erlang/otp OTP-24.1.2

OTP 24.1.2

on GitHub

Patch Package:           OTP 24.1.2
Git Tag:                 OTP-24.1.2
Date:                    2021-10-05
Trouble Report Id:       OTP-17393, OTP-17657, OTP-17658, OTP-17659,
                         OTP-17666, OTP-17668, OTP-17670, OTP-17672
Seq num:                 ERIERL-702, GH-5224, GH-5239
System:                  OTP
Release:                 24
Application:             crypto-5.0.4, erts-12.1.2, kernel-8.1.2,
                         public_key-1.11.3, ssl-10.5.1
Predecessor:             OTP 24.1.1

 Check out the git tag OTP-24.1.2, and build a full OTP system
 including documentation. Apply one or more applications from this
 build as patches to your installation using the 'otp_patch_apply'
 tool. For information on install requirements, see descriptions for
 each application version below.

 ---------------------------------------------------------------------
 --- crypto-5.0.4 ----------------------------------------------------
 ---------------------------------------------------------------------

 The crypto-5.0.4 application can be applied independently of other
 applications on a full OTP 24 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-17668    Application(s): crypto
               Related Id(s): PR-5245

               Fixed minor memory leak at crypto module purge.


  OTP-17672    Application(s): crypto

               Fix possible inconsistency in fips mode when linking
               with some cryptolibs.


 Full runtime dependencies of crypto-5.0.4: erts-9.0, kernel-5.3,
 stdlib-3.4


 ---------------------------------------------------------------------
 --- erts-12.1.2 -----------------------------------------------------
 ---------------------------------------------------------------------

 The erts-12.1.2 application can be applied independently of other
 applications on a full OTP 24 installation.

 --- Improvements and New Features ---

  OTP-17658    Application(s): erts

               The python scripts that existed in
               erts/lib_src/yielding_c_fun/lib/tiny_regex_c/scripts
               had a license that was incompatible with Erlang/OTP's
               license. This ticket removes these scripts that were
               not used by us.


 Full runtime dependencies of erts-12.1.2: kernel-8.0, sasl-3.3,
 stdlib-3.13


 ---------------------------------------------------------------------
 --- kernel-8.1.2 ----------------------------------------------------
 ---------------------------------------------------------------------

 The kernel-8.1.2 application can be applied independently of other
 applications on a full OTP 24 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-17659    Application(s): kernel
               Related Id(s): ERIERL-702

               The undocumented DNS encode/decode module inet_dns has
               been cleaned up to handle the difference between
               "symbolic" and "raw" records in a more consistent
               manner.

               PR-5145/OTP-17584 introduced a change that contributed
               to an already existing confusion, which this correction
               should remedy.


 Full runtime dependencies of kernel-8.1.2: crypto-5.0, erts-12.0,
 sasl-3.0, stdlib-3.13


 ---------------------------------------------------------------------
 --- public_key-1.11.3 -----------------------------------------------
 ---------------------------------------------------------------------

 The public_key-1.11.3 application can be applied independently of
 other applications on a full OTP 24 installation.

 --- Fixed Bugs and Malfunctions ---

  OTP-17657    Application(s): public_key, ssl

               Avoid re-encoding of decoded certificates. This could
               cause unexpected failures as some subtle encoding
               errors can be tolerated when decoding but hence
               creating another sequence of bytes if the decoded value
               is re-encoded.


 Full runtime dependencies of public_key-1.11.3: asn1-3.0, crypto-3.8,
 erts-6.0, kernel-3.0, stdlib-3.5


 ---------------------------------------------------------------------
 --- ssl-10.5.1 ------------------------------------------------------
 ---------------------------------------------------------------------

 Note! The ssl-10.5.1 application *cannot* be applied independently of
       other applications on an arbitrary OTP 24 installation.

       On a full OTP 24 installation, also the following runtime
       dependency has to be satisfied:
       -- public_key-1.11.3 (first satisfied in OTP 24.1.2)


 --- Fixed Bugs and Malfunctions ---

  OTP-17393    Application(s): ssl

               Before that change, TLS downgrade could occasionally
               fail when data intended for downgraded socket were
               delivered together with CLOSE_NOTIFY alert to ssl app.


  OTP-17657    Application(s): public_key, ssl

               Avoid re-encoding of decoded certificates. This could
               cause unexpected failures as some subtle encoding
               errors can be tolerated when decoding but hence
               creating another sequence of bytes if the decoded value
               is re-encoded.


  OTP-17666    Application(s): ssl
               Related Id(s): GH-5239

               Fix possible process leak when the process doing
               ssl:transport_accept dies before initiating the TLS
               handshake.


  OTP-17670    Application(s): ssl
               Related Id(s): GH-5224

               Fix dtls memory leak, the replay window code was
               broken.


 Full runtime dependencies of ssl-10.5.1: crypto-5.0, erts-10.0,
 inets-5.10.7, kernel-8.0, public_key-1.11.3, runtime_tools-1.15.1,
 stdlib-3.12


 ---------------------------------------------------------------------
 ---------------------------------------------------------------------
 ---------------------------------------------------------------------