Re: [CVE-2019-17564] Apache Dubbo deserialization vulnerability

2020-02-20 Thread Jun Liu
Hi, Sorry the typo, the vulnerability was reported by Dor Tumarkin from the Chekmarx Team. Thank Dor again for the vulnerability report. Jun > On Feb 11, 2020, at 4:10 PM, Dor Tumarkin wrote: > > Hi Jun, > Thank you for the update! > Can you correct the typo in company name and credit the

[ANN] Welcome a new committer Zouyx

2020-02-20 Thread stocks alex
Hi, Community, On behalf of the Dubbo PMC, I am pleased to announce that zouyx[1] has been voted in as a new Dubbo committer. Please join me to say congratulations to him! Zouyx, would you please briefly introduce yourself to the community? 1. https://github.com/zouyx Yours, Alex.

Re: [ANN] Welcome a new committer Zouyx

2020-02-20 Thread tianying pan
Welcome ! stocks alex 于2020年2月21日周五 上午11:01写道: > Hi, Community, > > On behalf of the Dubbo PMC, I am pleased to announce that zouyx[1] has been > voted in as a new Dubbo committer. > > Please join me to say congratulations to him! > > Zouyx, would you please briefly introduce yourself to the com

Re: [ANN] Welcome a new committer Zouyx

2020-02-20 Thread xinming he
Congratulations! tianying pan 于2020年2月21日周五 上午11:12写道: > Welcome ! > > stocks alex 于2020年2月21日周五 上午11:01写道: > > > Hi, Community, > > > > On behalf of the Dubbo PMC, I am pleased to announce that zouyx[1] has > been > > voted in as a new Dubbo committer. > > > > Please join me to say congratulat

[VOTE] Release Apache Dubbo 2.6.8 RC1

2020-02-20 Thread Jun Liu
Hello Dubbo Community, This is a call for vote to release Apache Dubbo version 2.6.8. The release candidates: https://dist.apache.org/repos/dist/dev/dubbo/dubbo/2.6.8/ Git tag for the release: https://github.com/apache/dubbo/tree/dubbo-2.6.8 Hash for the release tag: ff14005475dc2e6e1e8c5081abb

Re:Re: [ANN] Welcome a new committer Zouyx

2020-02-20 Thread KimmKing
Congratulations, zouyx. 在 2020-02-21 11:37:06,"xinming he" 写道: >Congratulations! > >tianying pan 于2020年2月21日周五 上午11:12写道: > >> Welcome ! >> >> stocks alex 于2020年2月21日周五 上午11:01写道: >> >> > Hi, Community, >> > >> > On behalf of the Dubbo PMC, I am pleased to announce that zouyx[1] has >> been >>

Re: [VOTE] Release Apache Dubbo 2.6.8 RC1

2020-02-20 Thread Justin Mclean
Hi, -1 for still using incubating in the source directory (full name is apache-dubbo-incubating-2.6.8-source-release) and other places. The NOTICE file still say "Apache Dubbo (incubating)” and the README.md still refers to the project as an incubating project, as does the distribution pom.xml