, GH-8657, GH-8661, GH-8690,
                         GH-8715, GH-8738, GH-8748, GH-8779, GH-8785,
                         OTP-18671, OTP-18835, OTP-19101, OTP-19175,
                         PR-7226, PR-7419, PR-7919, PR-8261, PR-8310,
                         PR-8472, PR-8478, PR-8499, PR-8503, PR-8515,
                         PR-8516, PR-8518, PR-8521, PR-8528, PR-8539,
                         PR-8541, PR-8543, PR-8555, PR-8560, PR-8575,
                         PR-8578, PR-8583, PR-8584, PR-8596, PR-8611,
                         PR-8623, PR-8627, PR-8636, PR-8638, PR-8655,
                         PR-8672, PR-8683, PR-8686, PR-8690, PR-8692,
                         PR-8702, PR-8703, PR-8707, PR-8709, PR-8731,
                         PR-8739, PR-8740, PR-8741, PR-8742, PR-8751,
                         PR-8757, PR-8765, PR-8774, PR-8777, PR-8781
System:                  OTP
Release:                 27
Application:             asn1-5.3.1, common_test-1.27.1,
                         compiler-8.5.2, crypto-5.5.1, dialyzer-5.2.1,
                         diameter-2.4.1, edoc-1.3.2, erts-15.1,
                         ftp-1.2.3, inets-9.3, kernel-10.1, odbc-2.15,
                         public_key-1.16.2, runtime_tools-2.1.1,
                         snmp-5.17, ssh-5.2.2, ssl-11.2.2, stdlib-6.1,
                         syntax_tools-3.2.1, tftp-1.2.1, tools-4.1,
                         wx-2.4.3, xmerl-2.1
Predecessor:             OTP 27.0.1

Check out the git tag OTP-27.1, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

HIGHLIGHTS

  • The [zip] module has been updated with support for:

    • zip64 archives - Archives larger than 4GB or with more than 2^32 entries.
    • extended timestamps - Higher resolution and in UTC.
    • UID/GID - Save and extract the original UID/GID.
    • Fixes so that permission mode attributes are correctly read and set for
      files in archives.
    • zip:list_dir/2 now also returns directories, not only files. (You can
      disable this behaviour by using the option skip_directories).

    Various bugs in the original implementation have also been fixed, such as:

    • Correctly encode and decode the DOS timestamps for entries within an archive
      (that is the non-extended timestamp).
    • Fix DOS timestamps to be set to localtime instead of UTC (use extended
      timestamps for UTC timestamps).
    • Use the unix file attributes read from disk when creating archives instead
      of setting everything to 644.

    Own Id: OTP-19214
    Application(s): erts, stdlib
    Related Id(s): [PR-8765]

POTENTIAL INCOMPATIBILITIES

  • Progress reports for a dynamically started supervisor will now be logged at
    debug level.

    Own Id: OTP-19202
    Application(s): stdlib
    Related Id(s): [GH-8715], [PR-8261], [PR-8741]

OTP-27.1

Fixed Bugs and Malfunctions

  • The description of the pre-defined macros has been clarified. In particular,
    it is now made clear that the release returned by ?OTP_RELEASE is the
    release under which the compiler is run.

    Own Id: OTP-19103
    Related Id(s): [GH-8486], [PR-8518]

  • ex_doc now runs using an explicit escript instance instead of /usr/bin/env
    so that package tools such as nix can build the documentation.

    Own Id: OTP-19145
    Related Id(s): [GH-8378], [PR-8596]

  • The otp_patch_apply script, used for patching OTP applications, has been
    fixed. It was not possible (and still is not possible) to apply applications
    from the OTP 27.0.1 patch package onto an OTP 27.0 installation.

    Own Id: OTP-19182

  • ./otp_build download_ex_doc was using sha1sum and sha256sum which work
    on various Unix systems. macOS does not have these applications installed by
    default, so we added a new dependency to the build process, shasum, which is
    installed by default on macOS and allows us to check the integrity of
    ex_doc.

    Own Id: OTP-19193
    Related Id(s): [GH-8656], [PR-8707]

  • On documentation web pages using Mermaid JS scripts for figures, the scripts
    are now loaded asynchronously so that the rest of pages can be shown while the
    scripts are still downloading.

    Own Id: OTP-19197
    Related Id(s): [PR-8731]

Improvements and New Features

  • The obsolete documentation for OAM Principles has been removed.

    Own Id: OTP-19110
    Related Id(s): [PR-8528]

asn1-5.3.1

The asn1-5.3.1 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fixed a cosmetic but harmless issue with the ASN.1 compiler passing on the
    undec_rest option to the Erlang compiler.

    Own Id: OTP-19218
    Related Id(s): [GH-8779], [PR-8781]

Full runtime dependencies of asn1-5.3.1

erts-14.0, kernel-9.0, stdlib-5.0

common_test-1.27.1

The common_test-1.27.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Groups with empty list specifying groups and test cases no longer crash
    execution.

    Own Id: OTP-19032
    Related Id(s): [GH-4362], [PR-7919]

  • The Common_Test documentation and type specs have been polished.

    Own Id: OTP-19148
    Related Id(s): [PR-8516]

  • Man pages are now available for erl, erlc, dialyzer, and all other
    programs that are included in Erlang/OTP.

    Own Id: OTP-19201
    Related Id(s): [PR-8740]

Full runtime dependencies of common_test-1.27.1

compiler-6.0, crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0,
kernel-8.4, observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0,
stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8

compiler-8.5.2

The compiler-8.5.2 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fixed a crash in an optimization pass relating to appending binaries.

    Own Id: OTP-19168
    Related Id(s): [GH-8630]

  • Fixed a bug in the compiler's alias analysis pass that could make it emit
    unsafe code.

    Own Id: OTP-19178
    Related Id(s): [PR-8686]

Full runtime dependencies of compiler-8.5.2

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

crypto-5.5.1

The crypto-5.5.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • crypto built with --enable-fips will now accept an OpenSSL 3 lib without
    fips provider as long as fips mode is not enabled.

    Own Id: OTP-19212
    Related Id(s): [GH-8562]

Improvements and New Features

  • Added a warning in the documentation to avoid calling crypto:start/0 as it
    does not work for FIPS mode. Use application:start(crypto) instead.

    Own Id: OTP-19143

  • Deprecation of RSA encryption functions has been reverted, as there still
    exists legitimate use cases with other padding modes than PKCS-1.

    While use PCKS-1 padding with some versions of cryptolib could be considered
    secure, we still recommend using other algorithms that are less sensitive to
    oracle attacks.

    Own Id: OTP-19163

  • Compiler warnings for some removed functions have been corrected to point out
    the correct replacement functions.

    Own Id: OTP-19186
    Related Id(s): [PR-8709]

Full runtime dependencies of crypto-5.5.1

erts-9.0, kernel-5.3, stdlib-3.9

dialyzer-5.2.1

The dialyzer-5.2.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Man pages are now available for erl, erlc, dialyzer, and all other
    programs that are included in Erlang/OTP.

    Own Id: OTP-19201
    Related Id(s): [PR-8740]

Full runtime dependencies of dialyzer-5.2.1

compiler-8.0, erts-12.0, kernel-8.0, st...

Read more

OTP 26.2.5.3

05 Sep 08:15
Compare
Choose a tag to compare
Patch Package:           OTP 26.2.5.3
Git Tag:                 OTP-26.2.5.3
Date:                    2024-09-05
Trouble Report Id:       OTP-17848, OTP-19119, OTP-19168, OTP-19170,
                         OTP-19173, OTP-19175, OTP-19178, OTP-19179,
                         OTP-19187, OTP-19205, OTP-19206, OTP-19213
Seq num:                 ERIERL-1102, ERIERL-1108, GH-7746, GH-8454,
                         GH-8561, GH-8630, PR-8310, PR-8543, PR-8686,
                         PR-8690, PR-8763
System:                  OTP
Release:                 26
Application:             compiler-8.4.3.1, diameter-2.3.2.2,
                         erts-14.2.5.3, ftp-1.2.1.1, kernel-9.2.4.2,
                         public_key-1.15.1.2, ssh-5.1.4.2,
                         ssl-11.1.4.3
Predecessor:             OTP 26.2.5.2

 Check out the git tag OTP-26.2.5.3, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- compiler-8.4.3.1 ------------------------------------------------
 ---------------------------------------------------------------------

 The compiler-8.4.3.1 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19168    Application(s): compiler
               Related Id(s): GH-8630

               Fixed a crash in an optimization pass relating to
               appending binaries.


  OTP-19178    Application(s): compiler
               Related Id(s): PR-8686

               Fixed a bug in the compiler's alias analysis pass that
               could make it emit unsafe code.


 Full runtime dependencies of compiler-8.4.3.1: crypto-5.1, erts-13.0,
 kernel-8.4, stdlib-5.0


 ---------------------------------------------------------------------
 --- diameter-2.3.2.2 ------------------------------------------------
 ---------------------------------------------------------------------

 The diameter-2.3.2.2 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19206    Application(s): diameter
               Related Id(s): ERIERL-1102

               Stop service has been made more synchronous.


 Full runtime dependencies of diameter-2.3.2.2: erts-10.0, kernel-3.2,
 ssl-9.0, stdlib-5.0


 ---------------------------------------------------------------------
 --- erts-14.2.5.3 ---------------------------------------------------
 ---------------------------------------------------------------------

 The erts-14.2.5.3 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19175    Application(s): erts, kernel, ssl
               Related Id(s): GH-8561, PR-8690

               A race in the kTLS flavour of SSL distribution has been
               fixed so inet_drv.c doesn't read ahead too much data
               which could cause the kTLS encryption to be activated
               too late when some encrypted data had already been read
               into the inet_drv.c buffer as unencrypted.


 Full runtime dependencies of erts-14.2.5.3: kernel-9.0, sasl-3.3,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- ftp-1.2.1.1 -----------------------------------------------------
 ---------------------------------------------------------------------

 The ftp-1.2.1.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19119    Application(s): ftp
               Related Id(s): GH-8454, PR-8543

               Fix race condition that sometimes resulted in
               ftp:recv_bin/2 returning ok instead of {ok, Data}.


 Full runtime dependencies of ftp-1.2.1.1: erts-7.0, kernel-6.0,
 runtime_tools-1.15.1, ssl-10.2, stdlib-3.5


 ---------------------------------------------------------------------
 --- kernel-9.2.4.2 --------------------------------------------------
 ---------------------------------------------------------------------

 The kernel-9.2.4.2 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19175    Application(s): erts, kernel, ssl
               Related Id(s): GH-8561, PR-8690

               A race in the kTLS flavour of SSL distribution has been
               fixed so inet_drv.c doesn't read ahead too much data
               which could cause the kTLS encryption to be activated
               too late when some encrypted data had already been read
               into the inet_drv.c buffer as unencrypted.


  OTP-19205    Application(s): kernel

               Fix a deadlock when an application crashes during
               startup and log messages were sent to standard out.
               Logger would fail to print the messages to standard out
               and instead print them to standard error.


  OTP-19213    Application(s): kernel
               Related Id(s): ERIERL-1108, PR-8763

               Add the stdlib application parameters
               shell_redraw_prompt_on_output which when set to false
               disables redrawing of the shell prompt if any other
               output is done.


 Full runtime dependencies of kernel-9.2.4.2: crypto-5.0, erts-14.0,
 sasl-3.0, stdlib-5.0


 ---------------------------------------------------------------------
 --- public_key-1.15.1.2 ---------------------------------------------
 ---------------------------------------------------------------------

 The public_key-1.15.1.2 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19179    Application(s): public_key

               For completeness handle rsa_pss implicit default value,
               although this will probably not be commonly used as it
               provides very weak security.


 Full runtime dependencies of public_key-1.15.1.2: asn1-3.0,
 crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5


 ---------------------------------------------------------------------
 --- ssh-5.1.4.2 -----------------------------------------------------
 ---------------------------------------------------------------------

 The ssh-5.1.4.2 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19170    Application(s): ssh
               Related Id(s): GH-7746

               With this change, ssh daemon started with TCP port
               number argument will re-try to obtain listen socket
               before returning error to user.


  OTP-19173    Application(s): ssh
               Related Id(s): PR-8310

               With this change, robustness is improved by monitoring
               connection handler process before casting socket
               control notification.


 Full runtime dependencies of ssh-5.1.4.2: crypto-5.0, erts-14.0,
 kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0,
 stdlib-5.0


 ---------------------------------------------------------------------
 --- ssl-11.1.4.3 ----------------------------------------------------
 ---------------------------------------------------------------------

 The ssl-11.1.4.3 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19175    Application(s): erts, kernel, ssl
               Related Id(s): GH-8561, PR-8690

               A race in the kTLS flavour of SSL distribution has been
               fixed so inet_drv.c doesn't read ahead too much data
               which could cause the kTLS encryption to be activated
               too late when some encrypted data had already been read
               into the inet_drv.c buffer as unencrypted.


 --- Improvements and New Features ---

  OTP-17848    Application(s): ssl

               Make sure all TLS-1.3 terminations are graceful
               (previous TLS version terminations already are).


  OTP-19187    Application(s): ssl

               Include more information in logging of SNI (Server Name
               Indication) mismatch error.


 Full runtime dependencies of ssl-11.1.4.3: crypto-5.0, erts-14.0,
 inets-5.10.7, kernel-9.0, public_key-1.11.3, runtime_tools-1.15.1,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- Thanks to -------------------------------------------------------
 ---------------------------------------------------------------------

 Frej Drejhammar, jakob svenningsson


 ---------------------------------------------------------------------
 ---------------------------------------------------------------------
 ---------------------------------------------------------------------

OTP 27.0.1

10 Jul 13:52
Compare
Choose a tag to compare
Patch Package:           OTP 27.0.1
Git Tag:                 OTP-27.0.1
Date:                    2024-07-10
Trouble Report Id:       OTP-19091, OTP-19092, OTP-19094, OTP-19095,
                         OTP-19099, OTP-19100, OTP-19106, OTP-19107,
                         OTP-19108, OTP-19109, OTP-19116, OTP-19118,
                         OTP-19121, OTP-19123, OTP-19131, OTP-19137,
                         OTP-19140, OTP-19142, OTP-19147, OTP-19151,
                         OTP-19152
Seq num:                 ERIERL-1043, ERIERL-1106, GH-8376, GH-8482,
                         GH-8484, GH-8489, GH-8574, GH-8579, GH-8580,
                         GH-8588, GH-8614, PR-8345, PR-8507, PR-8508,
                         PR-8519, PR-8534, PR-8539, PR-8542, PR-8546,
                         PR-8567, PR-8581, PR-8585, PR-8616, PR-8619
System:                  OTP
Release:                 27
Application:             compiler-8.5.1, edoc-1.3.1, erts-15.0.1,
                         kernel-10.0.1, public_key-1.16.1, ssh-5.2.1,
                         ssl-11.2.1, stdlib-6.0.1
Predecessor:             OTP 27.0

Check out the git tag OTP-27.0.1, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

OTP-27.0.1

Improvements and New Features

  • Bump ex_doc version to v0.34.1 and fix copyright in published docs to have
    correct year.

    Own Id: OTP-19095
    Related Id(s): PR-8507

compiler-8.5.1

The compiler-8.5.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • One of the compiler's optimization passes would get very slow when compiling
    certain modules. The compiler will now automatically disable that pass for
    input that would trigger the slowdown.

    Own Id: OTP-19131
    Related Id(s): PR-8567

  • Fix +deterministic to work properly with documentation attributes.

    Own Id: OTP-19142
    Related Id(s): GH-8579, PR-8585

Full runtime dependencies of compiler-8.5.1

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

edoc-1.3.1

The edoc-1.3.1 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fix broken makefile dependency when building HTML documentation.

    Own Id: OTP-19116
    Related Id(s): PR-8534

Full runtime dependencies of edoc-1.3.1

erts-11.0, inets-5.10, kernel-7.0, stdlib-4.0, syntax_tools-2.0, xmerl-1.3.7

erts-15.0.1

The erts-15.0.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • In rare circumstances the JIT could do an unsafe in-place update of a tuple.

    Own Id: OTP-19108
    Related Id(s): PR-8539

  • When a port command crashed in the inet driver during gen_tcp:send/2, a
    monitor 'DOWN' message could be left lingering in the caller's mailbox. This
    has now been fixed.

    Own Id: OTP-19121
    Related Id(s): GH-8484

  • 'DOWN' messages originating from a monitored port, contained the atom
    process instead of the atom port as the third element when the exit reason
    was not an immediate term.

    Own Id: OTP-19123
    Related Id(s): GH-8484, PR-8546

  • Fix so that the options to enable Transparent Huge Page alignment of the
    Erlang VM executable are only applied to the Erlang VM and not other native
    programs such as erlc and dialyzer. This bug was introduced in Erlang/OTP
    27.0.

    Own Id: OTP-19137
    Related Id(s): GH-8574

  • When no time warp mode was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the monotonic property.
    The runtime system will abort when detecting an issue like this since OTP
    24.3.4.17 and OTP 25.0.

    Up until OTP 25 no time warp mode is the default. As of OTP 26 multi time
    warp mode
    is the default.

    Own Id: OTP-19147
    Related Id(s): ERIERL-1043, ERIERL-1106, PR-8619

  • When calling trace:function(Session, _, true, [meta]) the meta tracer was
    incorrectly set to be the calling process. Now it's set to the session tracer
    as expected.

    Own Id: OTP-19151
    Related Id(s): GH-8614, PR-8616

Full runtime dependencies of erts-15.0.1

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.0.1

The kernel-10.0.1 application can be applied independently of other applications
on a full OTP 27 installation.

Improvements and New Features

  • Polish the logger documentation.

    Own Id: OTP-19118
    Related Id(s): PR-8534

Full runtime dependencies of kernel-10.0.1

crypto-5.0, erts-15.0, sasl-3.0, stdlib-6.0

public_key-1.16.1

The public_key-1.16.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fix bug in dnsName constraint check, could cause valid cert to be considered
    bad during path validation.

    Own Id: OTP-19100
    Related Id(s): GH-8482, PR-8508

Full runtime dependencies of public_key-1.16.1

asn1-3.0, crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5

ssh-5.2.1

The ssh-5.2.1 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • With this change, race condition between connection closing and automatic
    window adjustment is fixed.

    Own Id: OTP-19109
    Related Id(s): PR-8345

Full runtime dependencies of ssh-5.2.1

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1,
stdlib-5.0, stdlib-6.0

ssl-11.2.1

The ssl-11.2.1 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Check for TLS-1.3 support should check minimum requirements.

    Own Id: OTP-19094
    Related Id(s): GH-8489

  • If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2 negotiated convert
    TLS-1.3 ECDSA schemes to TLS-1.2 hash and signature pairs for increased
    interoperability.

    Own Id: OTP-19107
    Related Id(s): GH-8376

  • TLS-1.3 negotiation now uses SNI based options correctly instead of ignoring
    them.

    Own Id: OTP-19140

Improvements and New Features

  • Make it easier to distinguish between a invalid signature and unsupported
    signature.

    Own Id: OTP-19091

  • Enhance ALERT logs to help understand what causes the alert.

    Own Id: OTP-19092
    Related Id(s): GH-8482

  • When the default value for signature_algs is used, default the
    signature_algs_cert to the default value + rsa_pkcs1_sha1 to allow this
    algorithms for certificates but not for the TLS protocol. This is for better
    interoperability. If signature_algs is set explicitly signature_algs_cert must
    also be set explicitly if they should be different.

    Own Id: OTP-19152
    Related Id(s): GH-8588

Full runtime dependencies of ssl-11.2.1

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.15,
runtime_tools-1.15.1, stdlib-6.0

stdlib-6.0.1

The stdlib-6.0.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fix so that missing -doc({file, File}) files only result in a warning and
    not an error.

    Own Id: OTP-19099
    Related Id(s): PR-8542

  • Fixed json bugs, json:encode_key_value_list/2 did not generate arrays
    and json:decode/3 did not invoke the user callback for 0.

    Own Id: OTP-19106
    Related Id(s): GH-8580, PR-8519, PR-8581

Full runtime dependencies of stdlib-6.0.1

compiler-5.0, crypto-4.5, erts-15.0, kernel-10.0, sasl-3.0

Thanks to

Frej Drejhammar, Igor Goryachev, MichaΕ‚ MuskaΕ‚a

OTP 26.2.5.2

10 Jul 10:11
Compare
Choose a tag to compare
Patch Package:           OTP 26.2.5.2
Git Tag:                 OTP-26.2.5.2
Date:                    2024-07-10
Trouble Report Id:       OTP-19143, OTP-19147, OTP-19152, OTP-19154,
                         OTP-19157
Seq num:                 ERIERL-1043, ERIERL-1106, GH-8588, GH-8613,
                         PR-8619, PR-8627, PR-8638
System:                  OTP
Release:                 26
Application:             crypto-5.4.2.1, erts-14.2.5.2, ssl-11.1.4.2,
                         stdlib-5.2.3.1
Predecessor:             OTP 26.2.5.1

 Check out the git tag OTP-26.2.5.2, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- crypto-5.4.2.1 --------------------------------------------------
 ---------------------------------------------------------------------

 The crypto-5.4.2.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Improvements and New Features ---

  OTP-19143    Application(s): crypto

               Add warning in documentation to avoid crypto:start/0 as
               it does not work for FIPS mode. Use
               application:start(crypto) instead.


 Full runtime dependencies of crypto-5.4.2.1: erts-9.0, kernel-5.3,
 stdlib-3.9


 ---------------------------------------------------------------------
 --- erts-14.2.5.2 ---------------------------------------------------
 ---------------------------------------------------------------------

 The erts-14.2.5.2 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19147    Application(s): erts
               Related Id(s): ERIERL-1043, ERIERL-1106, PR-8619

               When no time warp mode was enabled, a smaller Erlang
               monotonic time could be read than a previously read
               time, i.e., breaking the monotonic property. The
               runtime system will abort when detecting an issue like
               this since OTP 24.3.4.17 and OTP 25.0.

               Up until OTP 25 no time warp mode is the default. As of
               OTP 26 multi time warp mode is the default.


  OTP-19154    Application(s): erts
               Related Id(s): GH-8613, PR-8627

               A scheduler thread could get stuck when deleting a
               memory allocator carrier when adjacent carriers were
               deleted and/or inserted simultaneously by other
               schedulers. This in turn could cause the other
               schedulers to get stuck as well.


 Full runtime dependencies of erts-14.2.5.2: kernel-9.0, sasl-3.3,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- ssl-11.1.4.2 ----------------------------------------------------
 ---------------------------------------------------------------------

 The ssl-11.1.4.2 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Improvements and New Features ---

  OTP-19152    Application(s): ssl
               Related Id(s): GH-8588

               When the default value for signature_algs is used,
               default the signature_algs_cert to the default value +
               rsa_pkcs1_sha1 to allow this algorithms for
               certificates but not for the TLS protocol. This is for
               better interoperability. If signature_algs is set
               explicitly signature_algs_cert must also be set
               explicitly if they should be different.


 Full runtime dependencies of ssl-11.1.4.2: crypto-5.0, erts-14.0,
 inets-5.10.7, kernel-9.0, public_key-1.11.3, runtime_tools-1.15.1,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- stdlib-5.2.3.1 --------------------------------------------------
 ---------------------------------------------------------------------

 The stdlib-5.2.3.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19157    Application(s): stdlib
               Related Id(s): PR-8638

               Fixed a bug that caused the shell completion to crash
               when keyword and tuple appeared on the same line.


 Full runtime dependencies of stdlib-5.2.3.1: compiler-5.0,
 crypto-4.5, erts-13.1, kernel-9.0, sasl-3.0


 ---------------------------------------------------------------------
 ---------------------------------------------------------------------
 ---------------------------------------------------------------------

OTP 25.3.2.13

08 Jul 07:05
Compare
Choose a tag to compare
Patch Package:           OTP 25.3.2.13
Git Tag:                 OTP-25.3.2.13
Date:                    2024-07-08
Trouble Report Id:       OTP-19057, OTP-19109, OTP-19123, OTP-19140,
                         OTP-19147, OTP-19154
Seq num:                 ERIERL-1043, ERIERL-1106, GH-7483, GH-8484,
                         GH-8613, PR-8345, PR-8546, PR-8619, PR-8627
System:                  OTP
Release:                 25
Application:             erts-13.2.2.10, ssh-4.15.3.5, ssl-10.9.1.5
Predecessor:             OTP 25.3.2.12

 Check out the git tag OTP-25.3.2.13, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- erts-13.2.2.10 --------------------------------------------------
 ---------------------------------------------------------------------

 Note! The erts-13.2.2.10 application *cannot* be applied
       independently of other applications on an arbitrary OTP 25
       installation.

       On a full OTP 25 installation, also the following runtime
       dependencies have to be satisfied:
       -- kernel-8.5 (first satisfied in OTP 25.1)
       -- stdlib-4.1 (first satisfied in OTP 25.1)


 --- Fixed Bugs and Malfunctions ---

  OTP-19123    Application(s): erts
               Related Id(s): GH-8484, PR-8546

               'DOWN' messages originating from a monitored port,
               contained the atom process instead of the atom port as
               the third element when the exit reason was not an
               immediate term.


  OTP-19147    Application(s): erts
               Related Id(s): ERIERL-1043, ERIERL-1106, PR-8619

               When no time warp mode was enabled, a smaller Erlang
               monotonic time could be read than a previously read
               time, i.e., breaking the monotonic property. The
               runtime system will abort when detecting an issue like
               this since OTP 24.3.4.17 and OTP 25.0.

               Up until OTP 25 no time warp mode is the default. As of
               OTP 26 multi time warp mode is the default.


  OTP-19154    Application(s): erts
               Related Id(s): GH-8613, PR-8627

               A scheduler thread could get stuck when deleting a
               memory allocator carrier when adjacent carriers were
               deleted and/or inserted simultaneously by other
               schedulers. This in turn could cause the other
               schedulers to get stuck as well.


 Full runtime dependencies of erts-13.2.2.10: kernel-8.5, sasl-3.3,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- ssh-4.15.3.5 ----------------------------------------------------
 ---------------------------------------------------------------------

 The ssh-4.15.3.5 application can be applied independently of other
 applications on a full OTP 25 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19057    Application(s): ssh
               Related Id(s): GH-7483, PR-8345

               With this change, ssh client will automatically adjust
               transfer window size for commands executed remotely
               over SSH.


  OTP-19109    Application(s): ssh
               Related Id(s): PR-8345

               With this change, race condition between connection
               closing and automatic window adjustment is fixed.


 Full runtime dependencies of ssh-4.15.3.5: crypto-5.0, erts-11.0,
 kernel-6.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-3.15


 ---------------------------------------------------------------------
 --- ssl-10.9.1.5 ----------------------------------------------------
 ---------------------------------------------------------------------

 Note! The ssl-10.9.1.5 application *cannot* be applied independently
       of other applications on an arbitrary OTP 25 installation.

       On a full OTP 25 installation, also the following runtime
       dependency has to be satisfied:
       -- stdlib-4.1 (first satisfied in OTP 25.1)


 --- Fixed Bugs and Malfunctions ---

  OTP-19140    Application(s): ssl

               TLS-1.3 negotiation now uses SNI based options
               correctly instead of ignoring them.


 Full runtime dependencies of ssl-10.9.1.5: crypto-5.0, erts-10.0,
 inets-5.10.7, kernel-8.4, public_key-1.11.3, runtime_tools-1.15.1,
 stdlib-4.1


 ---------------------------------------------------------------------
 ---------------------------------------------------------------------
 ---------------------------------------------------------------------

OTP 26.2.5.1

25 Jun 08:59
Compare
Choose a tag to compare
Patch Package:           OTP 26.2.5.1
Git Tag:                 OTP-26.2.5.1
Date:                    2024-06-25
Trouble Report Id:       OTP-19057, OTP-19063, OTP-19090, OTP-19091,
                         OTP-19092, OTP-19094, OTP-19100, OTP-19104,
                         OTP-19107, OTP-19109, OTP-19121, OTP-19123,
                         OTP-19140
Seq num:                 ERIERL-870, GH-7483, GH-8376, GH-8482,
                         GH-8484, GH-8489, OTP-18835, PR-8345,
                         PR-8399, PR-8508, PR-8546
System:                  OTP
Release:                 26
Application:             diameter-2.3.2.1, erts-14.2.5.1,
                         kernel-9.2.4.1, public_key-1.15.1.1,
                         ssh-5.1.4.1, ssl-11.1.4.1
Predecessor:             OTP 26.2.5

 Check out the git tag OTP-26.2.5.1, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- diameter-2.3.2.1 ------------------------------------------------
 ---------------------------------------------------------------------

 The diameter-2.3.2.1 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Improvements and New Features ---

  OTP-19090    Application(s): diameter
               Related Id(s): PR-8399

               Pick peer can now also handle request of type
               #diameter_packet{}.


 Full runtime dependencies of diameter-2.3.2.1: erts-10.0, kernel-3.2,
 ssl-9.0, stdlib-5.0


 ---------------------------------------------------------------------
 --- erts-14.2.5.1 ---------------------------------------------------
 ---------------------------------------------------------------------

 The erts-14.2.5.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19063    Application(s): erts, kernel
               Related Id(s): OTP-18835

               A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
               = 0 on Windows could cause a (case clause) crash if
               data is immediately available.


  OTP-19121    Application(s): erts
               Related Id(s): GH-8484

               When a port command crashed in the inet driver during
               gen_tcp:send/2, a monitor 'DOWN' message could be left
               lingering in the caller's mailbox. This has now been
               fixed.


  OTP-19123    Application(s): erts
               Related Id(s): GH-8484, PR-8546

               'DOWN' messages originating from a monitored port,
               contained the atom process instead of the atom port as
               the third element when the exit reason was not an
               immediate term.


 Full runtime dependencies of erts-14.2.5.1: kernel-9.0, sasl-3.3,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- kernel-9.2.4.1 --------------------------------------------------
 ---------------------------------------------------------------------

 The kernel-9.2.4.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19063    Application(s): erts, kernel
               Related Id(s): OTP-18835

               A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
               = 0 on Windows could cause a (case clause) crash if
               data is immediately available.


  OTP-19104    Application(s): kernel
               Related Id(s): ERIERL-870

               Open a disk_log file and combining head_func with
               rotate options did not work.


 Full runtime dependencies of kernel-9.2.4.1: crypto-5.0, erts-14.0,
 sasl-3.0, stdlib-5.0


 ---------------------------------------------------------------------
 --- public_key-1.15.1.1 ---------------------------------------------
 ---------------------------------------------------------------------

 The public_key-1.15.1.1 application can be applied independently of
 other applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19100    Application(s): public_key
               Related Id(s): GH-8482, PR-8508

               Fix bug in dnsName constraint check, could cause valid
               cert to be considered bad during path validation.


 Full runtime dependencies of public_key-1.15.1.1: asn1-3.0,
 crypto-4.6, erts-6.0, kernel-3.0, stdlib-3.5


 ---------------------------------------------------------------------
 --- ssh-5.1.4.1 -----------------------------------------------------
 ---------------------------------------------------------------------

 The ssh-5.1.4.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19057    Application(s): ssh
               Related Id(s): GH-7483, PR-8345

               With this change, ssh client will automatically adjust
               transfer window size for commands executed remotely
               over SSH.


  OTP-19109    Application(s): ssh
               Related Id(s): PR-8345

               With this change, race condition between connection
               closing and automatic window adjustment is fixed.


 Full runtime dependencies of ssh-5.1.4.1: crypto-5.0, erts-14.0,
 kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0,
 stdlib-5.0


 ---------------------------------------------------------------------
 --- ssl-11.1.4.1 ----------------------------------------------------
 ---------------------------------------------------------------------

 The ssl-11.1.4.1 application can be applied independently of other
 applications on a full OTP 26 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-19094    Application(s): ssl
               Related Id(s): GH-8489

               Check for TLS-1.3 support should check minimum
               requirements.


  OTP-19107    Application(s): ssl
               Related Id(s): GH-8376

               If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
               negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2
               hash and signature pairs for increased
               interoperability.


  OTP-19140    Application(s): ssl

               TLS-1.3 negotiation now uses SNI based options
               correctly instead of ignoring them.


 --- Improvements and New Features ---

  OTP-19091    Application(s): ssl

               Make it easier to distinguish between a invalid
               signature and unsupported signature.


  OTP-19092    Application(s): ssl
               Related Id(s): GH-8482

               Enhance ALERT logs to help understand what causes the
               alert.


 Full runtime dependencies of ssl-11.1.4.1: crypto-5.0, erts-14.0,
 inets-5.10.7, kernel-9.0, public_key-1.11.3, runtime_tools-1.15.1,
 stdlib-4.1


 ---------------------------------------------------------------------
 --- Thanks to -------------------------------------------------------
 ---------------------------------------------------------------------

 Anupama Singh


 ---------------------------------------------------------------------
 ---------------------------------------------------------------------
 ---------------------------------------------------------------------