Am 29.09.26 um 14:45 schrieb Eric Covener:
Hi all,
Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/
I would like to call a VOTE over the next few days to release
this candidate tarball httpd-2.4.69-rc1 as 2.4.69:
[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.
+1 for release and thanks for RM and especially the very intense work on
security to everyone involved!
- Sigs and hashes OK
- contents of tarballs identical
- contents of tag and tarballs identical
except for expected deltas
Built on
- SLES 12+15 (64 Bits)
- RHEL 7+8+9+10 (64 Bits)
- Solaris 10 Sparc
For Solaris only a single variant was build and tested.
For all Linux platforms built
- with default (shared) modules
- with module set reallyall
- using --enable-load-all-modules
- using libraries
- APR/APU
- bundled deps tarball
- 1.7.6/1.6.5
- 1.7.x(HEAD=r1936982)/1.6.x(HEAD=r1937534)
- 1.7.x(HEAD=r1936982)/1.7.x(HEAD=r1937534) with expat
- 1.7.x(HEAD=r1936982)/1.7.x(HEAD=r1937534) with libxml2
- 1.8.x(HEAD=r1936982)/1.7.x(HEAD=r1937534) with expat
- 1.8.x(HEAD=r1936982)/1.7.x(HEAD=r1937534) with libxml2
- OpenSSL 4.0.3-1 3.6.5-1 3.5.9-1,
For OpenSSL 4 only bundled APR/APU without APU crypto
- expat 2.8.5
- pcre 10.49
- lua 5.5.1 (compiled with LUA_COMPAT_MODULE)
- libxml2 2.15.4
- sqlite 3.53.4
- libnghttp2 1.70.0
- brotli 1.2.0
- curl 8.22.0, using
- nghttp3 1.18.0
- ngtcp2 1.25.0
- c-ares 1.34.8
- libpsl 0.23.3
- jansson 2.15.1
- libldap 2.7.1
- in total 15 builds per platform
- builds against APR trunk currently fail with various errrors. I will
investigate; not critical
- Tool chain:
- platform gcc on Linux, gcc 9.5 on Solaris 10
- CFLAGS: -O2 -g -Wall -fno-strict-aliasing
All builds succeeded.
- compiler warnings: see below "A)"
Perl tests run with OpenSSL client versions 3.6.0, 3.5.0, 3.0.15, 1.1.1w
and 1.0.2u (for RHEL 10 with 3.6.0 3.5.4 3.0.18 1.1.1w) against every
server build. MPMs tested event, worker, prefork.
- 941 out of planned 1350 test runs done
- no test failures until now
- pytest have not yet run; i need to adjust my automation to the
changes there
Regards,
Rainer
A) Compiler warnings
::::::::::::::::::::
- compiler warnings httpd sources:
- all builds (I use recent libxml2)
modules/filters/mod_xml2enc.c:616:5: warning: 'xmlAddEncodingAlias' is
deprecated: See
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html
[-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:318:5: warning: 'htmlTagLookup' is
deprecated: See
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html
[-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:365:5: warning: 'htmlTagLookup' is
deprecated: See
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html
[-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:403:5: warning: 'attrs_req' is
deprecated [-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:404:9: warning: 'attrs_req' is
deprecated [-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:411:17: warning: 'htmlAttrAllowed' is
deprecated: See
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html
[-Wdeprecated-declarations]
- when compiled against OpenSSL 4; might be fixed in upstream mod_md
modules/md/md_crypt.c:1259:5: warning: 'X509_cmp_current_time' is
deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
modules/md/md_crypt.c:1260:13: warning: 'X509_cmp_current_time' is
deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
modules/md/md_crypt.c:1265:5: warning: 'X509_cmp_current_time' is
deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
modules/md/md_crypt.c:1326:24: warning: initialization discards 'const'
qualifier from pointer target type [-Wdiscarded-qualifiers]
