Re: [RESULT - PASS] Release httpd-2.4.48
> Am 02.06.2021 um 09:14 schrieb Ruediger Pluem : > > > > On 6/2/21 1:02 AM, Yann Ylavic wrote: >> On Tue, Jun 1, 2021 at 11:07 PM Christophe JAILLET >> wrote: >>> >>> 2.4.48 is live now. >>> >>> However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not >>> have reached their destination yet. >>> Maybe a moderation issue on the lists. >> >> I can see it on announce@a.o, not announce@httpd.a.o so far. >> >>> >>> [2]: https://httpd.apache.org/security/vulnerabilities_24.html >> >> This one also looks not up to date still. >> >> >> Thanks Christophe for RMing, nice work! > > Thank you very much also from my side and for your proposals and work to > improve the release process. +1
Re: [RESULT - PASS] Release httpd-2.4.48
On 6/2/21 1:02 AM, Yann Ylavic wrote: > On Tue, Jun 1, 2021 at 11:07 PM Christophe JAILLET > wrote: >> >> 2.4.48 is live now. >> >> However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not >> have reached their destination yet. >> Maybe a moderation issue on the lists. > > I can see it on announce@a.o, not announce@httpd.a.o so far. > >> >> [2]: https://httpd.apache.org/security/vulnerabilities_24.html > > This one also looks not up to date still. > > > Thanks Christophe for RMing, nice work! Thank you very much also from my side and for your proposals and work to improve the release process. Regards Rüdiger
Re: [RESULT - PASS] Release httpd-2.4.48
On Tue, Jun 1, 2021 at 11:07 PM Christophe JAILLET wrote: > > 2.4.48 is live now. > > However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not > have reached their destination yet. > Maybe a moderation issue on the lists. I can see it on announce@a.o, not announce@httpd.a.o so far. > > [2]: https://httpd.apache.org/security/vulnerabilities_24.html This one also looks not up to date still. Thanks Christophe for RMing, nice work! Regards; Yann.
Re: [RESULT - PASS] Release httpd-2.4.48
This always happens, remember you must send announcement.*@a.o mail from an @a.o address. Which is extra confusing if you haven't set up the SMTP validation yet. On Tue, Jun 1, 2021 at 4:07 PM Christophe JAILLET wrote: > > Le 01/06/2021 à 03:07, William A Rowe Jr a écrit : > > Christophe, thanks for your energetic efforts to kick off the next release! > > > > I looked for the post but couldn't find it, the community is confused. > > Is this release pulled for regressions? It hasn't been communicated > > well, but the release is sitting on every mirror, since 6 to 24 hours > > after you placed it on dist. > > > > Inquiring minds would like to know, you seem to confirm this release in > > this specific post, so it appears that it has happened, even if adopting > > it is unwise. > > > > Hi, > > 2.4.48 is live now. > > However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not > have reached their destination yet. > Maybe a moderation issue on the lists. > > As you can see, there is also some security related fixes. There are > listed at [1]. > > I still need to figure out a few things with our new CVE management > mechanism. So our vulnerability listing ([2]) with some more details is > not updated yet. I hope to be able to update it in the coming days. > > Most CVE fixed in this release are rated from moderate to low impact. > Only one, CVE-2021-31618 is rated as important and could be exploited > for some DoS. > > Christophe JAILLET > > > [1]: https://downloads.apache.org/httpd/CHANGES_2.4.48 > [2]: https://httpd.apache.org/security/vulnerabilities_24.html
Re: [RESULT - PASS] Release httpd-2.4.48
Le 01/06/2021 à 03:07, William A Rowe Jr a écrit : Christophe, thanks for your energetic efforts to kick off the next release! I looked for the post but couldn't find it, the community is confused. Is this release pulled for regressions? It hasn't been communicated well, but the release is sitting on every mirror, since 6 to 24 hours after you placed it on dist. Inquiring minds would like to know, you seem to confirm this release in this specific post, so it appears that it has happened, even if adopting it is unwise. Hi, 2.4.48 is live now. However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not have reached their destination yet. Maybe a moderation issue on the lists. As you can see, there is also some security related fixes. There are listed at [1]. I still need to figure out a few things with our new CVE management mechanism. So our vulnerability listing ([2]) with some more details is not updated yet. I hope to be able to update it in the coming days. Most CVE fixed in this release are rated from moderate to low impact. Only one, CVE-2021-31618 is rated as important and could be exploited for some DoS. Christophe JAILLET [1]: https://downloads.apache.org/httpd/CHANGES_2.4.48 [2]: https://httpd.apache.org/security/vulnerabilities_24.html
Re: [RESULT - PASS] Release httpd-2.4.48
Christophe, thanks for your energetic efforts to kick off the next release! I looked for the post but couldn't find it, the community is confused. Is this release pulled for regressions? It hasn't been communicated well, but the release is sitting on every mirror, since 6 to 24 hours after you placed it on dist. Inquiring minds would like to know, you seem to confirm this release in this specific post, so it appears that it has happened, even if adopting it is unwise. On Tue, May 25, 2021 at 12:59 PM Christophe JAILLET < christophe.jail...@wanadoo.fr> wrote: > Hi all, > > With 8 binding PMC +1 votes, 5 additional +1 votes from the community, > and no -1 votes, I'm pleased to report that the vote has PASSED to > release 2.4.48. > > The process of pushing to the distribution mirrors is one the way. I > should make the announcement in the coming days. > > > > Here are the votes I have recorded during the thread: > (apologies if I missed someone) > PMC: > dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal, > ylavic > > Community and committers: > Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe), > Ivan Zhakov (ivan) > > > The systems that have been tested on include: > CentOS 6, 7, 8 > Debian > Fedora 34 > RHEL 6, 7, 8 > Slackware 14.0, 14.2 and 15 beta > SLES 11, 12, 15 > Solaris 10 (Sparc) > Ubuntu 21.04 > Windows (x86 and x64) > > > Thanks to all of you for your time and cycles for testing on all these > different platforms and configurations. > > Christophe JAILLET >
Re: [RESULT - PASS] Release httpd-2.4.48
On 5/27/21 8:51 AM, Ruediger Pluem wrote: > > > On 5/27/21 7:15 AM, Mladen Turk wrote: >> Should have vote -1 >> Patch >> http://svn.apache.org/viewvc?rev=1889037&view=rev >> breaks Windows > > Backport revision to 2.4.x is r1889039. Do you have more details on how this > breaks e.g. error messages? Just saw that you already started the technical discussion in another thread. So the question is moot. Regards Rüdiger
Re: [RESULT - PASS] Release httpd-2.4.48
On 5/27/21 7:15 AM, Mladen Turk wrote: > Should have vote -1 > Patch > http://svn.apache.org/viewvc?rev=1889037&view=rev > breaks Windows Backport revision to 2.4.x is r1889039. Do you have more details on how this breaks e.g. error messages? Regards Rüdiger
Re: [RESULT - PASS] Release httpd-2.4.48
Should have vote -1 Patch http://svn.apache.org/viewvc?rev=1889037&view=rev breaks Windows On 25/05/2021 19:58, Christophe JAILLET wrote: Hi all, With 8 binding PMC +1 votes, 5 additional +1 votes from the community, and no -1 votes, I'm pleased to report that the vote has PASSED to release 2.4.48. The process of pushing to the distribution mirrors is one the way. I should make the announcement in the coming days. Here are the votes I have recorded during the thread: (apologies if I missed someone) PMC: dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal, ylavic Community and committers: Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe), Ivan Zhakov (ivan) The systems that have been tested on include: CentOS 6, 7, 8 Debian Fedora 34 RHEL 6, 7, 8 Slackware 14.0, 14.2 and 15 beta SLES 11, 12, 15 Solaris 10 (Sparc) Ubuntu 21.04 Windows (x86 and x64) Thanks to all of you for your time and cycles for testing on all these different platforms and configurations. Christophe JAILLET -- ^TM
Re: [RESULT - PASS] Release httpd-2.4.48
\o/ Thanks for doing this release, Christophe! > Am 25.05.2021 um 19:58 schrieb Christophe JAILLET > : > > Hi all, > > With 8 binding PMC +1 votes, 5 additional +1 votes from the community, and no > -1 votes, I'm pleased to report that the vote has PASSED to release 2.4.48. > > The process of pushing to the distribution mirrors is one the way. I should > make the announcement in the coming days. > > > > Here are the votes I have recorded during the thread: > (apologies if I missed someone) > PMC: >dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal, >ylavic > > Community and committers: >Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe), >Ivan Zhakov (ivan) > > > The systems that have been tested on include: >CentOS 6, 7, 8 >Debian >Fedora 34 >RHEL 6, 7, 8 >Slackware 14.0, 14.2 and 15 beta >SLES 11, 12, 15 >Solaris 10 (Sparc) >Ubuntu 21.04 >Windows (x86 and x64) > > > Thanks to all of you for your time and cycles for testing on all these > different platforms and configurations. > > Christophe JAILLET
[RESULT - PASS] Release httpd-2.4.48
Hi all, With 8 binding PMC +1 votes, 5 additional +1 votes from the community, and no -1 votes, I'm pleased to report that the vote has PASSED to release 2.4.48. The process of pushing to the distribution mirrors is one the way. I should make the announcement in the coming days. Here are the votes I have recorded during the thread: (apologies if I missed someone) PMC: dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal, ylavic Community and committers: Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe), Ivan Zhakov (ivan) The systems that have been tested on include: CentOS 6, 7, 8 Debian Fedora 34 RHEL 6, 7, 8 Slackware 14.0, 14.2 and 15 beta SLES 11, 12, 15 Solaris 10 (Sparc) Ubuntu 21.04 Windows (x86 and x64) Thanks to all of you for your time and cycles for testing on all these different platforms and configurations. Christophe JAILLET