My vote: +1 (binding)
On 23/12/2021 18:10, Milamber wrote:
Hello,
The first release candidate for JMeter 5.4.3 (b01f761463) has been
prepared, and your votes are solicited.
This release is only a vulnerabily fix release about the
CVE-2021-45105: Apache Log4j2 versions 2.0-alpha1 through 2.16.0
(excluding 2.12.3) did not protect from uncontrolled recursion from
self-referential lookups. This allows an attacker with control over
Thread Context Map data to cause a denial of service when a crafted
string is interpreted.
Please, test this release candidate (with load tests and/or functional
tests) using Java 8+ on Linux/Windows/macOS, especially on the changes.
Feedback is very welcome within the next *24 hours*
You can read the New and Noteworthy section with some screenshots to
illustrate improvements and full list of changes at:
https://apache.github.io/jmeter-site-preview/site/changes.html
JMeter is a Java desktop application designed to load test functional
behavior and measure performance. The current version targets Java 8+
Download - Archives/hashes/sigs:
https://dist.apache.org/repos/dist/dev/jmeter/apache-jmeter-5.4.3-rc1
(dist revision 51735)
RAT report:
https://apache.github.io/jmeter-site-preview/rat/
SHA512 hashes of archives for this vote: see footnote [1]
Site preview is here:
https://apache.github.io/jmeter-site-preview/site/
JavaDoc API preview is here:
https://apache.github.io/jmeter-site-preview/site/api/
Maven staging repository is accessible here:
https://repository.apache.org/content/repositories/orgapachejmeter-1075/org/apache/jmeter/
Tag:
https://gitbox.apache.org/repos/asf?p=jmeter.git;a=tag;h=refs/tags/v5.4.3-rc1
Keys are here:
https://www.apache.org/dist/jmeter/KEYS
N.B.
To create the distribution and test JMeter: "./gradlew build -Prelease
-PskipSign".
JMeter 5.4.3 requires Java 8 or later to run.
The artifacts were built with
Java(TM) SE Runtime Environment Oracle Corporation (build
1.8.0_271-b09)
Java HotSpot(TM) 64-Bit Server VM Oracle Corporation (build
25.271-b09, mixed mode)
Some known issues and incompatible changes are listed on changes page.
https://apache.github.io/jmeter-site-preview/site/changes.html#Known%20problems%20and%20workarounds
All feedback and vote are welcome.
[ ] +1 I support this release
[ ] +0 I am OK with this release
[ ] -0 OK, but....
[ ] -1 I do not support this release (please indicate why)
The vote will remain open for 24 hours only (reason security release)
The PMC members please indicate the mention "(binding)" with your vote.
Note: If the vote passes, the intention is to release the archive files
and rename the RC tag as the release tag.
Thanks in advance!
Milamber
===
[1] SHA512 hashes of archives for this vote:
e88802cc0dfcd6a2c8554911ae4574d7cfafcc8c6be6ade810b4677b7351831b0680d81cf2b0fb5bb4b9b3cf437528a044d7da74214a1bee351b273dbb53e439
*apache-jmeter-5.4.3.tgz
1ebc2a179d724aa58ff8b8f1c2146204208aeeeb8ba2b53168d6700be2d516a204b7e65dd94a6a0e3b84906fd33a97fcf2f2e6e44fb9b8fafa017c0c1856e1d8
*apache-jmeter-5.4.3.zip
f7d19c486aad40a2313ab1fdde845dc5362000fbe25cb8f2236fcc684df7fe36970931d190a8be14ddb56dff36f4a96477b2c70420fdd0db62fe855d4c458c81
*apache-jmeter-5.4.3_src.tgz
8cd5c0e0c16015773d7fb49380d7d41d36412cbd785cfe393871df4fa409bfb3f8191d80c42e3f9b94fe43cec6b87cfaa7bc36c6063bdf167d8e076e5f45274b
*apache-jmeter-5.4.3_src.zip
