OTP 29.0.5 is a patch release for Erlang/OTP 29, updating erts to 17.0.5 and ssh to 6.0.4. The erts fix resolves a regression from the previous patch that prevented epmd from binding to localhost. The ssh update adds a security fix: the SSH client and server now reject packets not aligned to the cipher block size per RFC 4253 §6, with a timing-safe discard mechanism for CBC ciphers as a CVE-2008-5161 mitigation, while AEAD and encrypt-then-MAC modes disconnect immediately on structural errors.
98 Impressions