Benoît

web craftsman

[Benoît @benoitc]

hackney 4.9.0 is out.

New: max_body_size caps buffered response bodies, 512 MiB by default.
Hardening: stricter SSRF checks, pinned CAs, redirect credentials and proxy TLS.
Fixed: a slow host no longer stalls the whole pool.

https://t.co/3cKd3Pe34F

[Benoît @benoitc]

hackney 4.8.7 is out. It's a security update: quic 2.1.2 fixes session ticket reuse across listeners and closes two ways a hostile peer could stall or flood HTTP/3 and WebTransport connections. Upgrade recommended.

https://t.co/WnhBop3byW

[Benoît @benoitc]

Livery 0.10.6 is out, now on quic 2.1.2 with its security fixes.

Uploads over the size limit on HTTP/2 and HTTP/3 now get a proper 413, not a stream error. And a GET over HTTP/3 no longer hangs when your handler reads the body.

https://t.co/cKfU4FcRGO

[Benoît @benoitc]

erlang_quic 2.1.2 is out. It fixes 4 security issues, including one high severity, and adds reader-driven flow control with quic:set_stream_flow_control/3 and quic:consume/3.

Please upgrade.

https://t.co/4Cynm0h0H2

[Benoît @benoitc]

@ocochardlabbe :) sort of

[Benoît @benoitc]

so i'm not sure. Advisories tickets are interesting, but why i should accept them from anonymous with a weird name ?

[Benoît @benoitc]

la dernière chose don't j'ai envie c de perdre mon temps avec un conseiller commercial. C'est maintenant que je le veux pas demain ou après demain.

[Benoît @benoitc]

@bluetouff alorrs par contre du coup ca marche bien free my tv? parce que l'installation manuelle semble simple

[Benoît @benoitc]

hackney 4.8.6 is out: large HTTP/2 downloads over slow links no longer time out, and now run about as fast as HTTP/1.1. certifi 2.18.0 drops the compromised eMudhra CA certificates. #Erlang

https://t.co/grvgMCGDnP

[Benoît @benoitc]

certifi 2.18.0 for Erlang is out.

Removes the distrusted eMudhra emSign roots (C1, C3, G3). The CA bundle now matches Mozilla's trusted set as of 2026-10-20 (118 roots).

https://t.co/BWf6qlVpBU
https://t.co/FyAfhzRwYr

[Benoît @benoitc]

@dmitriid yes i am working on the new doc based on my note. tha is a tedious work so don'et expect it to land before the end of the week

[Benoît @benoitc]

work in progress in erlang wasm
https://t.co/0dRBv5whfc

[Benoît @benoitc]

@bluetouff le menage suffirait deja

[Benoît @benoitc]

@ocochardlabbe @ocochardlabbe if you need any more details feel free to ping me . i can also deploy a change when needed.

[Benoît @benoitc]

seriously do people test any more? freebsd, updated to llatest , bird 3.4 package is crashing. back to 3.2 that was working on 14.4 . crashing.

I wil open a ticket. But I used to trust more freebsd updates and the bird team .

[Benoît @benoitc]

@ocochardlabbe there is a previous report of it

[Benoît @benoitc]

@ocochardlabbe yes actually i posted to bird user ml but I had to dremove keep filtered to make it works

[Benoît @benoitc]

with the adition of multi processor to vmm, is there any reason to not go from freebsd fot openbsd ?Sill there is zfs and jails.

[Benoît @benoitc]

@bluetouff Bah. pourquoi tourner par 4 chemins quand 2 mots suffisent?

[Benoît @benoitc]

vmm(4)/vmd(8) gain support for multi-processor VMs

https://t.co/vmkh5xdgYW