# Patch Package OTP 29.0.5 Released

**URL:** <https://erlangforums.com/t/patch-package-otp-29-0-5-released/5842>\
**Category:** Erlang News\
**Tags:** erlang-release\
**Created:** [August 4, 2026, 10:40am UTC](https://erlangforums.com/t/patch-package-otp-29-0-5-released/5842 "2026-08-04T10:40:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jhogberg](https://erlangforums.com/user_avatar/erlangforums.com/jhogberg/32/179_2.png) [@jhogberg](https://erlangforums.com/u/jhogberg)\
**Post date:** [August 4, 2026, 10:40am UTC](https://erlangforums.com/t/patch-package-otp-29-0-5-released/5842/1 "2026-08-04T10:40:08Z")

</div>

```erlang
Patch Package: OTP 29.0.5
Git Tag: OTP-29.0.5
Date: 2026-08-04
Trouble Report Id: OTP-20137, OTP-20275
Seq num: GH-11402, PR-11110, PR-11409
System: OTP
Release: 29
Application: erts-17.0.5, ssh-6.0.4
Predecessor: OTP 29.0.4

```

Check out the git tag OTP-29.0.5, and build a full OTP system including  
documentation. Apply one or more applications from this build as patches to your  
installation using the ‘otp\_patch\_apply’ tool. For information on install  
requirements, see descriptions for each application version below.

# erts-17.0.5

The erts-17.0.5 application can be applied independently of other applications  
on a full OTP 29 installation.

## Fixed Bugs and Malfunctions

- Fixed a regression in the previous patch release that prevented epmd from  
binding to localhost.

> #### Full runtime dependencies of erts-17.0.5
> 
> kernel-9.0, sasl-3.3, stdlib-4.1

# ssh-6.0.4

The ssh-6.0.4 application can be applied independently of other applications on  
a full OTP 29 installation.

## Fixed Bugs and Malfunctions

- The SSH client and server now reject incoming packets not aligned to the  
cipher block size as required by RFC 4253 §6. For CBC ciphers, a timing-safe  
“packet discard” mechanism (CVE-2008-5161 mitigation) ensures structural  
errors are indistinguishable from MAC failures before disconnecting. AEAD and  
encrypt-then-MAC modes disconnect immediately.

> #### Full runtime dependencies of ssh-6.0.4
> 
> crypto-5.7, erts-14.0, kernel-10.3, public\_key-1.6.1, runtime\_tools-1.15.1,  
> stdlib-8.0

---

<div class="post-metadata">

**Author:** ![jhogberg](https://erlangforums.com/user_avatar/erlangforums.com/jhogberg/32/179_2.png) [@jhogberg](https://erlangforums.com/u/jhogberg)\
**Post date:** [August 4, 2026, 10:40am UTC](https://erlangforums.com/t/patch-package-otp-29-0-5-released/5842/3 "2026-08-04T10:40:14Z")

</div>