Update Base Image (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
erlang	patch	27.2.1 -> 27.2.4
ubuntu	patch	noble-20241015 -> noble-20250127

---

Release Notes

erlang/otp (erlang)

v27.2.4

Compare Source

v27.2.3: OTP 27.2.3

Compare Source

Patch Package:           OTP 27.2.3
Git Tag:                 OTP-27.2.3
Date:                    2025-02-17
Trouble Report Id:       OTP-19457, OTP-19467, OTP-19486
Seq num:                 ERIERL-1189, ERIERL-1190, PR-9387, PR-9408,
                         PR-9418
System:                  OTP
Release:                 27
Application:             inets-9.3.2, ssl-11.2.8
Predecessor:             OTP 27.2.2

Check out the git tag OTP-27.2.3, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

inets-9.3.2

The inets-9.3.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

• Improved robustness of httpd startup procedure.

  Own Id: OTP-19486
  Related Id(s): ERIERL-1190, PR-9408

Full runtime dependencies of inets-9.3.2

erts-14.0, kernel-9.0, mnesia-4.12, public_key-1.13, runtime_tools-1.8.14,
ssl-9.0, stdlib-5.0, stdlib-6.0

ssl-11.2.8

Note! The ssl-11.2.8 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

• Setting protocol version to a lower value then supported by default in server
  API function called after ssl:listen/2 could result in wrong default values
  being used and connections failing with insufficient security.

  Own Id: OTP-19457
  Related Id(s): PR-9418

• Improve error handling of server name indication fun. This implies that if the
  sni_fun returns undefined we will attempt connection with original option
  values, if it returns unrecognized we end the connection with
  UNRECOGNIZED_NAME alert and if provided options fail option verification we
  will end the connection with a HANDSHAKE_FAILURE and an error log.

  Own Id: OTP-19467
  Related Id(s): ERIERL-1189, PR-9387

Full runtime dependencies of ssl-11.2.8

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
runtime_tools-1.15.1, stdlib-6.0

v27.2.2: OTP 27.2.2

Compare Source

Patch Package:           OTP 27.2.2
Git Tag:                 OTP-27.2.2
Date:                    2025-02-06
Trouble Report Id:       OTP-19240, OTP-19381, OTP-19411, OTP-19445,
                         OTP-19455, OTP-19462
Seq num:                 ERIERL-1174, ERIERL-1177, GH-9112, GH-9117,
                         GH-9177, GH-9208, PR-9273, PR-9286, PR-9322,
                         PR-9356, PR-9372, PR-9377
System:                  OTP
Release:                 27
Application:             compiler-8.5.5, erts-15.2.2, kernel-10.2.2,
                         public_key-1.17.1, ssl-11.2.7
Predecessor:             OTP 27.2.1

Check out the git tag OTP-27.2.2, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

compiler-8.5.5

The compiler-8.5.5 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

• Eliminated a bug in the alias analysis pass that could potentially cause
  unsafe optimizations of binary construction or record updates.

  Own Id: OTP-19455
  Related Id(s): PR-9356

Full runtime dependencies of compiler-8.5.5

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

erts-15.2.2

The erts-15.2.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

• Disabled an unsafe runtime optimization in binary construction that caused
  silent memory corruption.

  Own Id: OTP-19462
  Related Id(s): ERIERL-1177, PR-9372

Full runtime dependencies of erts-15.2.2

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.2

Note! The kernel-10.2.2 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

• Fixed a couple of bugs that could make global's internal state inconsistent
  when a connection was reconnected.

  Own Id: OTP-19381
  Related Id(s): GH-9112, GH-9117, PR-9377

Full runtime dependencies of kernel-10.2.2

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

public_key-1.17.1

The public_key-1.17.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

• Consider keyCertSign to compatible with extended key usage for TLS
  client/server auth in CAs, adhere to wide spread implementations

  Own Id: OTP-19240
  Related Id(s): GH-9208, PR-9286

Full runtime dependencies of public_key-1.17.1

asn1-5.0, crypto-5.0, erts-13.0, kernel-8.0, stdlib-4.0

ssl-11.2.7

Note! The ssl-11.2.7 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

• An initiated handshake should always be closed with an alert, some corner
  cases have been fixed so that this should always be the case.

  Own Id: OTP-19411
  Related Id(s): ERIERL-1174, PR-9273

• Correct option handling to work properly for paused handshaking. Could result
  in unwanted alerts or or error messages.

  Own Id: OTP-19445
  Related Id(s): GH-9177, PR-9322

Full runtime dependencies of ssl-11.2.7

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
runtime_tools-1.15.1, stdlib-6.0

Thanks to

Frej Drejhammar

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.