Re: New committer: Christopher Tubbs

2021-02-11 Thread Christopher
Thank you. I'm honored by the invitation, and hope to be of some value to the Thrift project going forward. On Thu, Feb 11, 2021 at 5:54 PM Jens Geyer wrote: > > The Project Management Committee (PMC) for Apache Thrift has invited > Christopher Tubbs to become a committer and we are pleased to a

New committer: Christopher Tubbs

2021-02-11 Thread Jens Geyer
The Project Management Committee (PMC) for Apache Thrift has invited Christopher Tubbs to become a committer and we are pleased to announce that he has accepted. The Apache Thrift PMC

[SECURITY] CVE-2020-13949 Announcement

2021-02-11 Thread Jens Geyer
CVE-2020-13949: potential DoS when processing untrusted Thrift payloads Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Thrift up to and including 0.13.0 Description: Applications using Thrift would not error upon receiving messages declaring containers of

Apache Thrift 0.14.0 Release

2021-02-11 Thread Jens Geyer
Hi folks, Apache Thrift 0.14.0 has been released. Some of the mirror sites are still being updated, that may take some hours to complete. Meanwhile, in the unlikely case that you can't find any working mirror, you can download source tarballs and a statically linked windows thrift executable

Re: voting terminology

2021-02-11 Thread Christopher
When I say "binding votes" isn't a thing, I just mean it's more helpful to think of "vote" as the thing (noun) and "binding" and "non-binding" as qualifiers (adjectives), rather than thinking of "binding vote" and "non-binding vote" as compound nouns. It's more useful to think of them as noun claus

voting terminology

2021-02-11 Thread Jens Geyer
Well, we definitely have "binding votes" as a term. So is there a better name for it? Other votes? Unbinding? Less binding? Theoretically binding? Community feedback? *confused* -Ursprüngliche Nachricht- From: Christopher Sent: Wednesday, February 10, 2021 9:34 PM To: dev@thrift.

Re: [VOTE][RESULT] Apache Thrift 0.14.0-rc0 release candidate

2021-02-11 Thread Jens Geyer
Hi, yes, that's why I looked it up in the first place. I read it all twice and at least the first section is very clear (and using a "MUST") about it: Each PMC MUST obey the ASF requirements on approving any release. For a release vote to pass, a minimum of three positive votes and more posi