Patch Package OTP 27.2.4 Released

Erlang/OTP otp@REDACTED
Thu Feb 20 15:59:38 CET 2025


Patch Package:           OTP 27.2.4
Git Tag:                 OTP-27.2.4
Date:                    2025-02-20
Trouble Report Id:       OTP-19438, OTP-19466
Seq num:                 CVE-2025-26618, ERIERL-1173, ERIERL-1180
System:                  OTP
Release:                 27
Application:             snmp-5.18.1, ssh-5.2.7
Predecessor:             OTP 27.2.3

Check out the git tag OTP-27.2.4, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

# snmp-5.18.1

The snmp-5.18.1 application can be applied independently of other applications
on a full OTP 27 installation.

## Fixed Bugs and Malfunctions

- SNMP Agent transports type (intAgentTransports) was incorrectly not documented
  as a list of transports. Also add a couple of config file generation examples.

  Own Id: OTP-19438
  Related Id(s): ERIERL-1180

> #### Full runtime dependencies of snmp-5.18.1
>
> crypto-4.6, erts-12.0, kernel-8.0, mnesia-4.12, runtime_tools-1.8.14,
> stdlib-5.0

# ssh-5.2.7

The ssh-5.2.7 application can be applied independently of other applications on
a full OTP 27 installation.

## Fixed Bugs and Malfunctions

- SFTP packets exceeding max packet size are not processed and dropped.

  Own Id: OTP-19466
  Related Id(s): ERIERL-1173, CVE-2025-26618

> #### Full runtime dependencies of ssh-5.2.7
>
> crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1,
> stdlib-5.0, stdlib-6.0


More information about the erlang-announce mailing list