chore(deps): update dependency erlang to v28#201
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
36bb7d4 to
2c270cb
Compare
2c270cb to
a931cfa
Compare
a931cfa to
a404c0f
Compare
a404c0f to
93cc30c
Compare
93cc30c to
52d6c76
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
26.2.5→28.3.3Release Notes
erlang/otp (erlang)
v28.3.3: OTP 28.3.3Compare Source
Check out the git tag OTP-28.3.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
erl_interface-5.6.3
The erl_interface-5.6.3 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Add missing copyrights.
Own Id: OTP-20008
erts-16.2.2
The erts-16.2.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed bug in
erlang:monitor_nodefor rare reconnect race with multiple node monitoring from the same process.Own Id: OTP-19902
Related Id(s): PR-10518
Add missing copyrights.
Own Id: OTP-20008
v28.3.2: OTP 28.3.2Compare Source
Check out the git tag OTP-28.3.2, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
crypto-5.8.1
The crypto-5.8.1 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed static linking of OpenSSL 3.5+ on Windows.
Own Id: OTP-19993
Related Id(s): PR-10732
erts-16.2.1
The erts-16.2.1 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fail the windows build properly when nsis is not recognised.
Own Id: OTP-19926
Related Id(s): PR-10547
Socket accept cancel could cause fatal crash (core dump) on Windows.
Own Id: OTP-19958
Fixed bug in
ets:update_counter/4andets:update_element/4accepting and inserting a default tuple smaller than thekeyposof the table. Such a tuple without a key element would make the table internally inconsistent and might lead to bad behavior at table access, like ERTS runtime crash.Now a call to
ets:update_counter/4orets:update_element/4will fail withbadargif the key does not exist in the table and the default tuple is too small.Own Id: OTP-19962
Related Id(s): PR-10616
A missing memory barrier when unlocking process locks could cause unexpected behavior on architectures with weak memory ordering such as for example ARM.
Own Id: OTP-19978
Related Id(s): PR-10664
A process could fail to wake from hibernation when a non‑message signal followed by a message signal arrived concurrently as the receiving process hibernated. If the process had a large heap, triggering a dirty GC, the wakeup could be lost.
This bug existed since OTP 27.0.
Own Id: OTP-19983
Related Id(s): GH-10651, PR-10696
ssh-5.4.1
The ssh-5.4.1 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fix handling of the SSH "each side may guess" key-exchange mechanism as defined in RFC 4253, Section 7.
Own Id: OTP-19864
Related Id(s): GH-8676, PR-10575
Fix ssh_file:encode handling of OpenSSH V1 private keys generated by public_key module. Also correct type specifications for OpenSSH V1 keys in ssh_file encode and decode operations.
Own Id: OTP-19915
Related Id(s): PR-10539
stdlib-7.2.1
Note! The stdlib-7.2.1 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed bug in
ets:update_counter/4andets:update_element/4accepting and inserting a default tuple smaller than thekeyposof the table. Such a tuple without a key element would make the table internally inconsistent and might lead to bad behavior at table access, like ERTS runtime crash.Now a call to
ets:update_counter/4orets:update_element/4will fail withbadargif the key does not exist in the table and the default tuple is too small.Own Id: OTP-19962
Related Id(s): PR-10616
tftp-1.2.4
The tftp-1.2.4 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
An issue in the undocumented initial state option [{root_dir,Dir}] to the tftp_file module has been fixed. The request file name was just concatenated to Dir so it was possible to traverse above Dir by using "../" file path components. Now the option actually restricts local file operations to the Dir directory and subdirectories.
The initial state option and how to use it was previously undocumented, so it is unlikely that anyone would have used it without understanding its peculiarities.
The documentation of the TFTP application has also been clarified to make it obvious that the default server configuration allows read and write access to all files that are readable or writable by the user running the Erlang VM, and that the default configuration therefore should be avoided.
Thanks to Luigino Camastra at Aisle Research, for finding and reporting this issue.
Own Id: OTP-19981
Related Id(s): PR-10706, CVE-2026-21620
Thanks to
Daniel Hryzbil, Jan Uhlig
v28.3.1: OTP 28.3.1Compare Source
Check out the git tag OTP-28.3.1, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
megaco-4.8.2
The megaco-4.8.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
The megaco_tcp module had debug unintentionally enabled.
Own Id: OTP-19896
mnesia-4.25.1
The mnesia-4.25.1 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed bug where
mnesia:del_table_copy/3could fail when deleting a node that had tables which was not active anywhere.Own Id: OTP-19890
Related Id(s): ERIERL-1268, PR-10482
public_key-1.20.1
Note! The public_key-1.20.1 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Add missing git ignore for SLH-DSA generates.
Own Id: OTP-19897
Related Id(s): PR-10458
ssl-11.5.1
Note! The ssl-11.5.1 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Correct TLS-1.3 alert handling so server will always send the alert with the encryption keys that the client is expecting, that is if for instance if client certification fails the alert will be sent using application traffic encryption keys.
Own Id: OTP-19795
Related Id(s): PR-10465
Correct TLS-1.3 session tickets documentation.
Own Id: OTP-19891
Related Id(s): PR-10481
Corrected app environment handling for session callback that was broken In OTP-23.
Own Id: OTP-19893
Related Id(s): PR-10480
xmerl-2.1.8
The xmerl-2.1.8 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
XML regular expressions in XSD validation now handle
\sand\Scorrectly.Own Id: OTP-19762
Related Id(s): ERIERL-1260, PR-10437
Thanks to
Maria Scott
v28.3: OTP 28.3Compare Source
Check out the git tag OTP-28.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
HIGHLIGHTS
Add support for MLKEM hybrid algorithms x25519mlkem768, secp384r1mlkem1024, secp256r1mlkem768 in TLS-1.3
Own Id: OTP-19767
Application(s): ssl
Related Id(s): PR-10262
Support for the socket options TCP_KEEPCNT, TCP_KEEPIDLE, and TCP_KEEPINTVL have been implemented for
gen_tcp, as well as TCP_USER_TIMEOUT for bothgen_tcpandsocket.Own Id: OTP-19857
Application(s): erts, kernel
Related Id(s): PR-10390, OTP-19814
Add support in public_key and ssl for post quantum algorithm SLH-DSA.
Own Id: OTP-19867
Application(s): public_key, ssl
Related Id(s): PR-10398
Publish OpenVEX statements in https://erlang.org/download/vex/
OpenVEX statements contain the same information as the OTP advisories, with the addition of vendor CVEs for which Erlang/OTP is not affected. This is important to silence vulnerability scanners that may claim Erlang/OTP to be vulnerable to vendor dependency projects, e.g.,
openssl.OpenVEX statements will be published in https://erlang.org/download/vex/ where there will be an OTP file per release, e.g., https://erlang.org/download/vex/otp-28.openvex.json.
Erlang/OTP publishes OpenVEX statements for all supported releases, that is, as of today, OTP-26, OTP-27, and OTP-28.
The source SBOM tooling (oss-review-toolkit) has been updated to produce source SBOM in SPDX v2.3 format, and the source SBOM now links OpenVEX statements to a security external reference. This means that by simply analyzing the source SBOM, everyone can further read the location of the OpenVEX statements and further process them.
Own Id: OTP-19878
Application(s): otp
Related Id(s): PR-10428, PR-10452
POTENTIAL INCOMPATIBILITIES
Adjustment in ssh_file module allowing inclusion of Erlang/OTP license in test files containing keys.
Own Id: OTP-19743
Application(s): ssh
Related Id(s): PR-10177
OTP-28.3
Fixed Bugs and Malfunctions
Broken sidebar application index, for all OTP applications, are restored.
Own Id: OTP-19877
Related Id(s): ERIERL-1251, PR-10410
Improvements and New Features
Updated the vendor dependencies SHA to improve the accuracy of the source SBOM with
purlpointing to the exact vendor commit that Erlang/OTP builds upon.Own Id: OTP-19777
Related Id(s): PR-10216
OpenVEX statements has been added to rule out false positives on vendor dependencies: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
Own Id: OTP-19802
Related Id(s): GH-10254, GH-10255, PR-10256
The
mnesia_registrymodule will be removed in Erlang/OTP 29.Own Id: OTP-19808
Related Id(s): PR-10275
Publish OpenVEX statements in https://erlang.org/download/vex/
OpenVEX statements contain the same information as the OTP advisories, with the addition of vendor CVEs for which Erlang/OTP is not affected. This is important to silence vulnerability scanners that may claim Erlang/OTP to be vulnerable to vendor dependency projects, e.g.,
openssl.OpenVEX statements will be published in https://erlang.org/download/vex/ where there will be an OTP file per release, e.g., https://erlang.org/download/vex/otp-28.openvex.json.
Erlang/OTP publishes OpenVEX statements for all supported releases, that is, as of today, OTP-26, OTP-27, and OTP-28.
The source SBOM tooling (oss-review-toolkit) has been updated to produce source SBOM in SPDX v2.3 format, and the source SBOM now links OpenVEX statements to a security external reference. This means that by simply analyzing the source SBOM, everyone can further read the location of the OpenVEX statements and further process them.
Own Id: OTP-19878
Related Id(s): PR-10428, PR-10452
*** HIGHLIGHT ***
common_test-1.29.1
The common_test-1.29.1 application can be applied independently of other applications on a full OTP 28 installation.
Improvements and New Features
Updated the vendor dependencies SHA to improve the accuracy of the source SBOM with
purlpointing to the exact vendor commit that Erlang/OTP builds upon.Own Id: OTP-19777
Related Id(s): PR-10216
compiler-9.0.4
The compiler-9.0.4 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
For some function heads or
caseexpressions with a huge number of clauses, the compiler could spend an inordinate amount of time compiling the code.Own Id: OTP-19797
Related Id(s): PR-10252
Passing a type for a fun as a macro argument would result in a "badly formed argument" error message from the compiler. Example:
Compiling this module would result in the following error message:
Own Id: OTP-19821
Related Id(s): GH-10280, PR-10309
In certain edge cases, the compiler could emit code that would do an unsafe destructive update of a tuple. This has been corrected.
Own Id: OTP-19879
Related Id(s): GH-10367, PR-10435
Improvements and New Features
The compiler option
beam_debug_stackcombined withbeam_debug_infowill attempt to make as many variables as possible visible in the debugger. The option has no effect if given withoutbeam_debug_info.Own Id: OTP-19854
Related Id(s): PR-10374
crypto-5.8
The crypto-5.8 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
The deprecated function
crypto:rand_uniform/2has gotten a new replacement functioncrypto:strong_rand_range/1. When implementing this the documentation ofcryptoandrandhas been rewritten a bit and improved.Own Id: OTP-19841
Related Id(s): PR-10344
Improvements and New Features
You can now build OTP with OpenSSL 3.5 or later on windows.
Own Id: OTP-19848
Added SLH-DSA algorithms for sign/verify. Twelve variants supported in total; all combinations of SHAKE or SHA2 hashing, with 128, 192 or 256 bits, and fast(
f) or small(s).Own Id: OTP-19856
Related Id(s): PR-10268
Made
crypto:generate_key(dh, [P, G, MaxPrivateKeyBitLength])accept values ofMaxPrivateKeyBitLengthto be equal or larger than the bit length ofP. If so, the maximum bit length is adjusted down toP's bit length minus one.Own Id: OTP-19872
Related Id(s): PR-10394
diameter-2.6
The diameter-2.6 application can be applied independently of other applications on a full OTP 28 installation.
Improvements and New Features
Add new option 'indirect_inherits' to diameter_make:codec/2
Own Id: OTP-19626
Related Id(s): GH-8235, PR-10149
erl_interface-5.6.2
The erl_interface-5.6.2 application can be applied independently of other applications on a full OTP 28 installation.
Improvements and New Features
Updated the vendor dependencies SHA to improve the accuracy of the source SBOM with
purlpointing to the exact vendor commit that Erlang/OTP builds upon.Own Id: OTP-19777
Related Id(s): PR-10216
Updated MD5 implementation from OpenSSL 3.5.0 to 3.6.0
Own Id: OTP-19870
Related Id(s): PR-10405
Known Bugs and Problems
The
eiAPI for decoding/encoding terms is not fully 64-bit compatible since terms that have a representation on the external term format larger than 2 GB cannot be handled.Own Id: OTP-16607
Related Id(s): OTP-16608
erts-16.2
The erts-16.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a build issue on modern compilers.
Own Id: OTP-19789
Related Id(s): PR-9983
When multiple processes called the same fun whose defining module was not loaded, a
badfunexception could sometimes occur in one of the calling processes. This would only happen with the JIT runtime system.Own Id: OTP-19803
Related Id(s): PR-10257
Fix a bug where Erlang/OTP tools could load a different boot script from CWD.
Own Id: OTP-19819
Related Id(s): PR-10317
Fixed a bug when more than one session traced the same BIF. Disabling tracing for a BIF in one session could incorrectly disable tracing of the BIF in other trace sessions as well.
Own Id: OTP-19840
Related Id(s): PR-10349
Fixed a slight performance regression in
erlang:binary_to_term/1,2.Own Id: OTP-19859
Related Id(s): GH-8329, PR-10383
Two socket related code warts found by PVS Studio has been fixed. One caused
gen_tcpto no convert the send erroreconnabortedtoeconnreseton Windows. The other causedsocket:sendfile/*to indicate the wrong error for a badOffset.Own Id: OTP-19862
Related Id(s): PR-10362, PR-10388
Fixed bug causing VM crash if an Erlang process gets killed while executing
re:runwith a (presumably) large subject string.Own Id: OTP-19888
Related Id(s): GH-10432, PR-10439
Improvements and New Features
Updated the vendor dependencies SHA to improve the accuracy of the source SBOM with
purlpointing to the exact vendor commit that Erlang/OTP builds upon.Own Id: OTP-19777
Related Id(s): PR-10216
Receive buffer allocation has been optimized for
socketsocket in that an underutilized buffers' content is copied to a freshly allocated binary of the right size instead of being reallocated.This optimization was already implemented for the
socket:recv/1functions, but now the same buffer stragegy is shared between allsocketreceive operations.Own Id: OTP-19794
Related Id(s): PR-10231
Option(s) to create
gen_tcpandsocketsockets with protocol IPPROTO_MPTCP has been implemented.See functions
gen_tcp:listen/2,gen_tcp:connect/4and the typesocket:protocol/0.Own Id: OTP-19814
erlcwill now limit the number of ports and processes when startingerlin order to use less memory.Own Id: OTP-19852
Related Id(s): PR-10364
Support for the socket options TCP_KEEPCNT, TCP_KEEPIDLE, and TCP_KEEPINTVL have been implemented for
gen_tcp, as well as TCP_USER_TIMEOUT for bothgen_tcpandsocket.Own Id: OTP-19857
Related Id(s): PR-10390, OTP-19814
*** HIGHLIGHT ***
Limit size of sctp_event_subscribe on Linux
Own Id: OTP-19863
Related Id(s): PR-10321
Updated MD5 implementation from OpenSSL 3.5.0 to 3.6.0
Own Id: OTP-19870
Related Id(s): PR-10405
Improved performance when doing
socket:accepton the same socket from many processes on large multi core systems under high rate of connections. Mitigating performance regression seen since OTP 28.0.Own Id: OTP-19873
Related Id(s): GH-10322, PR-10323
Updated STL version used.
Own Id: OTP-19876
Updated PCRE2 to 10.47. Also picked newer fix, from upstream PCRE2, to bug that could cause benign random uninitialized data in exported regular expressions.
Own Id: OTP-19880
Related Id(s): PR-10391
eunit-2.10.1
The eunit-2.10.1 application can be applied independently of other applications on a full OTP 28 installation.
Improvements and New Features
The usages of deprecated slave module have been removed from the application. The fixture clause for spawning a test node now accepts Args either as a string or a list of strings (previously only a string was accepted).
Own Id: OTP-19738
Related Id(s): PR-10128
inets-9.5
The inets-9.5 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed uri_string:uri_string() to string() type specs inside httpc.erl module.
Own Id: OTP-19835
Related Id(s): PR-10242
Fixed a bug where request options were not applied to a https proxy connection.
Own Id: OTP-19875
Related Id(s): GH-10368, PR-10369
Improvements and New Features
The usages of slave module in inets were removed. The httpd_bench_suite has been updated for SSL testing and is not skipped anymore. The httpd_load_test example has been removed completely as outdated.
Own Id: OTP-19717
Related Id(s): PR-10064
Replace a call to application:which_applications() in httpc:set_options/2 with try...catch to reduce bottleneck.
Own Id: OTP-19884
Related Id(s): GH-10282, PR-10307
kernel-10.5
The kernel-10.5 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a shell crash when calling io:getopts() when user_drv process is not responding/terminating
Own Id: OTP-19812
Related Id(s): PR-10283
logger:get_handler_config/0will no longer crash if a logger handler is removed concurrently with that call.Own Id: OTP-19837
Related Id(s): GH-9997, PR-10308
Fixed a bug in the shell that made it incorrectly output a newline after the output already containing a newline but followed by an asci escape sequence.
Own Id: OTP-19847
Related Id(s): GH-10299
Improvements and New Features
Receive buffer allocation has been optimized for
socketsocket in that an underutilized buffers' content is copied to a freshly allocated binary of the right size instead of being reallocated.This optimization was already implemented for the
socket:recv/1functions, but now the same buffer stragegy is shared between allsocketreceive operations.Own Id: OTP-19794
Related Id(s): PR-10231
Option(s) to create
gen_tcpandsocketsockets with protocol IPPROTO_MPTCP has been implemented.See functions
gen_tcp:listen/2,gen_tcp:connect/4and the typesocket:protocol/0.Own Id: OTP-19814
Support for the socket options TCP_KEEPCNT, TCP_KEEPIDLE, and TCP_KEEPINTVL have been implemented for
gen_tcp, as well as TCP_USER_TIMEOUT for bothgen_tcpandsocket.Own Id: OTP-19857
Related Id(s): PR-10390, OTP-19814
*** HIGHLIGHT ***
Limit size of sctp_event_subscribe on Linux
Own Id: OTP-19863
Related Id(s): PR-10321
mnesia-4.25
The mnesia-4.25 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Add missing documentation about mnesia:activity/4
Own Id: OTP-19769
Related Id(s): PR-10186
With this change mnesia will try to not leak internal messages to user processes.
Own Id: OTP-19855
Related Id(s): GH-10347, PR-10379
Improvements and New Features
The
mnesia_registrymodule will be removed in Erlang/OTP 29.Own Id: OTP-19808
Related Id(s): PR-10275
os_mon-2.11.2
The os_mon-2.11.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a small documentation mistake in memsup
Own Id: OTP-19836
Related Id(s): GH-10330, PR-10308
public_key-1.20
Note! The public_key-1.20 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
ASN.1 Encoding and decoding of some extensions did not work, e.g.
CRLEntryExtension.Own Id: OTP-19869
Related Id(s): GH-10404, PR-10406
Improvements and New Features
Add support in public_key and ssl for post quantum algorithm SLH-DSA.
Own Id: OTP-19867
Related Id(s): PR-10398
*** HIGHLIGHT ***
snmp-5.20
The snmp-5.20 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a bug where running snmp:config() from Elixir would crash due to io:get_line/1 returning unexpected datatype.
Own Id: OTP-19883
Related Id(s): PR-10326
Improvements and New Features
Inherit ERL_DETERMINISTIC variable for compiling snmp_pdus_basic.beam.
Own Id: OTP-19885
Related Id(s): PR-10288
ssh-5.4
The ssh-5.4 application can be applied independently of other applications on a full OTP 28 installation.
Improvements and New Features
Adjustment in ssh_file module allowing inclusion of Erlang/OTP license in test files containing keys.
Own Id: OTP-19743
Related Id(s): PR-10177
*** POTENTIAL INCOMPATIBILITY ***
ssl-11.5
Note! The ssl-11.5 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Setting the internal process links between TLS distribution processes has been reviewed. In the TLS distribution test framework there were issues fixed, but probably not in the TLS distribution module.
Own Id: OTP-19805
Related Id(s): PR-10232
Correct documentation for fail_if_no_peer_cert option.
Own Id: OTP-19828
Related Id(s): PR-10333
Improvements and New Features
Add support for MLKEM hybrid algorithms x25519mlkem768, secp384r1mlkem1024, secp256r1mlkem768 in TLS-1.3
Own Id: OTP-19767
Related Id(s): PR-10262
*** HIGHLIGHT ***
Property based test needed to compare raw handshakes, that is some utility decoding needs to be converted back.
Own Id: OTP-19829
Related Id(s): PR-10335
Add support in public_key and ssl for post quantum algorithm SLH-DSA.
Own Id: OTP-19867
Related Id(s): PR-10398
*** HIGHLIGHT ***
stdlib-7.2
Note! The stdlib-7.2 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
When creating a tar archive using
erl_tar, leading slashes would be kept for filenames with up to 100 characters. The slash would be dropped for longer filenames. This has been corrected to always keep the leading slash.Own Id: OTP-19066
Related Id(s): PR-8309
For some function heads or
caseexpressions with a huge number of clauses, the compiler could spend an inordinate amount of time compiling the code.Own Id: OTP-19797
Related Id(s): PR-10252
Passing a type for a fun as a macro argument would result in a "badly formed argument" error message from the compiler. Example:
Compiling this module would result in the following error message:
Own Id: OTP-19821
Related Id(s): GH-10280, PR-10309
Fixed an issue that prohibited the use of user defined functions within a restricted shell.
Own Id: OTP-19833
Related Id(s): PR-10315
The deprecated function
crypto:rand_uniform/2has gotten a new replacement functioncrypto:strong_rand_range/1. When implementing this the documentation ofcryptoandrandhas been rewritten a bit and improved.Own Id: OTP-19841
Related Id(s): PR-10344
Fixed a bug in the shell where a reference to a locally defined function would cause a crash.
Own Id: OTP-19850
Related Id(s): GH-10294
Improvements and New Features
You are now able to read the reference manual with man.
Own Id: OTP-19787
Related Id(s): PR-10237
Improved spec for
ets:lookup_element/4.Own Id: OTP-19798
Related Id(s): PR-10236
The
mnesia_registrymodule will be removed in Erlang/OTP 29.Own Id: OTP-19808
Related Id(s): PR-10275
wx-2.5.3
The wx-2.5.3 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fix getting
wxImagepixel values. For example,wxImage:getRed(Image)returned the wrong value.Creating OpenGL windows should now work again.
Own Id: OTP-19823
Related Id(s): PR-10314
Fixed reading out of array bounds and potential memory leaks.
Own Id: OTP-19843
Related Id(s): PR-10353
Improvements and New Features
Updated the vendor dependencies SHA to improve the accuracy of the source SBOM with
purlpointing to the exact vendor commit that Erlang/OTP builds upon.Own Id: OTP-19777
Related Id(s): PR-10216
Thanks to
Alexandre Rodrigues, Andrew Bennett, Anton Thomasson, Dmytro Lytovchenko, jakob svenningsson, João Henrique Ferreira de Freitas, Marcelino Alberdi Pereira, Maria Scott, Marko Mindek, Michael Neumann, Stavros Aronis, Sundeep Katepalli, Svilen Ivanov, Tom, Vladislav Grishenko, wallacegibbon
v28.2: OTP 28.2Compare Source
Check out the git tag OTP-28.2, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
compiler-9.0.3
The compiler-9.0.3 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed broken type inference for lists:mapfoldl/r.
Own Id: OTP-19845
Related Id(s): GH-10354, PR-10358
erts-16.1.2
The erts-16.1.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a JIT bug that could miscompile equality tests on empty bitstrings.
Own Id: OTP-19846
Related Id(s): PR-10359
The documentation building code produced warnings during the build, if none of the applications were skipped. The warnings were resolved.
Own Id: OTP-19865
Related Id(s): ERIERL-1251, PR-10396
kernel-10.4.2
The kernel-10.4.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a race condition when registering the standard error process.
Own Id: OTP-19832
Related Id(s): PR-10290
public_key-1.19
Note! The public_key-1.19 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Improvements and New Features
Added support for the Public-Key Infrastructure Certificate Management Protocol (PKICMP) ASN.1 specification.
Own Id: OTP-19861
Related Id(s): PR-10386
ssh-5.3.4
The ssh-5.3.4 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
With this change user space buffers are used to limit ssh hello message size instead of kernel buffers
Own Id: OTP-19839
Related Id(s): ERIERL-1273, PR-10350
ssl-11.4.2
Note! The ssl-11.4.2 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Graceful error handling added in negative test scenario.
Own Id: OTP-19813
Related Id(s): PR-10284
Handle duplicate change_cipher_spec message with an unexpected message alert instead of failing later in corrupted state.
Own Id: OTP-19818
Related Id(s): PR-10296
Make sure TLS-1.3 protocol spec is followed, that is psk-hello extension is guaranteed to be included as the last extension in the list of client hello extensions and internal hello message truncation in handshake history is handled correctly, the previous handling could cause interoperability issues.
Own Id: OTP-19825
Related Id(s): PR-10296
If two certificate massages are sent to the server generate an unexpected message alert for the second one.
Own Id: OTP-19830
Related Id(s): PR-10339
syntax_tools-4.0.2
The syntax_tools-4.0.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Annotate map comprehensions and generators
Own Id: OTP-19817
Related Id(s): GH-10119
Thanks to
Dmytro Lytovchenko, Nelson Vides
v28.1.1: OTP 28.1.1Compare Source
Check out the git tag OTP-28.1.1, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
OTP-28.1.1
Improvements and New Features
When building OTP, some applications may be skipped due to lacking dependencies, or due to user choice. Such skipped applications are excluded from the docs build step and a placeholder page is displayed in their stead.
Own Id: OTP-19771
Related Id(s): ERIERL-1251, PR-10194
diameter-2.5.2
The diameter-2.5.2 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Added documentation about 'proxy' and 'resend' options in diameter:handle_request/3
Own Id: OTP-19768
Related Id(s): GH-10150, PR-10182
erts-16.1.1
The erts-16.1.1 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed the
erldocumentation of the default timewarp mode used.Own Id: OTP-19790
Related Id(s): PR-9970
The
erlang:suspend_process()BIFs failed to suspend processes currently executing on dirty schedulers.Own Id: OTP-19799
Related Id(s): PR-10241
kernel-10.4.1
The kernel-10.4.1 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
With this change group.erl will not crash when receiving unknown message.
Own Id: OTP-19796
Related Id(s): ERIERL-1264, PR-10248
ssl-11.4.1
Note! The ssl-11.4.1 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed so that sending of application data will adhere to max_fragment_length. This was broken in OTP-27 release by an optimization.
Own Id: OTP-19774
Related Id(s): GH-10191, PR-10201
PR-10046 put to hard requirements on key file content. Make sure same file can be used as keyfile and certfile
Own Id: OTP-19780
Related Id(s): GH-10212, GH-10217, PR-10221
Assert that hello extensions are unique and send an illegal parameter alert if they are not.
Own Id: OTP-19791
Related Id(s): PR-10245
Avoid sending an internal message to the user process in conjunction with handling a key update.
Own Id: OTP-19806
Related Id(s): PR-10274
xmerl-2.1.7
The xmerl-2.1.7 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
The XSD validation failed due to not handling the optional text blocks correctly in an XSD complex type with attribute
mixed=true.Own Id: OTP-19792
Related Id(s): PR-10249, ERERL-1261
Thanks to
Daniel Gorin, Dmytro Lytovchenko, Jean-Philippe Jodoin
v28.1: OTP 28.1Compare Source