---
title: "Patch Package OTP 29.0.2 Released"
url: https://daily.dev/posts/patch-package-otp-29-0-2-released-fr7wkiqyl
source_url: https://erlangforums.com/t/patch-package-otp-29-0-2-released/5705
type: article
source: "Erlang Forums"
published: 2026-06-10T10:19:33.081Z
updated: 2026-06-10T10:20:01.538Z
tags: ["security", "authentication", "ssh", "erlang"]
reading_time: 6
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Patch Package OTP 29.0.2 Released

**[Erlang Forums](https://daily.dev/sources/erlangforums)** · 6 min read · 0 upvotes · 0 comments

## Summary

Erlang/OTP 29.0.2 patch release fixes multiple security vulnerabilities and bugs across 12 applications. Security fixes include: a buffer overflow in SCTP parsing (erts, CVE-2026-49759) that could lead to RCE; a stack overflow in erl_interface for large integers (CVE-2026-49760); SSRF/FTP bounce attack via improper passive mode IP validation (ftp, CVE-2026-48858); credential leakage on HTTP redirects (inets, CVE-2026-48856); SSH timing-based username enumeration (CVE-2026-48859); SSH SFTP path disclosure (CVE-2026-48855); and TLS distribution LAN enforcement bypass (ssl, CVE-2026-48860). Non-security fixes include Dialyzer native record bugs, gen_tcp_socket option inheritance, stdlib record operation crashes, and SSH keep-alive race conditions.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://erlangforums.com/t/patch-package-otp-29-0-2-released/5705>

## Similar posts on daily.dev

- [Patch Package OTP 28.5.0.2 Released](https://daily.dev/posts/patch-package-otp-28-5-0-2-released-x9oxtbvu6) · Erlang Forums · 0 upvotes · 0 comments
- [Patch Package OTP 29.0.3 Released](https://daily.dev/posts/patch-package-otp-29-0-3-released-5din9mpe0) · Erlang Forums · 0 upvotes · 0 comments
- [Patch Package OTP 29.0.1 Released](https://daily.dev/posts/patch-package-otp-29-0-1-released-jnqr5onwd) · Erlang Forums · 0 upvotes · 0 comments
- [Patch Package OTP 29.0.4 Released](https://daily.dev/posts/patch-package-otp-29-0-4-released-07cjs8mrn) · Erlang Forums · 0 upvotes · 0 comments
- [Patch Package OTP 28.4.1 Released](https://daily.dev/posts/patch-package-otp-28-4-1-released-yxcmqkhvm) · Erlang Forums · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#authentication](https://daily.dev/tags/authentication), [#ssh](https://daily.dev/tags/ssh), [#erlang](https://daily.dev/tags/erlang)

[View this post on daily.dev](https://daily.dev/posts/patch-package-otp-29-0-2-released-fr7wkiqyl)