Erlang/OTP 27.3.4

This release of Erlang/OTP can be built from source or installed using pre-built packages for your OS or third-party tools (such as kerl, asdf or mise).

docker run -it erlang:27.3.4
Patch Package OTP 27.3.4
Git Tag OTP-27.3.4
Date 2025-05-08
Issue Id
CVE-2025-46712
ERIERL-1220
System OTP
Release 27
Application

erts-15.2.7 #

The erts-15.2.7 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19577
Related Id(s):

ERIERL-1220, PR-9696

Fixed an emulator crash when setting an error_handler module that was not yet loaded.

OTP-19599
Related Id(s):

PR-9724

Fixed a rare bug that could cause an emulator crash after unloading a module or erasing a persistent_term.

Full runtime dependencies of erts-15.2.7

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.7 #

Note! The kernel-10.2.7 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.2.5 (first satisfied in OTP 27.3.2)
OTP-19605
Related Id(s):

GH-9720, PR-9765

With this change, disk_log will not crash when using chunk_step/3 after log size was decreased.

OTP-19608
Related Id(s):

GH-9707, PR-9767

With this change, disk_log will not run into infinite loop when using chunk/2,3 after log size was decreased.

Full runtime dependencies of kernel-10.2.7

crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0

ssh-5.2.11 #

The ssh-5.2.11 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19625
Related Id(s):

CVE-2025-46712

Fix KEX strict implementation according to draft-miller-sshm-strict-kex-01 document.

Full runtime dependencies of ssh-5.2.11

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

xmerl-2.1.3 #

The xmerl-2.1.3 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19602
Related Id(s):

PR-9753

A new option to discard whitespace before the xml tag when reading from a stream has been added to the Xmerl SAX parser.

  • {discard_ws_before_xml_document, Boolean} - Discard whitespace before xml tag instead of returning a fatal error if set to true (false is default)

Full runtime dependencies of xmerl-2.1.3

erts-6.0, kernel-8.4, stdlib-2.5

Thanks To #

Lý Nhật Tâm