Erlang OTP-28.3.2, OTP-27.3.4.8 and OTP-26.2.5.17 released!

[NewsBot]

Erlang OTP-28.3.2, OTP-27.3.4.8 and OTP-26.2.5.17 has been released.

Patch Package:           OTP 28.3.2
Git Tag:                 OTP-28.3.2
Date:                    2026-02-20
Trouble Report Id:       OTP-19864, OTP-19915, OTP-19926, OTP-19958,
                         OTP-19962, OTP-19978, OTP-19981, OTP-19983,
                         OTP-19993
Seq num:                 CVE-2026-21620, GH-10651, GH-8676, PR-10539,
                         PR-10547, PR-10575, PR-10616, PR-10664,
                         PR-10696, PR-10706, PR-10732
System:                  OTP
Release:                 28
Application:             crypto-5.8.1, erts-16.2.1, ssh-5.4.1,
                         stdlib-7.2.1, tftp-1.2.4
Predecessor:             OTP 28.3.1

Check out the git tag OTP-28.3.2, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the ‘otp_patch_apply’ tool. For information on install requirements, see descriptions for each application version below.

crypto-5.8.1

The crypto-5.8.1 application can be applied independently of other applications on a full OTP 28 installation.

Fixed Bugs and Malfunctions

• Fixed static linking of OpenSSL 3.5+ on Windows.

  Own Id: OTP-19993
  Related Id(s): [PR-10732]

Full runtime dependencies of crypto-5.8.1

erts-9.0, kernel-6.0, stdlib-3.9

erts-16.2.1

The erts-16.2.1 application can be applied independently of other applications on a full OTP 28 installation.

Fixed Bugs and Malfunctions

• Fail the windows build properly when nsis is not recognised.

  Own Id: OTP-19926
  Related Id(s): [PR-10547]

• Socket accept cancel could cause fatal crash (core dump) on Windows.

  Own Id: OTP-19958

• Fixed bug in ets:update_counter/4 and ets:update_element/4 accepting and inserting a default tuple smaller than the keypos of the table. Such a tuple without a key element would make the table internally inconsistent and might lead to bad behavior at table access, like ERTS runtime crash.

  No…

Link: Release OTP 28.3.2 · erlang/otp · GitHub

Link: Release OTP 27.3.4.8 · erlang/otp · GitHub

Link: Release OTP 26.2.5.17 · erlang/otp · GitHub