You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Christophe JAILLET <ch...@wanadoo.fr> on 2021/05/25 17:58:55 UTC
[RESULT - PASS] Release httpd-2.4.48
Hi all,
With 8 binding PMC +1 votes, 5 additional +1 votes from the community,
and no -1 votes, I'm pleased to report that the vote has PASSED to
release 2.4.48.
The process of pushing to the distribution mirrors is one the way. I
should make the announcement in the coming days.
Here are the votes I have recorded during the thread:
(apologies if I missed someone)
PMC:
dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal,
ylavic
Community and committers:
Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe),
Ivan Zhakov (ivan)
The systems that have been tested on include:
CentOS 6, 7, 8
Debian
Fedora 34
RHEL 6, 7, 8
Slackware 14.0, 14.2 and 15 beta
SLES 11, 12, 15
Solaris 10 (Sparc)
Ubuntu 21.04
Windows (x86 and x64)
Thanks to all of you for your time and cycles for testing on all these
different platforms and configurations.
Christophe JAILLET
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Stefan Eissing <st...@greenbytes.de>.
\o/
Thanks for doing this release, Christophe!
> Am 25.05.2021 um 19:58 schrieb Christophe JAILLET <ch...@wanadoo.fr>:
>
> Hi all,
>
> With 8 binding PMC +1 votes, 5 additional +1 votes from the community, and no -1 votes, I'm pleased to report that the vote has PASSED to release 2.4.48.
>
> The process of pushing to the distribution mirrors is one the way. I should make the announcement in the coming days.
>
>
>
> Here are the votes I have recorded during the thread:
> (apologies if I missed someone)
> PMC:
> dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal,
> ylavic
>
> Community and committers:
> Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe),
> Ivan Zhakov (ivan)
>
>
> The systems that have been tested on include:
> CentOS 6, 7, 8
> Debian
> Fedora 34
> RHEL 6, 7, 8
> Slackware 14.0, 14.2 and 15 beta
> SLES 11, 12, 15
> Solaris 10 (Sparc)
> Ubuntu 21.04
> Windows (x86 and x64)
>
>
> Thanks to all of you for your time and cycles for testing on all these different platforms and configurations.
>
> Christophe JAILLET
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by William A Rowe Jr <wr...@rowe-clan.net>.
This always happens, remember you must send announcement.*@a.o mail
from an @a.o address. Which is extra confusing if you haven't set up
the SMTP validation yet.
On Tue, Jun 1, 2021 at 4:07 PM Christophe JAILLET
<ch...@wanadoo.fr> wrote:
>
> Le 01/06/2021 à 03:07, William A Rowe Jr a écrit :
> > Christophe, thanks for your energetic efforts to kick off the next release!
> >
> > I looked for the post but couldn't find it, the community is confused.
> > Is this release pulled for regressions? It hasn't been communicated
> > well, but the release is sitting on every mirror, since 6 to 24 hours
> > after you placed it on dist.
> >
> > Inquiring minds would like to know, you seem to confirm this release in
> > this specific post, so it appears that it has happened, even if adopting
> > it is unwise.
> >
>
> Hi,
>
> 2.4.48 is live now.
>
> However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not
> have reached their destination yet.
> Maybe a moderation issue on the lists.
>
> As you can see, there is also some security related fixes. There are
> listed at [1].
>
> I still need to figure out a few things with our new CVE management
> mechanism. So our vulnerability listing ([2]) with some more details is
> not updated yet. I hope to be able to update it in the coming days.
>
> Most CVE fixed in this release are rated from moderate to low impact.
> Only one, CVE-2021-31618 is rated as important and could be exploited
> for some DoS.
>
> Christophe JAILLET
>
>
> [1]: https://downloads.apache.org/httpd/CHANGES_2.4.48
> [2]: https://httpd.apache.org/security/vulnerabilities_24.html
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Stefan Eissing <st...@greenbytes.de>.
> Am 02.06.2021 um 09:14 schrieb Ruediger Pluem <rp...@apache.org>:
>
>
>
> On 6/2/21 1:02 AM, Yann Ylavic wrote:
>> On Tue, Jun 1, 2021 at 11:07 PM Christophe JAILLET
>> <ch...@wanadoo.fr> wrote:
>>>
>>> 2.4.48 is live now.
>>>
>>> However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not
>>> have reached their destination yet.
>>> Maybe a moderation issue on the lists.
>>
>> I can see it on announce@a.o, not announce@httpd.a.o so far.
>>
>>>
>>> [2]: https://httpd.apache.org/security/vulnerabilities_24.html
>>
>> This one also looks not up to date still.
>>
>>
>> Thanks Christophe for RMing, nice work!
>
> Thank you very much also from my side and for your proposals and work to improve the release process.
+1
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Ruediger Pluem <rp...@apache.org>.
On 6/2/21 1:02 AM, Yann Ylavic wrote:
> On Tue, Jun 1, 2021 at 11:07 PM Christophe JAILLET
> <ch...@wanadoo.fr> wrote:
>>
>> 2.4.48 is live now.
>>
>> However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not
>> have reached their destination yet.
>> Maybe a moderation issue on the lists.
>
> I can see it on announce@a.o, not announce@httpd.a.o so far.
>
>>
>> [2]: https://httpd.apache.org/security/vulnerabilities_24.html
>
> This one also looks not up to date still.
>
>
> Thanks Christophe for RMing, nice work!
Thank you very much also from my side and for your proposals and work to improve the release process.
Regards
Rüdiger
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Yann Ylavic <yl...@gmail.com>.
On Tue, Jun 1, 2021 at 11:07 PM Christophe JAILLET
<ch...@wanadoo.fr> wrote:
>
> 2.4.48 is live now.
>
> However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not
> have reached their destination yet.
> Maybe a moderation issue on the lists.
I can see it on announce@a.o, not announce@httpd.a.o so far.
>
> [2]: https://httpd.apache.org/security/vulnerabilities_24.html
This one also looks not up to date still.
Thanks Christophe for RMing, nice work!
Regards;
Yann.
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Christophe JAILLET <ch...@wanadoo.fr>.
Le 01/06/2021 à 03:07, William A Rowe Jr a écrit :
> Christophe, thanks for your energetic efforts to kick off the next release!
>
> I looked for the post but couldn't find it, the community is confused.
> Is this release pulled for regressions? It hasn't been communicated
> well, but the release is sitting on every mirror, since 6 to 24 hours
> after you placed it on dist.
>
> Inquiring minds would like to know, you seem to confirm this release in
> this specific post, so it appears that it has happened, even if adopting
> it is unwise.
>
Hi,
2.4.48 is live now.
However, the mails sent on annouce@a.o and annouce@httpd.a.o seem to not
have reached their destination yet.
Maybe a moderation issue on the lists.
As you can see, there is also some security related fixes. There are
listed at [1].
I still need to figure out a few things with our new CVE management
mechanism. So our vulnerability listing ([2]) with some more details is
not updated yet. I hope to be able to update it in the coming days.
Most CVE fixed in this release are rated from moderate to low impact.
Only one, CVE-2021-31618 is rated as important and could be exploited
for some DoS.
Christophe JAILLET
[1]: https://downloads.apache.org/httpd/CHANGES_2.4.48
[2]: https://httpd.apache.org/security/vulnerabilities_24.html
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by William A Rowe Jr <wr...@rowe-clan.net>.
Christophe, thanks for your energetic efforts to kick off the next release!
I looked for the post but couldn't find it, the community is confused. Is
this release pulled for regressions? It hasn't been communicated well, but
the release is sitting on every mirror, since 6 to 24 hours after you
placed it on dist.
Inquiring minds would like to know, you seem to confirm this release in
this specific post, so it appears that it has happened, even if adopting it
is unwise.
On Tue, May 25, 2021 at 12:59 PM Christophe JAILLET <
christophe.jaillet@wanadoo.fr> wrote:
> Hi all,
>
> With 8 binding PMC +1 votes, 5 additional +1 votes from the community,
> and no -1 votes, I'm pleased to report that the vote has PASSED to
> release 2.4.48.
>
> The process of pushing to the distribution mirrors is one the way. I
> should make the announcement in the coming days.
>
>
>
> Here are the votes I have recorded during the thread:
> (apologies if I missed someone)
> PMC:
> dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal,
> ylavic
>
> Community and committers:
> Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe),
> Ivan Zhakov (ivan)
>
>
> The systems that have been tested on include:
> CentOS 6, 7, 8
> Debian
> Fedora 34
> RHEL 6, 7, 8
> Slackware 14.0, 14.2 and 15 beta
> SLES 11, 12, 15
> Solaris 10 (Sparc)
> Ubuntu 21.04
> Windows (x86 and x64)
>
>
> Thanks to all of you for your time and cycles for testing on all these
> different platforms and configurations.
>
> Christophe JAILLET
>
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Ruediger Pluem <rp...@apache.org>.
On 5/27/21 8:51 AM, Ruediger Pluem wrote:
>
>
> On 5/27/21 7:15 AM, Mladen Turk wrote:
>> Should have vote -1
>> Patch
>> http://svn.apache.org/viewvc?rev=1889037&view=rev
>> breaks Windows
>
> Backport revision to 2.4.x is r1889039. Do you have more details on how this breaks e.g. error messages?
Just saw that you already started the technical discussion in another thread. So the question is moot.
Regards
Rüdiger
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Ruediger Pluem <rp...@apache.org>.
On 5/27/21 7:15 AM, Mladen Turk wrote:
> Should have vote -1
> Patch
> http://svn.apache.org/viewvc?rev=1889037&view=rev
> breaks Windows
Backport revision to 2.4.x is r1889039. Do you have more details on how this breaks e.g. error messages?
Regards
Rüdiger
Re: [RESULT - PASS] Release httpd-2.4.48
Posted by Mladen Turk <mt...@apache.org>.
Should have vote -1
Patch
http://svn.apache.org/viewvc?rev=1889037&view=rev
breaks Windows
On 25/05/2021 19:58, Christophe JAILLET wrote:
> Hi all,
>
> With 8 binding PMC +1 votes, 5 additional +1 votes from the community,
> and no -1 votes, I'm pleased to report that the vote has PASSED to
> release 2.4.48.
>
> The process of pushing to the distribution mirrors is one the way. I
> should make the announcement in the coming days.
>
>
>
> Here are the votes I have recorded during the thread:
> (apologies if I missed someone)
> PMC:
> dferradal, jfclere, gbechis, jailletc36, jorton, rjung, steffenal,
> ylavic
>
> Community and committers:
> Noel Butler, Jan Ehrhardt, Cory McIntire, William A Rowe Jr (wrowe),
> Ivan Zhakov (ivan)
>
>
> The systems that have been tested on include:
> CentOS 6, 7, 8
> Debian
> Fedora 34
> RHEL 6, 7, 8
> Slackware 14.0, 14.2 and 15 beta
> SLES 11, 12, 15
> Solaris 10 (Sparc)
> Ubuntu 21.04
> Windows (x86 and x64)
>
>
> Thanks to all of you for your time and cycles for testing on all these
> different platforms and configurations.
>
> Christophe JAILLET
--
^TM