OTP 28.4.3 is a patch release for Erlang/OTP 28 addressing three bug fixes. Key changes include: a fix to the otp_patch_apply script for handling multi-digit version parts in documentation installation; a Windows-specific fix for gen_tcp with inet_backend=socket to correctly bind to the loopback address when connecting to loopback; and a security fix (CVE-2026-32147) in the SFTP server where FSETSTAT operations on open file handles could modify file attributes outside the configured root directory, bypassing chroot boundaries.
Sort: