1 files changed, 65 insertions, 0 deletions
diff --git a/release-notes/OTP-27.2.3.README.txt b/release-notes/OTP-27.2.3.README.txt
new file mode 100644
index 0000000..494ae4f
--- /dev/null
+++ b/release-notes/OTP-27.2.3.README.txt
@@ -0,0 +1,65 @@
+Patch Package:           OTP 27.2.3
+Git Tag:                 OTP-27.2.3
+Date:                    2025-02-17
+Trouble Report Id:       OTP-19457, OTP-19467, OTP-19486
+Seq num:                 ERIERL-1189, ERIERL-1190, PR-9387, PR-9408,
+                         PR-9418
+System:                  OTP
+Release:                 27
+Application:             inets-9.3.2, ssl-11.2.8
+Predecessor:             OTP 27.2.2
+
+Check out the git tag OTP-27.2.3, and build a full OTP system including
+documentation. Apply one or more applications from this build as patches to your
+installation using the 'otp_patch_apply' tool. For information on install
+requirements, see descriptions for each application version below.
+
+# inets-9.3.2
+
+The inets-9.3.2 application can be applied independently of other applications
+on a full OTP 27 installation.
+
+## Fixed Bugs and Malfunctions
+
+- Improved robustness of httpd startup procedure.
+
+  Own Id: OTP-19486
+  Related Id(s): ERIERL-1190, PR-9408
+
+> #### Full runtime dependencies of inets-9.3.2
+>
+> erts-14.0, kernel-9.0, mnesia-4.12, public_key-1.13, runtime_tools-1.8.14,
+> ssl-9.0, stdlib-5.0, stdlib-6.0
+
+# ssl-11.2.8
+
+Note! The ssl-11.2.8 application _cannot_ be applied independently of other
+applications on an arbitrary OTP 27 installation.
+
+       On a full OTP 27 installation, also the following runtime
+       dependency has to be satisfied:
+       -- public_key-1.16.4 (first satisfied in OTP 27.1.3)
+
+## Fixed Bugs and Malfunctions
+
+- Setting protocol version to a lower value then supported by default in server
+  API function called after ssl:listen/2 could result in wrong default values
+  being used and connections failing with insufficient security.
+
+  Own Id: OTP-19457
+  Related Id(s): PR-9418
+
+- Improve error handling of server name indication fun. This implies that if the
+  `sni_fun` returns `undefined` we will attempt connection with original option
+  values, if it returns `unrecognized` we end the connection with
+  UNRECOGNIZED_NAME alert and if provided options fail option verification we
+  will end the connection with a HANDSHAKE_FAILURE and an error log.
+
+  Own Id: OTP-19467
+  Related Id(s): ERIERL-1189, PR-9387
+
+> #### Full runtime dependencies of ssl-11.2.8
+>
+> crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
+> runtime_tools-1.15.1, stdlib-6.0
+