Skip to content

Commit 4ba8ca0

Browse files
author
Erlang/OTP
committed
Prepare release
1 parent 9b89194 commit 4ba8ca0

12 files changed

Lines changed: 89 additions & 52 deletions

File tree

‎lib/crypto/doc/notes.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,16 @@ limitations under the License.
2323

2424
This document describes the changes made to the Crypto application.
2525

26+
## Crypto 5.8.3
27+
28+
### Fixed Bugs and Malfunctions
29+
30+
- Fix memory leak in `crypo:engine_load` if called with incorrect commands.
31+
32+
Own Id: OTP-20014 Aux Id: [PR-10798]
33+
34+
[PR-10798]: https://github.com/erlang/otp/pull/10798
35+
2636
## Crypto 5.8.2
2737

2838
### Fixed Bugs and Malfunctions

‎lib/crypto/vsn.mk‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
CRYPTO_VSN = 5.8.2
1+
CRYPTO_VSN = 5.8.3
22

33
# %CopyrightBegin%
44
#

‎lib/inets/doc/notes.md‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,17 @@ limitations under the License.
2121
-->
2222
# Inets Release Notes
2323

24+
## Inets 9.6.1
25+
26+
### Fixed Bugs and Malfunctions
27+
28+
- The httpd server now rejects HTTP requests containing multiple Content-Length headers with different values, returning a 400 Bad Request response. This prevents potential HTTP request smuggling attacks. Thanks Luigino Camastra at Aisle Research for responsibly disclosing this vulnerability
29+
30+
Own Id: OTP-20007 Aux Id: [PR-10833], [CVE-2026-23941]
31+
32+
[PR-10833]: https://github.com/erlang/otp/pull/10833
33+
[CVE-2026-23941]: https://nvd.nist.gov/vuln/detail/2026-23941
34+
2435
## Inets 9.6
2536

2637
### Improvements and New Features

‎lib/inets/vsn.mk‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,6 @@
2121
# %CopyrightEnd%
2222

2323
APPLICATION = inets
24-
INETS_VSN = 9.6
24+
INETS_VSN = 9.6.1
2525
PRE_VSN =
2626
APP_VSN = "$(APPLICATION)-$(INETS_VSN)$(PRE_VSN)"

‎lib/kernel/doc/notes.md‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,20 @@ limitations under the License.
2323

2424
This document describes the changes made to the Kernel application.
2525

26+
## Kernel 10.6.1
27+
28+
### Fixed Bugs and Malfunctions
29+
30+
- A vulnerability has been resolved in the (undocumented, unsupported and unused in OTP) inet_dns_tsig module that leads to a validation bypass.
31+
32+
If a request contained an error code (forbidden by spec), it was treated as a response and skipped the verification of the MAC. The user of the module would then receive an "all ok" response, depending on the use case, this could lead to such things as AXFR or UPDATE being allowed.
33+
34+
The code has also been tightening up of the client side to make sure too large (bad) MAC sizes cannot be selected and the limit is the output size of the algorithm chosen.
35+
36+
Own Id: OTP-20012 Aux Id: [PR-10825]
37+
38+
[PR-10825]: https://github.com/erlang/otp/pull/10825
39+
2640
## Kernel 10.6
2741

2842
### Fixed Bugs and Malfunctions

‎lib/kernel/src/kernel.appup.src‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,8 @@
5656
{<<"^10\\.4\\.2(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
5757
{<<"^10\\.5$">>,[restart_new_emulator]},
5858
{<<"^10\\.5\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
59+
{<<"^10\\.6$">>,[restart_new_emulator]},
60+
{<<"^10\\.6\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
5961
{<<"^9\\.0$">>,[restart_new_emulator]},
6062
{<<"^9\\.0\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
6163
{<<"^9\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
@@ -94,6 +96,8 @@
9496
{<<"^10\\.4\\.2(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
9597
{<<"^10\\.5$">>,[restart_new_emulator]},
9698
{<<"^10\\.5\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
99+
{<<"^10\\.6$">>,[restart_new_emulator]},
100+
{<<"^10\\.6\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
97101
{<<"^9\\.0$">>,[restart_new_emulator]},
98102
{<<"^9\\.0\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
99103
{<<"^9\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]},

‎lib/kernel/vsn.mk‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
KERNEL_VSN = 10.6
1+
KERNEL_VSN = 10.6.1
22

33
# %CopyrightBegin%
44
#

‎lib/ssh/doc/notes.md‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,25 @@ limitations under the License.
2121
-->
2222
# SSH Release Notes
2323

24+
## Ssh 5.5.1
25+
26+
### Fixed Bugs and Malfunctions
27+
28+
- Fixed path traversal vulnerability in SFTP server's root option allowing authenticated users to access sibling directories with matching name prefixes. The root option used string prefix matching instead of path component validation. With \{root, "/home/user1"\}, attackers could access /home/user10/ or /home/user123/. Thanks to Luigino Camastra, Aisle Research.
29+
30+
Own Id: OTP-20009 Aux Id: [PR-10811], [CVE-2026-23942]
31+
32+
- Fixed excessive memory usage vulnerability in SSH compression allowing attackers to consume system resources through decompression bombs. The 'zlib' and 'zlib@openssh.com' algorithms lacked decompression size limits, allowing 256 KB packets to expand to 255 MB (1029:1 ratio). This could lead to crashes on systems with limited memory.
33+
34+
The fix removes zlib from default compression algorithms and implements decompression size limits for both algorithms. Thanks to Igor Morgenstern at Aisle Research
35+
36+
Own Id: OTP-20011 Aux Id: [PR-10813], [CVE-2026-23943]
37+
38+
[PR-10811]: https://github.com/erlang/otp/pull/10811
39+
[CVE-2026-23942]: https://nvd.nist.gov/vuln/detail/2026-23942
40+
[PR-10813]: https://github.com/erlang/otp/pull/10813
41+
[CVE-2026-23943]: https://nvd.nist.gov/vuln/detail/2026-23943
42+
2443
## Ssh 5.5
2544

2645
### Fixed Bugs and Malfunctions

‎lib/ssh/vsn.mk‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
#-*-makefile-*- ; force emacs to enter makefile-mode
22

3-
SSH_VSN = 5.5
3+
SSH_VSN = 5.5.1
44
APP_VSN = "ssh-$(SSH_VSN)"
55

66
# %CopyrightBegin%

‎lib/ssl/doc/notes.md‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,25 @@ limitations under the License.
2323

2424
This document describes the changes made to the SSL application.
2525

26+
## SSL 11.5.3
27+
28+
### Fixed Bugs and Malfunctions
29+
30+
- TLS-1.3 certificate request now preserves the order of signature algorithms in certificate request extension to be in the servers preferred order, which might affect the choice made by some TLS clients.
31+
32+
Own Id: OTP-20022 Aux Id: [GH-10694], [PR-10707], ERIERL-1305
33+
34+
[GH-10694]: https://github.com/erlang/otp/issues/10694
35+
[PR-10707]: https://github.com/erlang/otp/pull/10707
36+
37+
### Improvements and New Features
38+
39+
- Document that setting transport protocol specific socket options is not generally expected to work for TLS and if it happens to work it comes with consequences that should be understood an accepted by the user. Also retain some backwards compatibility with such an option that happened to work to buy time for people to come up with better solutions.
40+
41+
Own Id: OTP-20018 Aux Id: [PR-10809], ERIERL-1303
42+
43+
[PR-10809]: https://github.com/erlang/otp/pull/10809
44+
2645
## SSL 11.5.2
2746

2847
### Fixed Bugs and Malfunctions

0 commit comments

Comments
 (0)