OTP 27.3.4.16 is a patch release for Erlang/OTP 27 addressing two bug fixes. The erts-15.2.7.12 update resolves a regression from the previous patch that prevented epmd from binding to localhost. The ssh-5.2.11.11 update hardens the SSH client and server by rejecting incoming packets not aligned to the cipher block size per RFC 4253 §6, including a timing-safe packet discard mechanism to mitigate CVE-2008-5161 for CBC ciphers, while AEAD and encrypt-then-MAC modes disconnect immediately on structural errors.
93 Impressions