chore(deps): update dependency erlang to v27.3.4 #149

Merged
joao.dubas merged 1 commits from renovate/erlang-27.x into main 2025-05-13 17:33:25 +00:00
Collaborator

This PR contains the following updates:

Package Update Change
erlang patch 27.3.3 -> 27.3.4

Release Notes

erlang/otp (erlang)

v27.3.4: OTP 27.3.4

Compare Source

Patch Package:           OTP 27.3.4
Git Tag:                 OTP-27.3.4
Date:                    2025-05-08
Trouble Report Id:       OTP-19577, OTP-19599, OTP-19602, OTP-19605,
                         OTP-19608, OTP-19625
Seq num:                 CVE-2025-46712, ERIERL-1220, GH-9707,
                         GH-9720, PR-9696, PR-9724, PR-9753, PR-9765,
                         PR-9767
System:                  OTP
Release:                 27
Application:             erts-15.2.7, kernel-10.2.7, ssh-5.2.11,
                         xmerl-2.1.3
Predecessor:             OTP 27.3.3

Check out the git tag OTP-27.3.4, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.

erts-15.2.7

The erts-15.2.7 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fixed an emulator crash when setting an error_handler module that was not yet loaded.

    Own Id: OTP-19577
    Related Id(s): ERIERL-1220, PR-9696

  • Fixed a rare bug that could cause an emulator crash after unloading a module or erasing a persistent_term.

    Own Id: OTP-19599
    Related Id(s): PR-9724

Full runtime dependencies of erts-15.2.7

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.7

Note! The kernel-10.2.7 application cannot be applied independently of other applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.2.5 (first satisfied in OTP 27.3.2)

Fixed Bugs and Malfunctions

  • With this change, disk_log will not crash when using chunk_step/3 after log size was decreased.

    Own Id: OTP-19605
    Related Id(s): GH-9720, PR-9765

  • With this change, disk_log will not run into infinite loop when using chunk/2,3 after log size was decreased.

    Own Id: OTP-19608
    Related Id(s): GH-9707, PR-9767

Full runtime dependencies of kernel-10.2.7

crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0

ssh-5.2.11

The ssh-5.2.11 application can be applied independently of other applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fix KEX strict implementation according to draft-miller-sshm-strict-kex-01 document.

    Own Id: OTP-19625
    Related Id(s): CVE-2025-46712

Full runtime dependencies of ssh-5.2.11

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0

xmerl-2.1.3

The xmerl-2.1.3 application can be applied independently of other applications on a full OTP 27 installation.

Improvements and New Features

  • A new option to discard whitespace before the xml tag when reading from a stream has been added to the Xmerl SAX parser.

    • {discard_ws_before_xml_document, Boolean} - Discard whitespace before xml tag instead of returning a fatal error if set to true (false is default)

    Own Id: OTP-19602
    Related Id(s): PR-9753

Full runtime dependencies of xmerl-2.1.3

erts-6.0, kernel-8.4, stdlib-2.5

Thanks to

Lý Nhật Tâm


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [erlang](https://github.com/erlang/otp) | patch | `27.3.3` -> `27.3.4` | --- ### Release Notes <details> <summary>erlang/otp (erlang)</summary> ### [`v27.3.4`](https://github.com/erlang/otp/releases/tag/OTP-27.3.4): OTP 27.3.4 [Compare Source](https://github.com/erlang/otp/compare/OTP-27.3.3...OTP-27.3.4) Patch Package: OTP 27.3.4 Git Tag: OTP-27.3.4 Date: 2025-05-08 Trouble Report Id: OTP-19577, OTP-19599, OTP-19602, OTP-19605, OTP-19608, OTP-19625 Seq num: CVE-2025-46712, ERIERL-1220, GH-9707, GH-9720, PR-9696, PR-9724, PR-9753, PR-9765, PR-9767 System: OTP Release: 27 Application: erts-15.2.7, kernel-10.2.7, ssh-5.2.11, xmerl-2.1.3 Predecessor: OTP 27.3.3 Check out the git tag OTP-27.3.4, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below. ### erts-15.2.7 The erts-15.2.7 application can be applied independently of other applications on a full OTP 27 installation. #### Fixed Bugs and Malfunctions - Fixed an emulator crash when setting an error_handler module that was not yet loaded. Own Id: OTP-19577\ Related Id(s): ERIERL-1220, [PR-9696] - Fixed a rare bug that could cause an emulator crash after unloading a module or erasing a persistent_term. Own Id: OTP-19599\ Related Id(s): [PR-9724] > #### Full runtime dependencies of erts-15.2.7 > > kernel-9.0, sasl-3.3, stdlib-4.1 ### kernel-10.2.7 Note! The kernel-10.2.7 application *cannot* be applied independently of other applications on an arbitrary OTP 27 installation. On a full OTP 27 installation, also the following runtime dependency has to be satisfied: -- erts-15.2.5 (first satisfied in OTP 27.3.2) #### Fixed Bugs and Malfunctions - With this change, disk_log will not crash when using chunk_step/3 after log size was decreased. Own Id: OTP-19605\ Related Id(s): [GH-9720], [PR-9765] - With this change, disk_log will not run into infinite loop when using chunk/2,3 after log size was decreased. Own Id: OTP-19608\ Related Id(s): [GH-9707], [PR-9767] > #### Full runtime dependencies of kernel-10.2.7 > > crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0 ### ssh-5.2.11 The ssh-5.2.11 application can be applied independently of other applications on a full OTP 27 installation. #### Fixed Bugs and Malfunctions - Fix KEX strict implementation according to draft-miller-sshm-strict-kex-01 document. Own Id: OTP-19625\ Related Id(s): [CVE-2025-46712] > #### Full runtime dependencies of ssh-5.2.11 > > crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1, stdlib-5.0, stdlib-6.0 ### xmerl-2.1.3 The xmerl-2.1.3 application can be applied independently of other applications on a full OTP 27 installation. #### Improvements and New Features - A new option to discard whitespace before the `xml` tag when reading from a stream has been added to the Xmerl SAX parser. - **`{discard_ws_before_xml_document, Boolean}`** - Discard whitespace before `xml` tag instead of returning a fatal error if set to `true` (`false` is default) Own Id: OTP-19602\ Related Id(s): [PR-9753] > #### Full runtime dependencies of xmerl-2.1.3 > > erts-6.0, kernel-8.4, stdlib-2.5 ### Thanks to Lý Nhật Tâm [cve-2025-46712]: https://nvd.nist.gov/vuln/detail/CVE-2025-46712 [gh-9707]: https://github.com/erlang/otp/issues/9707 [gh-9720]: https://github.com/erlang/otp/issues/9720 [pr-9696]: https://github.com/erlang/otp/pull/9696 [pr-9724]: https://github.com/erlang/otp/pull/9724 [pr-9753]: https://github.com/erlang/otp/pull/9753 [pr-9765]: https://github.com/erlang/otp/pull/9765 [pr-9767]: https://github.com/erlang/otp/pull/9767 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODguMyIsInVwZGF0ZWRJblZlciI6IjM5LjE4OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot added 1 commit 2025-05-12 12:00:50 +00:00
chore(deps): update dependency erlang to v27.3.4
All checks were successful
continuous-integration/drone/pr Build is passing
8d807892d7
renovate-bot force-pushed renovate/erlang-27.x from 8d807892d7 to cc4e986bbe 2025-05-13 14:58:34 +00:00 Compare
joao.dubas merged commit 0385353b54 into main 2025-05-13 17:33:25 +00:00
joao.dubas deleted branch renovate/erlang-27.x 2025-05-13 17:33:25 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: joao.dubas/ex_trainer#149
No description provided.