+1
On 12/16/21, 10:42 AM, "Vincent Daburon" <[email protected]> wrote:
+1 for the release 5.4.2 with log4j_2.16.jar
Regards.
Vincent DAB.
Le mer. 15 déc. 2021 à 19:24, Milamber <[email protected]> a écrit :
> Hello,
>
> The first release candidate for JMeter 5.4.2 (f393453287) has been
> prepared, and your votes are solicited.
>
> This release is only a vulnerabily fix release about the CVE-2021-44228:
> Apache Log4j2 JNDI features do not protect against attacker controlled
> LDAP and other JNDI related endpoints.
>
> Please, test this release candidate (with load tests and/or functional
> tests) using Java 8+ on Linux/Windows/macOS, especially on the changes.
> Feedback is very welcome within the next 72 hours.
>
> You can read the New and Noteworthy section with some screenshots to
> illustrate improvements and full list of changes at:
> https://apache.github.io/jmeter-site-preview/site/changes.html
>
> JMeter is a Java desktop application designed to load test functional
> behavior and measure performance. The current version targets Java 8+
>
> Download - Archives/hashes/sigs:
> https://dist.apache.org/repos/dist/dev/jmeter/apache-jmeter-5.4.2-rc1
> (dist revision 51472)
>
> RAT report:
> https://apache.github.io/jmeter-site-preview/rat/
>
> SHA512 hashes of archives for this vote: see footnote [1]
>
> Site preview is here:
> https://apache.github.io/jmeter-site-preview/site/
>
> JavaDoc API preview is here:
> https://apache.github.io/jmeter-site-preview/site/api/
>
> Maven staging repository is accessible here:
>
>
https://repository.apache.org/content/repositories/orgapachejmeter-1073/org/apache/jmeter/
>
> Tag:
>
>
https://gitbox.apache.org/repos/asf?p=jmeter.git;a=tag;h=refs/tags/v5.4.2-rc1
>
>
> Keys are here:
> https://www.apache.org/dist/jmeter/KEYS
>
> N.B.
> To create the distribution and test JMeter: "./gradlew build -Prelease
> -PskipSign".
>
> JMeter 5.4.2 requires Java 8 or later to run.
>
> The artifacts were built with
> Java(TM) SE Runtime Environment Oracle Corporation (build
1.8.0_271-b09)
> Java HotSpot(TM) 64-Bit Server VM Oracle Corporation (build
> 25.271-b09, mixed mode)
>
> Some known issues and incompatible changes are listed on changes page.
>
>
https://apache.github.io/jmeter-site-preview/site/changes.html#Known%20problems%20and%20workarounds
>
>
> All feedback and vote are welcome.
>
> [ ] +1 I support this release
> [ ] +0 I am OK with this release
> [ ] -0 OK, but....
> [ ] -1 I do not support this release (please indicate why)
>
> The vote will remain open for at least 72 hours.
>
> The PMC members please indicate the mention "(binding)" with your vote.
>
>
> Note: If the vote passes, the intention is to release the archive files
> and rename the RC tag as the release tag.
>
> Thanks in advance!
>
> Milamber
>
> ===
> [1] SHA512 hashes of archives for this vote:
>
>
>
5eaf0ad4ef8941080c0cf1d7fb732c6d14e3d16ac900885b912a62bea24210adcc9c9a09cb0f028f0253e3f6f785800aec2f3dda92121d0259dcda09223a0de1
> *apache-jmeter-5.4.2.tgz
>
>
968e2b8c6b8ea393ae83d021c67adf36657a561b37e577ca499bc73becc3a4fd49989069d94fdc2d26f23fd223b3c769426a39d5a928502f16f3a2889955bbdc
> *apache-jmeter-5.4.2.zip
>
>
98c75f3151990d94951dc46051d8382a60766455344528ea021638913ee9731a60534ba53167723255aa03e41f6621f5be4a2eb36692b42642dc8e406bf2bb4b
> *apache-jmeter-5.4.2_src.tgz
>
>
8443ee884e06d121201aaeb47e623da5a5f4a3054cf030c3cce454d700dc13cc676f3d3e44279afd1463f40382551ad42e8faae1388f6617f543a354282bab08
> *apache-jmeter-5.4.2_src.zip
>
>
>
>
>
