```
Patch Package:           OTP 29.0.5
Git Tag:                 OTP-29.0.5
Date:                    2026-08-04
Trouble Report Id:       OTP-20137, OTP-20275
Seq num:                 GH-11402, PR-11110, PR-11409
System:                  OTP
Release:                 29
Application:             erts-17.0.5, ssh-6.0.4
Predecessor:             OTP 29.0.4
```

Check out the git tag OTP-29.0.5, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

# erts-17.0.5

The erts-17.0.5 application can be applied independently of other applications
on a full OTP 29 installation.

## Fixed Bugs and Malfunctions

- Fixed a regression in the previous patch release that prevented epmd from
  binding to localhost.

  Own Id: OTP-20275  
  Related Id(s): [GH-11402], [PR-11409]

> #### Full runtime dependencies of erts-17.0.5
>
> kernel-9.0, sasl-3.3, stdlib-4.1

# ssh-6.0.4

The ssh-6.0.4 application can be applied independently of other applications on
a full OTP 29 installation.

## Fixed Bugs and Malfunctions

- The SSH client and server now reject incoming packets not aligned to the
  cipher block size as required by RFC 4253 §6. For CBC ciphers, a timing-safe
  "packet discard" mechanism (CVE-2008-5161 mitigation) ensures structural
  errors are indistinguishable from MAC failures before disconnecting. AEAD and
  encrypt-then-MAC modes disconnect immediately.

  Own Id: OTP-20137  
  Related Id(s): [PR-11110]

> #### Full runtime dependencies of ssh-6.0.4
>
> crypto-5.7, erts-14.0, kernel-10.3, public_key-1.6.1, runtime_tools-1.15.1,
> stdlib-8.0

[GH-11402]: https://github.com/erlang/otp/issues/11402
[PR-11110]: https://github.com/erlang/otp/pull/11110
[PR-11409]: https://github.com/erlang/otp/pull/11409