Thanks to Jinwoo for driving this forward. +1(binding) I checked: - signatures and hashes are fine - license and notice files look good - file have correct ASF headers if necessary
On Tue, Mar 24, 2026 at 11:52 AM Leon Finker <[email protected]> wrote: > +1 > Just repeating same thing as on 1.15.x email chain. Performing the exact > same tests on the cache server across different use cases: replicated > global regions and colocated custom data partitioning regions (all with > persistence). Async gateways and so on. Also, I tested the durable client > and server-side interest registration use cases. A few of our real-world > use case services and clients. No issues were observed. > > On Mon, Mar 23, 2026 at 6:12 AM Jinwoo Hwang via dev <[email protected] > > > wrote: > > > Hello Apache Geode Developer Community, > > > > To allow additional time for participation, I would like to extend the > > vote by one week. > > > > I would like to thank Charlie for his vote and verification. We are now > > just one vote away from releasing Apache Geode 2.0.1. > > > > Your participation would be greatly appreciated and will help ensure we > > can address critical security vulnerabilities in a timely manner and > > deliver a more secure Apache Geode to our community. > > > > Best regards, > > Jinwoo Hwang (he/him/his) > > > > SAS® Research and Development > > http://JinwooHwang.com<http://jinwoohwang.com/> > > > > From: Charlie Black <[email protected]> > > Date: Saturday, March 21, 2026 at 4:45 PM > > To: [email protected] <[email protected]> > > Cc: Jinwoo Hwang <[email protected]> > > Subject: Re: [VOTE] Apache Geode 2.0.1.RC1 > > > > > > EXTERNAL > > > > I’ve set up and configured the RC Geode via gfsh and integrated a > > geospatial Lucene application. Using Spring Boot simulators, I’m > currently > > pushing sensor data through a 2.0.1 client and executing geospatial > queries > > via a web interface. I also confirmed the setup works with Geode 1.15.2 > to > > ensure backward compatibility. > > > > The release gets a +1 from me. > > > > Charlie > > > > > > > > On Fri, Mar 20, 2026 at 4:17 PM Jinwoo Hwang via dev < > [email protected] > > <mailto:[email protected]>> wrote: > > Hello Apache Geode Developer Community, > > > > This is a follow-up regarding the vote for Apache Geode version > 2.0.1.RC1. > > > > It is disheartening that the voting deadline of 3 PM PST on Friday, March > > 20, 2026 has passed without any votes, especially given the community > > effort invested in this release. > > > > In particular, this release includes several high-impact security > > remediations the community recently completed: > > -Critical security patches: CVE-2024-12798, CVE-2024-12801, > > CVE-2025-11226, CVE-2026-1225 (GEODE-10555 #7982) > > -Man-in-the-middle protection: CVE-2025-68161 (GEODE-10543 #7975) > > -Authentication bypass remediation: CVE-2026-23903 (GEODE-10559 #7986) > > -Denial of service remediation: Allocation of Resources Without Limits or > > Throttling (GEODE-10565 #7990) > > -Security bypass and DoS remediation: CVE-2026-1605 and CVE-2025-11143 > > (GEODE-10568 #7992) > > -Endpoint Request security fix: CVE-2025-22235 (GEODE-10572 #7993) > > > > I would like to encourage PMC and dev community members to please take a > > few minutes to review the release candidate and participate in this > > important vote. The developer community has worked very hard on this > > release to remediate critical security vulnerabilities and improve > overall > > stability, and your review and vote would be sincerely appreciated. > > > > Best regards, > > Jinwoo Hwang (he/him/his) > > SAS® Research and Development > > http://JinwooHwang.com< > > > https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6Nzo0MmUwOmY4MDY1YmIzY2YxMmVjMWUxZWY4MDY2MzgzMDhhZGQ2ZmNlZmJmYjIyMDI0NTM4YmVlOTBhZmM3OWViYzU0Yjg6aDpUOk4 > > ><http://jinwoohwang.com/< > > > https://protect.checkpoint.com/v2/r01/___http://jinwoohwang.com/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6NzoyNTkzOmQxNTNiYjY0Mjg5YjJiM2U2ZjE3YmRiNzY0MTViMWJjOWUwOTFiZjMwNDliZmUzNDA1N2JhMDQ5OTVmNDY2YmE6aDpUOk4 > > >> > > > > From: Jinwoo Hwang <[email protected]<mailto:[email protected]>> > > Date: Saturday, March 14, 2026 at 5:58 AM > > To: [email protected]<mailto:[email protected]> < > > [email protected]<mailto:[email protected]>> > > Subject: [VOTE] Apache Geode 2.0.1.RC1 > > > > Hello Apache Geode Developer Community, > > > > This is a release candidate for Apache Geode version 2.0.1.RC1. > > Thanks to all the community members for their contributions to this > > release! > > > > Please do a review and give your feedback, including the checks you > > performed. > > > > Voting deadline: > > 3PM PST Friday, March 20 2026. > > > > Please note that we are voting upon the source tag: > > rel/v2.0.1.RC1 > > > > Release notes: > > > > > https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-2.0.1 > > < > > > https://protect.checkpoint.com/v2/r01/___https://cwiki.apache.org/confluence/display/GEODE/Release+Notes%23ReleaseNotes-2.0.1___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6Nzo2NzY0OmJjNjRhYzQ4NmMxYTkzYjc2ZTgyMGE0ZjBlNmY3MzI3NTJiMDg2ZjcxMGI2ZmRlNGFmNmU2MmE0MjA0NTUyNzA6aDpUOk4 > > > > > > > Source and binary distributions: > > https://dist.apache.org/repos/dist/dev/geode/2.0.1.RC1/< > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/dev/geode/2.0.1.RC1/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6Nzo0ZTI0OmE2YzgxMWE1ZGJmMTUzZmJmZGRlYjk1OGZhYzUzYjYxNmFjNTA5ZTRlYjVmZTI3NmE2OTI4ZGNjMjY5YmMzNDE6aDpUOk4 > > > > > > > Maven staging repo: > > https://repository.apache.org/content/repositories/orgapachegeode-1150< > > > https://protect.checkpoint.com/v2/r01/___https://repository.apache.org/content/repositories/orgapachegeode-1150___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6Nzo5OGI4OmE0ZTk0NzdiOGJmYmNiOGMzMzFkYWRkZjRjMWYyMDExY2U2YzgyNDczMjRmNDEwOWQzZTk3MTI3NjgzODg3OTI6aDpUOk4 > > > > > > > GitHub: > > https://github.com/apache/geode/tree/rel/v2.0.1.RC1 > > https://github.com/apache/geode-examples/tree/rel/v2.0.1.RC1 > > https://github.com/apache/geode-native/tree/rel/v2.0.1.RC1 > > https://github.com/apache/geode-benchmarks/tree/rel/v2.0.1.RC1 > > > > Geode's KEYS file containing PGP keys we use to sign the release: > > https://github.com/apache/geode/blob/develop/KEYS > > > > Command to run geode-examples: > > ./gradlew -PgeodeReleaseUrl= > > https://dist.apache.org/repos/dist/dev/geode/2.0.1.RC1< > > > https://protect.checkpoint.com/v2/r01/___https://dist.apache.org/repos/dist/dev/geode/2.0.1.RC1___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6Nzo2YjJkOjQyY2E2ZGM3MDc2ZmRlYjYzNmRmYTU4NTQ3ZWU2ZjhmMTAxMGJhNWMwNTEyNzJiMTUzYmNiYmFjNDEyNzc5MTc6aDpUOk4 > > > > -PgeodeRepositoryUrl= > > https://repository.apache.org/content/repositories/orgapachegeode-1150< > > > https://protect.checkpoint.com/v2/r01/___https://repository.apache.org/content/repositories/orgapachegeode-1150___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6NzowZjYyOjhlYThjOWFhZjExY2UxYzFkNzc1N2E2NDg0ODIwYTc2NmNkY2U4YTllNDg5NzhlZDQwODYzZTRkYWQ5MzhjMWI6aDpUOk4 > > > > build runAll > > > > Best regards, > > Jinwoo Hwang (he/him/his) > > SAS® Research and Development > > http://JinwooHwang.com< > > > https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6Nzo2NGQyOjU3YzQ1YzRiNGUzYjAyMjRkMzFhNmVhMzYyNTNiODNiOTE3NjhjOTkxNjkxYjcyNGQ2Yjk5MjBmMmE1NWJkNDM6aDpUOk4 > > ><http://jinwoohwang.com/< > > > https://protect.checkpoint.com/v2/r01/___http://jinwoohwang.com/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MjAxZTM3M2Q0MjlhNTU5MGJkZWJlNjliYjU4YzU3OTg6NzpiNWJjOmNmZmY5YTBmYmRkYTdmOWQ4YWE4Zjc5ZjAzNTVhZjBkNWJkYmRmZWRkZjk4NGY0YTEwMGQzZDQyODg3NDAxMmE6aDpUOk4 > > >> > > > > > -- Best wishes！ CalvinKirs
