| Patch Package | OTP 27.3.4.12 |
| Git Tag | OTP-27.3.4.12 |
| Date | 2026-05-27 |
| Issue Id | |
| System | OTP |
| Release | 27 |
| Application | |
| Potential Incompatibilities |
Potential Incompatibilities #
- OTP-20130
-
- Application(s):
- public_key, ssl
- Related Id(s):
‘public_key’, Adhere to RFC 9525, and remove support for legacy fallback to check hostname against subject common name. Also improve error handling creating two separate errors for name constraint check for subject names and subject alternative names.
‘ssl’. Error handling is slightly changed to better reflect public_key behaviour.
compiler-8.6.1.5 #
The compiler-8.6.1.5 application can be applied independently of other applications on a full OTP 27 installation.
- OTP-20140
-
In rare circumstances, optimization of boolean expressions could invert the boolean value.
Full runtime dependencies of compiler-8.6.1.5
crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0
inets-9.3.2.5 #
The inets-9.3.2.5 application can be applied independently of other applications on a full OTP 27 installation.
- OTP-20128
-
- Related Id(s):
-
ERIERL-1314, PR-11079
A call to httpd:reload_config/2 now validates the new configuration before removing the old one, leaving the server running in case of faulty config, instead of putting it in an unrecoverable state.
Full runtime dependencies of inets-9.3.2.5
erts-14.0, kernel-9.0, mnesia-4.12, public_key-1.13, runtime_tools-1.8.14, ssl-9.0, stdlib-5.0, stdlib-6.0
public_key-1.17.1.3 #
The public_key-1.17.1.3 application can be applied independently of other applications on a full OTP 27 installation.
- OTP-20112
-
- Related Id(s):
OCSP responder certificates are now checked for expiration before being accepted as authorized responders. Previously, expired or not-yet-valid responder certificates were incorrectly accepted when verifying OCSP responses.
- OTP-20129
-
- Related Id(s):
Corrected basic constraint path validation check in accordance to RFC 5280.
- OTP-20130
-
- POTENTIAL INCOMPATIBILITY
‘public_key’, Adhere to RFC 9525, and remove support for legacy fallback to check hostname against subject common name. Also improve error handling creating two separate errors for name constraint check for subject names and subject alternative names.
‘ssl’. Error handling is slightly changed to better reflect public_key behaviour.
Full runtime dependencies of public_key-1.17.1.3
asn1-5.0, crypto-5.0, erts-13.0, kernel-8.0, stdlib-4.0
ssl-11.2.12.8 #
Note! The ssl-11.2.12.8 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.
On a full OTP 27 installation, also the following runtime
dependency has to be satisfied:
-- public_key-1.17.1.3 (first satisfied in OTP 27.3.4.12)
- OTP-20130
-
- POTENTIAL INCOMPATIBILITY
‘public_key’, Adhere to RFC 9525, and remove support for legacy fallback to check hostname against subject common name. Also improve error handling creating two separate errors for name constraint check for subject names and subject alternative names.
‘ssl’. Error handling is slightly changed to better reflect public_key behaviour.
- OTP-20141
-
- Related Id(s):
Could cause server to terminate a connection without an alert towards a bad client.
Full runtime dependencies of ssl-11.2.12.8
crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.17.1.3, runtime_tools-1.15.1, stdlib-6.0
Thanks To #
Paul Guyot