I asked before about getting a CVE for the issue I raised that was fixed, and about a security advisory. I don’t recall seeing a response.
Can that please be done as well? I don’t know what the internal Apache process is for getting CVEs, but there’s got to be one. From: Mukul Gandhi [mailto:[email protected]] Sent: Sunday, April 29, 2018 11:45 PM To: [email protected]; [email protected]; [email protected] Subject: [EXTERNAL] [VOTE RESULTS]: Xerces-J 2.12.0 release Hi all, The vote to release Xerces-J 2.12.0 resulted in 3 +1 votes (all from PMC members) and no other votes: +1 by: Gareth Reakes (PMC) Michael Glavassevich (PMC) Mukul Gandhi (PMC) The release should be up on the mirror sites very soon. On Mon, Apr 23, 2018 at 5:36 PM, Mukul Gandhi <[email protected]<mailto:[email protected]>> wrote: Hi all, The 1st voting for Xerces-J 2.12.0 release was stopped, due to certain issues that were in the release candidates (RC) that were found by the reviewers ([5]). Those have been fixed now, and I'm initiating this new mail for the Vote for new RC. I've uploaded Xerces-J 2.12.0 release candidates (the revised one) to [1] for review. In this release candidate there are two sets of packages, the main release built from the trunk [2] and the XML Schema 1.1 release built from the XML Schema 1.1 development branch [3]. The change summary is available here [4] in JIRA. 81 issues (plus issues that were mentioned, during the review of 1st RC) were resolved. Test results have been looking good, so I'd like to call an official vote now on the release. To start, here's my +1. Great work everyone. [1] https://dist.apache.org/repos/dist/dev/xerces/j/2.12.0/ Revision 26468 [2] http://svn.apache.org/viewvc/xerces/java/tags/Xerces-J_2_12_0/ Directory revision: 1829687 (of 1829689) [3] http://svn.apache.org/viewvc/xerces/java/tags/Xerces-J_2_12_0-xml-schema-1.1/ Directory revision: 1829688 (of 1829689) [4] https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10520&version=12336542 [5] https://markmail.org/message/54obpdyqrn6nfzgi : discussion about previous RC, suggesting a revote [6] Deleting .md5 hash files from the RC distribution at, https://dist.apache.org/repos/dist/dev/xerces/j/2.12.0/. Mentioned Revision number in point [1] above. (suggestions from sebb, [email protected]<mailto:[email protected]> during this voting) -- Regards, Mukul Gandhi
