Patch Package: OTP 28.5.0.3
Git Tag: OTP-28.5.0.3
Date: 2026-07-02
Trouble Report Id: OTP-20173, OTP-20183, OTP-20185, OTP-20186,
OTP-20190, OTP-20191, OTP-20194, OTP-20196,
OTP-20197, OTP-20199, OTP-20200, OTP-20206,
OTP-20207, OTP-20208, OTP-20211, OTP-20215,
OTP-20216, OTP-20217, OTP-20220, OTP-20226,
OTP-20230, OTP-20231, OTP-20232
Seq num: CVE-2026-53422, CVE-2026-54886,
CVE-2026-54887, CVE-2026-54891,
CVE-2026-55950, CVE-2026-55952, ERIERL-1333,
GH-SA-7wp4-pc27-2vj9, GH-SA-h9pw-h5w4-h976,
PR-11209, PR-11215, PR-11230, PR-11239,
PR-11247, PR-11250, PR-11259, PR-11268,
PR-11269, PR-11270, PR-11271, PR-11274,
PR-11282, PR-11283, PR-11294, PR-11295,
PR-11299, PR-11302, PR-11306, PR-11307,
PR-11309, PR-11311
System: OTP
Release: 28
Application: common_test-1.30.0.1, crypto-5.8.3.1,
erts-16.4.0.3, kernel-10.6.3.3,
public_key-1.20.3.3, ssh-5.5.2.2,
ssl-11.6.0.3
Predecessor: OTP 28.5.0.2
Check out the git tag OTP-28.5.0.3, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the ‘otp_patch_apply’ tool. For information on install
requirements, see descriptions for each application version below.
common_test-1.30.0.1
The common_test-1.30.0.1 application can be applied independently of other
applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
-
Fixed a crash in ct_netconfc that occurred when the remote server closed the
SSH connection during NETCONF subsystem negotiation.
Own Id: OTP-20191
Related Id(s): ERIERL-1333, PR-11230
Full runtime dependencies of common_test-1.30.0.1
compiler-6.0, crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0,
kernel-8.4, observer-2.1, runtime_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0,
stdlib-4.0, syntax_tools-1.7, tools-3.2, xmerl-1.3.8
crypto-5.8.3.1
The crypto-5.8.3.1 application can be applied independently of other
applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
-
crypto:compute_key/4 for eddh and crypto:generate_key/2,3 for
eddh/eddsa now raise an error:{notsup, Info, Description} exception
instead of returning the atom notsup when the underlying cryptolib lacks
support.
Own Id: OTP-20215
Related Id(s): PR-11302
Full runtime dependencies of crypto-5.8.3.1
erts-9.0, kernel-6.0, stdlib-3.9
erts-16.4.0.3
The erts-16.4.0.3 application can be applied independently of other applications
on a full OTP 28 installation.
Fixed Bugs and Malfunctions
-
Fixed an undefined behavior in the internal erts_qsort() function, which
could have been the cause of a beam crash seen when updating large maps.
Own Id: OTP-20185
Related Id(s): PR-11215
-
Calculating bxor of the largest supported positive integer
(erlang:system_info(max_integer)) and -1 would return [] instead of a
raising a system_limit exception.
Own Id: OTP-20208
Related Id(s): PR-11269
-
Fix possible race between ets:delete/1 and terminating process with a
fixation on the same table.
Own Id: OTP-20217
Related Id(s): PR-11283
-
A few code generation issues for the JIT on AArch64 (ARM64) have been fixed.
For all platforms, the loader will reject some invalid BEAM files earlier.
Own Id: OTP-20226
Related Id(s): PR-11299
Improvements and New Features
-
Arithmetic operations on large integers will now increase the reduction count
for the process, causing context switches to occur more frequently when doing
arithmetic on large integers.
Own Id: OTP-20211
Related Id(s): PR-11274
Full runtime dependencies of erts-16.4.0.3
kernel-9.0, sasl-3.3, stdlib-4.1
kernel-10.6.3.3
The kernel-10.6.3.3 application can be applied independently of other
applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
-
inet:info/1 could crash when calling for a closing (port) socket.
Own Id: OTP-20173
-
Handling of the truncation bit in inet_res has been fixed so it properly
falls back to querying over TCP after a truncated UDP reply.
This fixes a bug introduced in OTP-28.4.2 - kernel-10.6.2 making a truncated
UDP answer fail to parse and never execute the fallback, instead the name
resolve operation fails.
Own Id: OTP-20199
Related Id(s): PR-11247
Full runtime dependencies of kernel-10.6.3.3
crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-7.0
public_key-1.20.3.3
Note! The public_key-1.20.3.3 application cannot be applied independently of
other applications on an arbitrary OTP 28 installation.
On a full OTP 28 installation, also the following runtime
dependency has to be satisfied:
-- crypto-5.8 (first satisfied in OTP 28.3)
Fixed Bugs and Malfunctions
Full runtime dependencies of public_key-1.20.3.3
asn1-5.0, crypto-5.8, erts-13.0, kernel-8.0, stdlib-4.0
ssh-5.5.2.2
Note! The ssh-5.5.2.2 application cannot be applied independently of other
applications on an arbitrary OTP 28 installation.
On a full OTP 28 installation, also the following runtime
dependency has to be satisfied:
-- crypto-5.7 (first satisfied in OTP 28.1)
Fixed Bugs and Malfunctions
-
Fixed a path-existence oracle in the SFTP server where SSH_FXP_REALPATH
requests with .. components could bypass the configured root directory
isolation, allowing an authenticated client to determine whether arbitrary
paths exist on the host filesystem.
Own Id: OTP-20183
Related Id(s): GH-SA-h9pw-h5w4-h976, PR-11294, CVE-2026-53422
-
Fixed an infinite loop in the SFTP server triggered when receiving
SSH_MSG_CHANNEL_EXTENDED_DATA on an SFTP channel, which caused the channel
process to spin indefinitely on CPU without consuming its message queue.
Own Id: OTP-20186
Related Id(s): GH-SA-7wp4-pc27-2vj9, PR-11295, CVE-2026-54886
-
Fixed mlkem768x25519 hybrid key exchange failing intermittently with
“incorrect signature” when the X25519 shared secret had a leading zero byte.
The shared secret is now encoded as a fixed-width 32-byte string per the
specification.
Own Id: OTP-20196
Related Id(s): PR-11209
-
The SFTP server now caps the read length in SSH_FXP_READ requests to 255 KiB
(matching OpenSSH’s SFTP_MAX_READ_LENGTH), preventing excessive memory
allocation when clients request large reads.
Own Id: OTP-20200
Related Id(s): PR-11259
-
Removed a server-side workaround (OTP-14827, introduced in OTP 20) that
accepted SHA-1 user-auth signatures from clients identifying as OpenSSH 7.x
when rsa-sha2-* was negotiated. The workaround addressed a distro-specific
build issue in 2017 that no longer exists. Clients affected by this removal
(extremely unlikely — requires a 10-year-old unpatched OpenSSH build) will see
authentication failures and must upgrade.
Own Id: OTP-20206
Related Id(s): PR-11268
Full runtime dependencies of ssh-5.5.2.2
crypto-5.7, erts-14.0, kernel-10.3, public_key-1.6.1, runtime_tools-1.15.1,
stdlib-5.0, stdlib-6.0
ssl-11.6.0.3
Note! The ssl-11.6.0.3 application cannot be applied independently of other
applications on an arbitrary OTP 28 installation.
On a full OTP 28 installation, also the following runtime
dependencies have to be satisfied:
-- crypto-5.8 (first satisfied in OTP 28.3)
-- public_key-1.20.3.1 (first satisfied in OTP 28.5.0.1)
Fixed Bugs and Malfunctions
-
Correct small behavior bugs that occasionally could cause DTLS connection
errors, unwanted behavior for legacy DHE_DSS, hiding of a distribution config
error, and possible unorderly process tree shutdown.
Own Id: OTP-20190
Related Id(s): PR-11250
-
Initialize DTLS cookie to random value to avoid DoS attack with forged cookie
during startup window.
Own Id: OTP-20194
Related Id(s): PR-11271, CVE-2026-54887
-
Guard TLS client for MITM injection of application data during
“plain-text-window” during handshake.
Own Id: OTP-20207
Related Id(s): PR-11270, CVE-2026-54891
-
Improve error handling of TLS PSK sending ILLIGAL_PARMETER alert if binders
and PSK-identities are not matched. Also mend recovery mechanism of ticket and
session stores to be as resilient as possible to intermediate bugs.
Own Id: OTP-20216
Related Id(s): PR-11282, CVE-2026-55952
-
Fix race condition that could be used to DoS attack DTLS servers.
Own Id: OTP-20220
Related Id(s): PR-11306, CVE-2026-55950
-
A TLS-1.3 stateless session ticket with obfuscated_ticket_age set to zero was
incorrectly accepted without checking the server-side ticket lifetime or the
RFC 8446 Section 8.3 freshness window. The server now always validates ticket
age using its own timestamp regardless of the client-reported age value.
Own Id: OTP-20230
Related Id(s): PR-11307
-
TLS-1.3 client rejects a second HelloRetryRequest as requiered in RFC 8446
Section 4.1.4
Own Id: OTP-20231
Related Id(s): PR-11309
-
A busy client node could self-trigger a ticket store crash if unlucky with
scheduling if auto mode is used.
Own Id: OTP-20232
Related Id(s): PR-11311
Full runtime dependencies of ssl-11.6.0.3
crypto-5.8, erts-16.0, inets-5.10.7, kernel-10.3, public_key-1.20.3.1,
runtime_tools-1.15.1, stdlib-7.0
Thanks to
Cole Christensen, Nick Krichevsky
