Yes probably good idea, i will close the vote ASAP
On 16/12/2021 13:45, Philippe Mouawad wrote:
Hello Milamber,
Do you think we really need to wait 72h ?
Since all active members have voted, I think we should release ASAP just to
avoid all the noise regarding this CVE.
Thanks
Regards
On Thursday, December 16, 2021, Antonio Gomes Rodrigues <[email protected]>
wrote:
+1
Le jeu. 16 déc. 2021 à 09:40, OUFDOU Anas <[email protected]> a écrit
:
Hello,
[x] +1 I support this release
On Wed, Dec 15, 2021 at 9:41 PM Felix Schumacher <
[email protected]> wrote:
Am 15.12.21 um 19:23 schrieb Milamber:
Hello,
The first release candidate for JMeter 5.4.2 (f393453287) has been
prepared, and your votes are solicited.
This release is only a vulnerabily fix release about the
CVE-2021-44228: Apache Log4j2 JNDI features do not protect against
attacker controlled LDAP and other JNDI related endpoints.
Please, test this release candidate (with load tests and/or
functional
tests) using Java 8+ on Linux/Windows/macOS, especially on the
changes.
Feedback is very welcome within the next 72 hours.
You can read the New and Noteworthy section with some screenshots to
illustrate improvements and full list of changes at:
https://apache.github.io/jmeter-site-preview/site/changes.html
JMeter is a Java desktop application designed to load test functional
behavior and measure performance. The current version targets Java 8+
Download - Archives/hashes/sigs:
https://dist.apache.org/repos/dist/dev/jmeter/apache-jmeter-
5.4.2-rc1
(dist revision 51472)
RAT report:
https://apache.github.io/jmeter-site-preview/rat/
SHA512 hashes of archives for this vote: see footnote [1]
Site preview is here:
https://apache.github.io/jmeter-site-preview/site/
JavaDoc API preview is here:
https://apache.github.io/jmeter-site-preview/site/api/
Maven staging repository is accessible here:
https://repository.apache.org/content/repositories/
orgapachejmeter-1073/org/apache/jmeter/
Tag:
https://gitbox.apache.org/repos/asf?p=jmeter.git;a=tag;
h=refs/tags/v5.4.2-rc1
Keys are here:
https://www.apache.org/dist/jmeter/KEYS
N.B.
To create the distribution and test JMeter: "./gradlew build
-Prelease
-PskipSign".
JMeter 5.4.2 requires Java 8 or later to run.
The artifacts were built with
Java(TM) SE Runtime Environment Oracle Corporation (build
1.8.0_271-b09)
Java HotSpot(TM) 64-Bit Server VM Oracle Corporation (build
25.271-b09, mixed mode)
Some known issues and incompatible changes are listed on changes
page.
https://apache.github.io/jmeter-site-preview/site/
changes.html#Known%20problems%20and%20workarounds
All feedback and vote are welcome.
[x] +1 I support this release
[ ] +0 I am OK with this release
[ ] -0 OK, but....
[ ] -1 I do not support this release (please indicate why)
The vote will remain open for at least 72 hours.
The PMC members please indicate the mention "(binding)" with your
vote.
Thanks Milamber for the release work.
Felix (binding)
Note: If the vote passes, the intention is to release the archive
files
and rename the RC tag as the release tag.
Thanks in advance!
Milamber
===
[1] SHA512 hashes of archives for this vote:
5eaf0ad4ef8941080c0cf1d7fb732c6d14e3d16ac900885b912a62bea242
10adcc9c9a09cb0f028f0253e3f6f785800aec2f3dda92121d0259dcda09223a0de1
*apache-jmeter-5.4.2.tgz
968e2b8c6b8ea393ae83d021c67adf36657a561b37e577ca499bc73becc3
a4fd49989069d94fdc2d26f23fd223b3c769426a39d5a928502f16f3a2889955bbdc
*apache-jmeter-5.4.2.zip
98c75f3151990d94951dc46051d8382a60766455344528ea021638913ee9
731a60534ba53167723255aa03e41f6621f5be4a2eb36692b42642dc8e406bf2bb4b
*apache-jmeter-5.4.2_src.tgz
8443ee884e06d121201aaeb47e623da5a5f4a3054cf030c3cce454d700dc
13cc676f3d3e44279afd1463f40382551ad42e8faae1388f6617f543a354282bab08
*apache-jmeter-5.4.2_src.zip
--
Cordialement,
-------------
Anas OUFDOU
