Erlang/OTP 27.3.1

This release of Erlang/OTP can be built from source or installed using pre-built packages for your OS or third-party tools (such as kerl, asdf or mise).

docker run -it erlang:27.3.1
Erlang/OTP 27.3.1
View on github.com
Patch Package OTP 27.3.1
Git Tag OTP-27.3.1
Date 2025-03-28
Issue Id
CVE-2025-30211
ERIERL-1204
ERIERL-1205
ERIERL-1206
System OTP
Release 27
Application

OTP-27.3.1 #

OTP-19525
Related Id(s):

PR-9553

Update used ExDoc version to v0.37.3

asn1-5.3.3 #

The asn1-5.3.3 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19542
Related Id(s):

ERIERL-1204, PR-9588

The JER backend will now include the SIZE constraint in the type info for OCTET STRINGs, and a SIZE constraint with a range will now be included for BIT STRINGs. This does not change the actual encoding or decoding of JER, but can be useful for tools.

OTP-19547
Related Id(s):

ERIERL-1206, PR-9611

When using the JSON encoding rules, it is now possible to call the decode/2 function in the following way with data that has already been decoded by json:decode/1:

SomeModule:decode(Type, {json_decoded, Decoded}).

Full runtime dependencies of asn1-5.3.3

erts-14.0, kernel-9.0, stdlib-5.0

erts-15.2.4 #

The erts-15.2.4 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19469
Related Id(s):

#9172

Behavior for socket:recv/3 has been improved. The behavior has also been clarified in the documentation.

OTP-19527
Related Id(s):

PR-9577

Trace messages due to receive tracing could potentially be delayed a very long time if the traced process waited in a receive expression without clauses matching on messages (timed wait), or just did not enter a receive expression for a very long time.

OTP-19548
Related Id(s):

OTP-19472

Improve the naming of the (internal) esock mutex(es). It is now possible to configure (as in autoconf) the use of simple names for the esock mutex(es).

Full runtime dependencies of erts-15.2.4

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.4 #

Note! The kernel-10.2.4 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)
OTP-19469
Related Id(s):

#9172

Behavior for socket:recv/3 has been improved. The behavior has also been clarified in the documentation.

OTP-19545
Related Id(s):

PR-9587, OTP-19544

An infinite loop in CNAME loop detection that can cause Out Of Memory has been fixed. This affected CNAME lookup with the internal DNS resolver.

Full runtime dependencies of kernel-10.2.4

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

mnesia-4.23.5 #

The mnesia-4.23.5 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19437
Related Id(s):

PR-9534

With this change mnesia will merge schema of tables using external backends.

Full runtime dependencies of mnesia-4.23.5

erts-9.0, kernel-5.3, stdlib-5.0

ssh-5.2.9 #

The ssh-5.2.9 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19543
Related Id(s):

CVE-2025-30211

Reception of malicious KEX init message does not result with ssh daemon excessive memory usage.

OTP-19559
Related Id(s):

GH-9554, PR-9545

Call to ssh:daemon_replace_options does not crash when argument is not a valid daemon ref.

Full runtime dependencies of ssh-5.2.9

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

ssl-11.2.10 #

Note! The ssl-11.2.10 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)
OTP-19529
Related Id(s):

GH-9483, PR-9486

Correct handling of unassigned signature algorithms to properly ignore them instead of failing the handshake.

OTP-19549
Related Id(s):

GH-8891, PR-9612

Update key mechanism in CRL cache so that CRL DP with same URI path component becomes distinguishable from each other.

OTP-19391
Related Id(s):

PR-9221

Add callback for NSS keylogging so that it can work as expected for all scenarios.

Full runtime dependencies of ssl-11.2.10

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4, runtime_tools-1.15.1, stdlib-6.0

stdlib-6.2.2 #

The stdlib-6.2.2 application can be applied independently of other applications on a full OTP 27 installation.

OTP-19546
Related Id(s):

ERIERL-1205, PR-9596

Fixed crash when fetching initial_call when user code have modified the process_dictionary.

Full runtime dependencies of stdlib-6.2.2

compiler-5.0, crypto-4.5, erts-15.0, kernel-10.0, sasl-3.0

Thanks To #

Alexandre Rodrigues, Marc Worrell, Sergei Shuvatov, zmstone