Path to this page:
Subject: CVS commit: pkgsrc/lang
From: Thomas Klausner
Date: 2023-12-20 19:46:53
Message id: 20231220184653.DA9A9FA42@cvs.NetBSD.org
Log Message:
erlang*: update to 26.2.1
Contains a Terrapin fix for erlang ssh.
26.2.1
---------------------------------------------------------------------
--- POTENTIAL INCOMPATIBILITIES -------------------------------------
---------------------------------------------------------------------
OTP-18897 Application(s): ssh
With this change (being response to CVE-2023-48795),
ssh can negotiate "strict KEX" OpenSSH extension with
peers supporting it; also
'chacha20-poly1305@openssh.com' algorithm becomes a
less preferred cipher.
If strict KEX availability cannot be ensured on both
connection sides, affected encryption modes(CHACHA and
CBC) can be disabled with standard ssh configuration.
This will provide protection against vulnerability, but
at a cost of affecting interoperability. See
Configuring algorithms in SSH.
---------------------------------------------------------------------
--- OTP-26.2.1 ------------------------------------------------------
---------------------------------------------------------------------
--- Fixed Bugs and Malfunctions ---
OTP-18903 Application(s): otp
Updated copyright and license information.
---------------------------------------------------------------------
--- erts-14.2.1 -----------------------------------------------------
---------------------------------------------------------------------
The erts-14.2.1 application can be applied independently of other
applications on a full OTP 26 installation.
--- Fixed Bugs and Malfunctions ---
OTP-18902 Application(s): erts
Removed unnecessary PCRE source tar-ball.
26.2
Highlights #
process_info/2 now supports lookup of values for specific keys in the \
process dictionary.
Potential incompatibilities: #
common_test now returns an error when a suite with a badly defined group is \
executed.
Files: