# Erlang/OTP OTP-28.5.0.6 — OTP 28.5.0.6 - Product: Erlang/OTP (https://whatsnew.fyi/product/erlang-otp) - Vendor: Ericsson - Date: 2026-09-01 - Version: OTP-28.5.0.6 - Original notes: https://github.com/erlang/otp/releases/tag/OTP-28.5.0.6 - Permalink: https://whatsnew.fyi/product/erlang-otp/releases/otp-28.5.0.6 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **fixed** — Fix bug in beam_types:subtract/2 for bitstrings - **fixed** — Fix type mismatch between ErlNifUInt64 and uint64_t in crypto NIF that caused incompatible-pointer warnings on macOS arm64 - **fixed** — eldap referral URL parsing now rejects a port component longer than 5 digits instead of attempting to convert an arbitrarily large digit string to an integer - **fixed** — Fix buffer leak and state corruption on ei_x_buff realloc failure - **fixed** — Fix no-suspend port command signals not being aborted properly in all scenarios - **fixed** — Fix missing exit_status caused by SIGCHLD race - **fixed** — Fix bug in is_in_range instruction for x86 JIT - **fixed** — Fix bug in binary_to_term that could cause emulator crash for specific terms in specific process states - **fixed** — Fix crash with term_to_iovec/2 for large binary - **fixed** — Fix distributed priority send larger than 32 KiB to a process alias causing receiving runtime system to crash - **fixed** — Fix priority message queue markers being installed unnecessarily in the message queue ``` Patch Package: OTP 28.5.0.6 Git Tag: OTP-28.5.0.6 Date: 2026-09-01 Trouble Report Id: OTP-20135, OTP-20234, OTP-20264, OTP-20265, OTP-20268, OTP-20269, OTP-20270, OTP-20271, OTP-20274, OTP-20278, OTP-20279, OTP-20281, OTP-20282, OTP-20284, OTP-20286, OTP-20289, OTP-20296, OTP-20300, OTP-20302, OTP-20306, OTP-20307, OTP-20308, OTP-20312, OTP-20319, OTP-20320, OTP-20324, OTP-20330, OTP-20333, OTP-20334, OTP-20342, OTP-20343, OTP-20344, OTP-20345, OTP-20346, OTP-20347, OTP-20350, OTP-20351 Seq num: CVE-2026-75538, ERIERL-1354, GH-11052, GH-11278, GH-11308, GH-11380, GH-11404, GH-11416, GH-11419, GH-11423, GH-11494, GH-11511, PR-11298, PR-11325, PR-11388, PR-11417, PR-11425, PR-11428, PR-11429, PR-11437, PR-11463, PR-11464, PR-11478, PR-11481, PR-11485, PR-11492, PR-11503, PR-11505, PR-11509, PR-11513, PR-11517, PR-11521, PR-11533, PR-11538, PR-11539, PR-11540, PR-11541, PR-11542, PR-11543, PR-11544, PR-11545, PR-11546, PR-11547, PR-11548, PR-11553, PR-11554 System: OTP Release: 28 Application: compiler-9.0.6.2, crypto-5.8.3.3, eldap-1.2.16.1, erl_interface-5.7.0.2, erts-16.4.0.6, inets-9.6.2.3, kernel-10.6.3.4, megaco-4.8.3.2, mnesia-4.25.3.2, snmp-5.20.2.2, ssh-5.5.2.5, ssl-11.6.0.5, stdlib-7.3.0.2, tools-4.1.4.1 Predecessor: OTP 28.5.0.5 ``` Check out the git tag OTP-28.5.0.6, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below. #### compiler-9.0.6.2 The compiler-9.0.6.2 application can be applied independently of other applications on a full OTP 28 installation. ##### Fixed Bugs and Malfunctions - compiler: Fix bug in `beam_types:subtract/2` for bitstrings Own Id: OTP-20312\ Related Id(s): [GH-11494], [PR-11503] > #### Full runtime dependencies of compiler-9.0.6.2 > > crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0 #### crypto-5.8.3.3 The crypto-5.8.3.3 application can be applied independently of other applications on a full OTP 28 installation. ##### Fixed Bugs and Malfunctions - Fixed type mismatch between `ErlNifUInt64` and `uint64_t` in crypto NIF that caused incompatible-pointer warnings on macOS arm64 when passing DH parameters to OpenSSL. Own Id: OTP-20333\ Related Id(s): [GH-11511], [PR-11513] > #### Full runtime dependencies of crypto-5.8.3.3 > > erts-9.0, kernel-6.0, stdlib-3.9 #### eldap-1.2.16.1 The eldap-1.2.16.1 application can be applied independently of other applications on a full OTP 28 installation. ##### Fixed Bugs and Malfunctions - eldap referral URL parsing now rejects a port component longer than 5 digits instead of attempting to convert an arbitrarily large digit string to an integer. Own Id: OTP-20345\ Related Id(s): [PR-11538] > #### Full runtime dependencies of eldap-1.2.16.1 > > asn1-3.0, erts-6.0, kernel-3.0, ssl-5.3.4, stdlib-3.4 #### erl_interface-5.7.0.2 The erl_interface-5.7.0.2 application can be applied independently of other applications on a full OTP 28 installation. ##### Fixed Bugs and Malfunctions - erl_interface: Fix buffer leak and state corruption on `ei_x_buff` realloc failure Own Id: OTP-20324\ Related _[Truncated at 4000 characters — full notes: https://github.com/erlang/otp/releases/tag/OTP-28.5.0.6]_