Erlang/OTP 25.3.2.21

This release of Erlang/OTP can be built from source or installed using pre-built packages for your OS or third-party tools (such as kerl, asdf or mise).

docker run -it erlang:25.3.2.21
Patch Package OTP 25.3.2.21
Git Tag OTP-25.3.2.21
Date 2025-05-08
Issue Id
CVE-2025-46712
ERIERL-1220
System OTP
Release 25
Application

erts-13.2.2.16 #

Note! The erts-13.2.2.16 application *cannot* be applied independently of other applications on an arbitrary OTP 25 installation. On a full OTP 25 installation, also the following runtime dependencies have to be satisfied: -- kernel-8.5 (first satisfied in OTP 25.1) -- stdlib-4.1 (first satisfied in OTP 25.1)

OTP-19577
Application(s):
erts
Related Id(s):
ERIERL-1220 , PR-9696

Fixed an emulator crash when setting an error_handler module that was not yet loaded.

OTP-19599
Application(s):
erts
Related Id(s):
PR-9724

Fixed a rare bug that could cause an emulator crash after unloading a module or erasing a persistent_term.

Full runtime dependencies of erts-13.2.2.16: kernel-8.5, sasl-3.3, stdlib-4.1

kernel-8.5.4.6 #

Note! The kernel-8.5.4.6 application *cannot* be applied independently of other applications on an arbitrary OTP 25 installation. On a full OTP 25 installation, also the following runtime dependencies have to be satisfied: -- erts-13.1.3 (first satisfied in OTP 25.2) -- stdlib-4.1.1 (first satisfied in OTP 25.1.1)

OTP-19605
Application(s):
kernel
Related Id(s):
GH-9720 , PR-9765

With this change, disk_log will not crash when using chunk_step/3 after log size was decreased.

OTP-19608
Application(s):
kernel
Related Id(s):
GH-9707 , PR-9767

With this change, disk_log will not run into infinite loop when using chunk/2,3 after log size was decreased.

Full runtime dependencies of kernel-8.5.4.6: crypto-5.0, erts-13.1.3, sasl-3.0, stdlib-4.1.1

ssh-4.15.3.13 #

The ssh-4.15.3.13 application can be applied independently of other applications on a full OTP 25 installation.

OTP-19625
Application(s):
ssh
Related Id(s):
CVE-2025-46712

Fix KEX strict implementation according to draft-miller-sshm-strict-kex-01 document.

Full runtime dependencies of ssh-4.15.3.13: crypto-5.0, erts-11.0, kernel-6.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-3.15

Thanks To #

João Henrique Ferreira de Freitas, Lý Nhật Tâm