Prepare release

Author: Erlang/OTP

erts/doc/notes.md

@@ -21,6 +21,24 @@ limitations under the License.
 
 This document describes the changes made to the ERTS application.
 
+## Erts 15.2.7.9
+
+### Fixed Bugs and Malfunctions
+
+- Fixed bug in `ets:member/2` for `set`, `bag` and `duplicate_bag`. The bug could (maybe) lead to `ets:member` spuriously returning false for a value which is actually a member for a table that faces high insert load.
+
+  Own Id: OTP-20152 Aux Id: [PR-11115]
+
+- A buffer overflow error when parsing SCTP ERROR or ABORT chunks has been fixed.  
+  
+  This could lead to stack corruption and VM crash, but ultimately with hard work by an attacker be refined into maybe even remote code execution.
+
+  Own Id: OTP-20165 Aux Id: [PR-1234], GHSA-6f4f-chj5-5g97, [CVE-2026-49759]
+
+[PR-11115]: https://github.com/erlang/otp/pull/11115
+[PR-1234]: https://github.com/erlang/otp/pull/1234
+[CVE-2026-49759]: https://nvd.nist.gov/vuln/detail/2026-49759
+
 ## Erts 15.2.7.8
 
 ### Fixed Bugs and Malfunctions

erts/vsn.mk

@@ -18,7 +18,7 @@
 # %CopyrightEnd%
 # 
 
-VSN = 15.2.7.8
+VSN = 15.2.7.9
 
 # Port number 4365 in 4.2
 # Port number 4366 in 4.3

lib/dialyzer/doc/notes.md

@@ -21,6 +21,17 @@ limitations under the License.
 
 This document describes the changes made to the Dialyzer application.
 
+## Dialyzer 5.3.1.1
+
+### Fixed Bugs and Malfunctions
+
+- Fix Dialyzer crash with overriding built-in types
+
+  Own Id: OTP-19631 Aux Id: [GH-11093], [PR-11096]
+
+[GH-11093]: https://github.com/erlang/otp/issues/11093
+[PR-11096]: https://github.com/erlang/otp/pull/11096
+
 ## Dialyzer 5.3.1
 
 ### Fixed Bugs and Malfunctions

lib/dialyzer/vsn.mk

@@ -1 +1 @@
-DIALYZER_VSN = 5.3.1
+DIALYZER_VSN = 5.3.1.1

lib/diameter/doc/notes.md

@@ -21,6 +21,17 @@ limitations under the License.
 
 Releases are listed in reverse chronological order, most recent first.
 
+## diameter 2.4.1.2
+
+### Fixed Bugs and Malfunctions
+
+- Fixed return value documentation of `diameter:service_info(SvcName, statistics)`
+
+  Own Id: OTP-20150 Aux Id: [GH-11105], [PR-11146]
+
+[GH-11105]: https://github.com/erlang/otp/issues/11105
+[PR-11146]: https://github.com/erlang/otp/pull/11146
+
 ## diameter 2.4.1.1
 
 ### Fixed Bugs and Malfunctions

lib/diameter/vsn.mk

@@ -17,5 +17,5 @@
 # %CopyrightEnd%
 
 APPLICATION  = diameter
-DIAMETER_VSN = 2.4.1.1
+DIAMETER_VSN = 2.4.1.2
 APP_VSN      = $(APPLICATION)-$(DIAMETER_VSN)$(PRE_VSN)

lib/erl_interface/doc/notes.md

@@ -21,6 +21,17 @@ limitations under the License.
 
 This document describes the changes made to the Erl_interface application.
 
+## Erl_Interface 5.5.2.1
+
+### Fixed Bugs and Malfunctions
+
+- Fixed stack overflow in `ei_s_print_term` for very big integer terms (> 2000 hexadecimal digits long).
+
+  Own Id: OTP-20160 Aux Id: [PR-11193], GHSA-xcxj-5pg2-v72j,[CVE-2026-49760]
+
+[PR-11193]: https://github.com/erlang/otp/pull/11193
+[CVE-2026-49760]: https://nvd.nist.gov/vuln/detail/2026-49760
+
 ## Erl_Interface 5.5.2
 
 ### Improvements and New Features

lib/erl_interface/vsn.mk

@@ -1,2 +1,2 @@
-EI_VSN = 5.5.2
+EI_VSN = 5.5.2.1
 ERL_INTERFACE_VSN = $(EI_VSN)

lib/ftp/doc/notes.md

@@ -19,6 +19,17 @@ limitations under the License.
 -->
 # FTP Release Notes
 
+## Ftp 1.2.3.1
+
+### Fixed Bugs and Malfunctions
+
+- FTP client default connections that use the so called passive mode of FTP fails to properly validating the response IP of the server, hence a malicious or compromised FTP server could redirect the data connection to an arbitrary host, enabling s server-side request forgery (SSRF) and FTP bounce attacks.
+
+  Own Id: OTP-20166 Aux Id: [PR-11186], GHSA-24cv-hwgr-37fq, [CVE-2026-48858]
+
+[PR-11186]: https://github.com/erlang/otp/pull/11186
+[CVE-2026-48858]: https://nvd.nist.gov/vuln/detail/2026-48858
+
 ## Ftp 1.2.3
 
 ### Fixed Bugs and Malfunctions

lib/ftp/vsn.mk

@@ -19,6 +19,6 @@
 # %CopyrightEnd%
 
 APPLICATION = ftp
-FTP_VSN   = 1.2.3
+FTP_VSN   = 1.2.3.1
 PRE_VSN     =
 APP_VSN     = "$(APPLICATION)-$(FTP_VSN)$(PRE_VSN)"