Prepare release

Author: Erlang/OTP

erts/doc/notes.md

@@ -23,6 +23,21 @@ limitations under the License.
 
 This document describes the changes made to the ERTS application.
 
+## Erts 16.0.3
+
+### Fixed Bugs and Malfunctions
+
+- Update PCRE2 from 10.45 to 10.46. Fixes potential buffer read overflow on regular expressions with `(*scs:)` and `(*ACCEPT)` syntax combined.
+
+  Own Id: OTP-19755 Aux Id: [CVE-2025-58050]
+
+- Fixed bug that could cause crash in beam started with `erl -emu_type debug +JPperf true` with any type of tracing return from function.
+
+  Own Id: OTP-19761 Aux Id: [PR-19755]
+
+[CVE-2025-58050]: https://nvd.nist.gov/vuln/detail/2025-58050
+[PR-19755]: https://github.com/erlang/otp/pull/19755
+
 ## Erts 16.0.2
 
 ### Fixed Bugs and Malfunctions

erts/vsn.mk

@@ -20,7 +20,7 @@
 # %CopyrightEnd%
 # 
 
-VSN = 16.0.2
+VSN = 16.0.3
 
 # Port number 4365 in 4.2
 # Port number 4366 in 4.3

lib/diameter/doc/notes.md

@@ -23,6 +23,16 @@ limitations under the License.
 
 Releases are listed in reverse chronological order, most recent first.
 
+## diameter 2.5.1
+
+### Fixed Bugs and Malfunctions
+
+- With this change message_cb callback will be called with updated state for processing 'ack' after 'send'.
+
+  Own Id: OTP-19753 Aux Id: [PR-9815]
+
+[PR-9815]: https://github.com/erlang/otp/pull/9815
+
 ## diameter 2.5
 
 ### Fixed Bugs and Malfunctions

lib/diameter/vsn.mk

@@ -19,5 +19,5 @@
 # %CopyrightEnd%
 
 APPLICATION  = diameter
-DIAMETER_VSN = 2.5
+DIAMETER_VSN = 2.5.1
 APP_VSN      = $(APPLICATION)-$(DIAMETER_VSN)$(PRE_VSN)

lib/ssh/doc/notes.md

@@ -21,6 +21,43 @@ limitations under the License.
 -->
 # SSH Release Notes
 
+## Ssh 5.3.3
+
+### Fixed Bugs and Malfunctions
+
+- Option max_handles can be configured for sshd running SFTP. The positive integer value limits amount of file handles opened for a connection (by default 4096 is used).
+
+  *** POTENTIAL INCOMPATIBILITY ***
+
+  Own Id: OTP-19701 Aux Id: [CVE-2025-48041], [PR-10157]
+
+- Avoid decoding KEX messages providing too many algorithms. This change does not introduce new limitation but assures it is enforced earlier in processing chain. Adjustments in error logging during handshake.
+
+  *** POTENTIAL INCOMPATIBILITY ***
+
+  Own Id: OTP-19741 Aux Id: [CVE-2025-48040], [PR-10162]
+
+- A new 'max_path' option is now available in the sshd configuration, allowing administrators to set the maximum allowable path length. By default, this value is set to 4096 characters.
+
+  *** POTENTIAL INCOMPATIBILITY ***
+
+  Own Id: OTP-19742 Aux Id: [CVE-2025-48039], [PR-10155]
+
+- Reject file handles exceeding size specified in RFCs (256 bytes).
+
+  *** POTENTIAL INCOMPATIBILITY ***
+
+  Own Id: OTP-19748 Aux Id: [CVE-2025-48038], [PR-10156]
+
+[CVE-2025-48041]: https://nvd.nist.gov/vuln/detail/2025-48041
+[PR-10157]: https://github.com/erlang/otp/pull/10157
+[CVE-2025-48040]: https://nvd.nist.gov/vuln/detail/2025-48040
+[PR-10162]: https://github.com/erlang/otp/pull/10162
+[CVE-2025-48039]: https://nvd.nist.gov/vuln/detail/2025-48039
+[PR-10155]: https://github.com/erlang/otp/pull/10155
+[CVE-2025-48038]: https://nvd.nist.gov/vuln/detail/2025-48038
+[PR-10156]: https://github.com/erlang/otp/pull/10156
+
 ## Ssh 5.3.2
 
 ### Fixed Bugs and Malfunctions

lib/ssh/vsn.mk

@@ -1,6 +1,6 @@
 #-*-makefile-*-   ; force emacs to enter makefile-mode
 
-SSH_VSN = 5.3.2
+SSH_VSN = 5.3.3
 APP_VSN    = "ssh-$(SSH_VSN)"
 
 # %CopyrightBegin%

lib/stdlib/doc/notes.md

@@ -23,6 +23,16 @@ limitations under the License.
 
 This document describes the changes made to the STDLIB application.
 
+## STDLIB 7.0.3
+
+### Fixed Bugs and Malfunctions
+
+- Update PCRE2 from 10.45 to 10.46. Fixes potential buffer read overflow on regular expressions with `(*scs:)` and `(*ACCEPT)` syntax combined.
+
+  Own Id: OTP-19755 Aux Id: [CVE-2025-58050]
+
+[CVE-2025-58050]: https://nvd.nist.gov/vuln/detail/2025-58050
+
 ## STDLIB 7.0.2
 
 ### Fixed Bugs and Malfunctions

lib/stdlib/src/stdlib.app.src

@@ -122,6 +122,6 @@
                dets]},
   {applications, [kernel]},
   {env, []},
-  {runtime_dependencies, ["sasl-3.0","kernel-10.0","erts-@OTP-19755@","crypto-4.5",
+  {runtime_dependencies, ["sasl-3.0","kernel-10.0","erts-16.0.3","crypto-4.5",
 			  "compiler-5.0", "syntax_tools-3.2.1"]}
 ]}.

lib/stdlib/src/stdlib.appup.src

@@ -55,7 +55,8 @@
   {<<"^6\\.2\\.2(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
   {<<"^7\\.0$">>,[restart_new_emulator]},
   {<<"^7\\.0\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
-  {<<"^7\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]}],
+  {<<"^7\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
+  {<<"^7\\.0\\.2(?:\\.[0-9]+)*$">>,[restart_new_emulator]}],
  [{<<"^5\\.0$">>,[restart_new_emulator]},
   {<<"^5\\.0\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
   {<<"^5\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
@@ -81,4 +82,5 @@
   {<<"^6\\.2\\.2(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
   {<<"^7\\.0$">>,[restart_new_emulator]},
   {<<"^7\\.0\\.0(?:\\.[0-9]+)+$">>,[restart_new_emulator]},
-  {<<"^7\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]}]}.
+  {<<"^7\\.0\\.1(?:\\.[0-9]+)*$">>,[restart_new_emulator]},
+  {<<"^7\\.0\\.2(?:\\.[0-9]+)*$">>,[restart_new_emulator]}]}.

lib/stdlib/vsn.mk

@@ -1,4 +1,4 @@
-STDLIB_VSN = 7.0.2
+STDLIB_VSN = 7.0.3
 
 # %CopyrightBegin%
 #