Re: [VOTE] Release httpd-2.4.46

2020-08-08 Thread Alex Hautequest
I don’t see why a verbiage similar to “Fixed in Apache httpd-2.4.44 (not released to the public)” couldn’t be used: this is, after all, a true statement. While it should be common understanding that newer code versions carry improvements and fixes from previous ones, maybe this should be

Re: [VOTE] Release httpd-2.4.46

2020-08-08 Thread Daniel Ruggeri
Hi, Bill;    I wondered about this myself. I agree that we allow for ambiguity when we say an issue is fixed in 2.4.44 and 2.4.45 (which weren't released). Perhaps we should just bump the 'fixed' version up to the released version... but then we should also add to the 'affected' versions the

Re: [VOTE] Release httpd-2.4.46

2020-08-07 Thread William A Rowe Jr
Following the announcement link, it isn't clear that https://httpd.apache.org/security/vulnerabilities_24.html fixes issues in 2.4.46. Should the fixed-in be promoted to the revision of Apache HTTP Server actually published (released) by the project? It almost reads like "fixed in 2.4.46-dev"

Re: [VOTE] Release httpd-2.4.46

2020-08-05 Thread Daniel Ruggeri
Hi, all;    With 12 binding PMC +1 votes, two additional +1 votes from the community, and no -1 votes, I'm pleased to report that the vote has PASSED to release 2.4.46. I will begin the process of pushing to the distribution mirrors which should enable us for a Friday announcement - a great way

Re: [VOTE] Release httpd-2.4.46

2020-08-04 Thread William A Rowe Jr
On Sat, Aug 1, 2020 at 9:13 AM Daniel Ruggeri wrote: > Hi, all; >Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ Just as a footnote to 2.4.46, as mentioned before mod_lua won't compile against the

Re: [VOTE] Release httpd-2.4.46

2020-08-04 Thread William A Rowe Jr
On Sat, Aug 1, 2020 at 9:13 AM Daniel Ruggeri wrote: > Hi, all; >Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release this > candidate tarball

Re: [VOTE] Release httpd-2.4.46

2020-08-04 Thread Joe Orton
On Tue, Aug 04, 2020 at 01:48:08PM +0200, Rainer Jung wrote: > GDB info (sporadic) Solaris shutdown crashes during OpenSSL shutdown in > mod_watchdog: Awesome level of testing as usual, thanks Rainer! I see similar crashes with mod_watchdog active for 2.4 prefork. I think the trigger is also

Re: [VOTE] Release httpd-2.4.46

2020-08-04 Thread Rainer Jung
Am 01.08.2020 um 16:13 schrieb Daniel Ruggeri: Hi, all;    Third time is a charm! Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball as 2.4.46: [X] +1:

Re: [VOTE] Release httpd-2.4.46

2020-08-04 Thread Mario Brandt
[x] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. Debian 10 build.

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Gregg Smith
On 8/1/2020 7:13 AM, Daniel Ruggeri wrote: Hi, all;    Third time is a charm! Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball as 2.4.46: [ ] +1:

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Daniel Ruggeri
For my own +1... tested under the following versions: system:   kernel:     name: Linux     release: 4.19.0-10-amd64     version: #1 SMP Debian 4.19.132-1 (2020-07-24)     machine: x86_64   libraries:     openssl: "1.1.1g"     openldap: "2.4.50"     apr: "1.7.0"     apr-util: "1.6.1"     iconv:

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Giovanni Bechis
On 8/1/20 4:13 PM, Daniel Ruggeri wrote: > Hi, all; >    Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release this > candidate tarball as 2.4.46: >

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Eric Covener
On Sat, Aug 1, 2020 at 10:14 AM Daniel Ruggeri wrote: > > Hi, all; >Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release this > candidate

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Yann Ylavic
On Sat, Aug 1, 2020 at 4:14 PM Daniel Ruggeri wrote: > > I would like to call a VOTE over the next few days to release this > candidate tarball as 2.4.46: [X] +1: It's not just good, it's good enough! All good in my testing, thanks Daniel for RMing.

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread jean-frederic clere
On 01/08/2020 16:13, Daniel Ruggeri wrote: [X] +1: It's not just good, it's good enough! Passed on fedroa32 x86_64. -- Cheers Jean-Frederic

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Joe Orton
On Sat, Aug 01, 2020 at 09:13:29AM -0500, Daniel Ruggeri wrote: > Hi, all; >    Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release this >

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Luca Toscano
On Sat, Aug 1, 2020 at 4:14 PM Daniel Ruggeri wrote: > > Hi, all; >Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release this > candidate tarball

Re: [VOTE] Release httpd-2.4.46

2020-08-03 Thread Noel Butler
On 02/08/2020 00:13, Daniel Ruggeri wrote: > Hi, all; > Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release this > candidate tarball as 2.4.46: >

Re: [VOTE] Release httpd-2.4.46

2020-08-02 Thread Steffen Land
WIN32 APR 1.7.0 APR-UTIL 1.6.1 with Analyses Warning C6386 \apr\time\win32\timestr.c 189 Buffer overrun while writing to 'new_format': the writable size is 'max+11' bytes, but 'j' bytes might be written. Warning C26451 \apr\time\win32\time.c 239 Arithmetic overflow: Using

Re: [VOTE] Release httpd-2.4.46

2020-08-01 Thread Christophe JAILLET
Le 01/08/2020 à 16:13, Daniel Ruggeri a écrit : Hi, all;    Third time is a charm! Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball as 2.4.46: [X]

Re: [VOTE] Release httpd-2.4.46

2020-08-01 Thread Steffen
Date in announcement is still : September 21, 2018 > Op 1 aug. 2020 om 16:13 heeft Daniel Ruggeri het > volgende geschreven: > > Hi, all; >Third time is a charm! Please find below the proposed release tarball > and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ > > I would

[VOTE] Release httpd-2.4.46

2020-08-01 Thread Daniel Ruggeri
Hi, all;    Third time is a charm! Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball as 2.4.46: [ ] +1: It's not just good, it's good enough! [ ] +0: