Re: [VOTE] Release httpd-2.4.54-rc1 as httpd-2.4.54
Re: [VOTE] Release httpd-2.4.54-rc1 as httpd-2.4.54
> Am 04.06.2022 um 11:23 schrieb SteffenAL : > > -1 > > Does not build : > > Error C2018 C:\VC16\Win32\httpd-2.4\server\core_filters.c > 638 unknown character '0x40' Hmm, 0x40 would be ‘@‘ and on line 638 there is none. Could you find out more what the offending code piece is? Thanks, Stefan > > > > On Friday 03/06/2022 at 16:57, Stefan Eissing wrote: >> Hi all, >> >> Please find below the proposed release tarball and signatures: >> >> https://dist.apache.org/repos/dist/dev/httpd/ >> >> I would like to call a VOTE over the next few days (at least >> up to and including Monday) to release this candidate tarball >> httpd-2.4.54-rc1 as 2.4.54: >> [ ] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> >> The computed digests of the tarball up for vote are: >> sha256: 06d4b6f769afb2f80e5b5857be3411a8f13368de01ffe952ccd918309bc49a69 >> *httpd-2.4.54-rc1.tar.gz >> sha512: >> 32c00a09562323e030a459313545f1242244f2f7cad2c07006930c9b9e65b79ab267ca321ee24b826d1d9c0caaed2078fac9793ed380a6176bc7b3fe92fe2b37 >> *httpd-2.4.54-rc1.tar.gz >> >> The SVN candidate source is found at tags/2.4.54-rc1-candidate. >> >> Kind Regards, >> Stefan > >
Re: [VOTE] Release httpd-2.4.54-rc1 as httpd-2.4.54
-1 Does not build : Error C2018 C:\VC16\Win32\httpd-2.4\server\core_filters.c 638 unknown character '0x40' On Friday 03/06/2022 at 16:57, Stefan Eissing wrote: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days (at least up to and including Monday) to release this candidate tarball httpd-2.4.54-rc1 as 2.4.54: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 06d4b6f769afb2f80e5b5857be3411a8f13368de01ffe952ccd918309bc49a69 *httpd-2.4.54-rc1.tar.gz sha512: 32c00a09562323e030a459313545f1242244f2f7cad2c07006930c9b9e65b79ab267ca321ee24b826d1d9c0caaed2078fac9793ed380a6176bc7b3fe92fe2b37 *httpd-2.4.54-rc1.tar.gz The SVN candidate source is found at tags/2.4.54-rc1-candidate. Kind Regards, Stefan
[VOTE] Release httpd-2.4.54-rc1 as httpd-2.4.54
Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days (at least up to and including Monday) to release this candidate tarball httpd-2.4.54-rc1 as 2.4.54: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 06d4b6f769afb2f80e5b5857be3411a8f13368de01ffe952ccd918309bc49a69 *httpd-2.4.54-rc1.tar.gz sha512: 32c00a09562323e030a459313545f1242244f2f7cad2c07006930c9b9e65b79ab267ca321ee24b826d1d9c0caaed2078fac9793ed380a6176bc7b3fe92fe2b37 *httpd-2.4.54-rc1.tar.gz The SVN candidate source is found at tags/2.4.54-rc1-candidate. Kind Regards, Stefan
intention to tag a release
Hi, I intend to tag a 2.4.x release candidate later today. It seems everything is prepped, our CI is green and it has been about 3 months since the last release. If you see any reason we should wait, please speak up! Kind Regards, Stefan
Re: release anyone?
Am 25.05.2022 um 14:15 schrieb Stefan Eissing: Anyone feeling release vibes in the air? it's been a good 2.5 months and some things have accumulated. Maybe the start of June would be a good target? +1 and thanks! Rainer
Re: release anyone?
On 5/25/22 2:15 PM, Stefan Eissing wrote: > Anyone feeling release vibes in the air? > > it's been a good 2.5 months and some things have accumulated. > Maybe the start of June would be a good target? +1 Regards Rüdiger
Re: release anyone?
On Wed, May 25, 2022 at 2:15 PM Stefan Eissing wrote: > > Anyone feeling release vibes in the air? +1 thanks for proposing!
Re: release anyone?
+1 ty! On Wed, May 25, 2022, 8:15 AM Stefan Eissing wrote: > Anyone feeling release vibes in the air? > > it's been a good 2.5 months and some things have accumulated. > Maybe the start of June would be a good target? > > Kind Regards, > Stefan >
release anyone?
Anyone feeling release vibes in the air? it's been a good 2.5 months and some things have accumulated. Maybe the start of June would be a good target? Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
This Release whenever you want, my 30 years in this game shows most networks, > including mine, are not going to touch it on a weekend anyway, so monday or > tuesday before it hits test beds - assuming there is a real need to upgrade > in the first place (high CVE etc), and later in the week before it hits > productions boxes - and no errors (since has been made clear by some that > non PMC/comitters opinions aren't wanted, after over 10 years I no longer > test rc's on our OS's) > > so by all means release as often as you like when you like, admins will > likely ignore it anyway :) > >
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
Release whenever you want, my 30 years in this game shows most networks, including mine, are not going to touch it on a weekend anyway, so monday or tuesday before it hits test beds - assuming there is a real need to upgrade in the first place (high CVE etc), and later in the week before it hits productions boxes - and no errors (since has been made clear by some that non PMC/comitters opinions aren't wanted, after over 10 years I no longer test rc's on our OS's) so by all means release as often as you like when you like, admins will likely ignore it anyway :) On 11/03/2022 22:14, Stefan Eissing wrote: While the 72 hours have not all passed yet, the votes so far are positive. Given that no -1 vote will come, I call for a vote on the release time: [ ] +1: release it later today, it needs to get out! [ ] +0: do not really care [ ] -1: better do it Monday, Admins have a life, too, you know?
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On 3/11/22 6:00 PM, Stefan Eissing wrote: > Thank you all! With 7 +1 votes and no other, I announce rc2 has passed. > > I will do the release of 2.4.53 on Monday. > > Kind Regards and a nice weekend to you all, You too and thanks for RM'ing. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
Thank you all! With 7 +1 votes and no other, I announce rc2 has passed. I will do the release of 2.4.53 on Monday. Kind Regards and a nice weekend to you all, Stefan > Am 09.03.2022 um 17:19 schrieb Stefan Eissing : > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 > *httpd-2.4.53-rc2.tar.gz > sha512: > 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 > *httpd-2.4.53-rc2.tar.gz > > The SVN candidate source is found at tags/2.4.53-rc2-candidate. > > Kind Regards, > Stefan
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On Wed, Mar 9, 2022 at 11:19 AM Stefan Eissing wrote: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. +1 AIX/xlc/ppc64
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On 11/03/2022 13.14, Stefan Eissing wrote: While the 72 hours have not all passed yet, the votes so far are positive. 72 hours is a guideline, not a hard rule. If you wanna do it in 48 or 24, that's fine as long as there's a valid reason. Given that no -1 vote will come, I call for a vote on the release time: [ ] +1: release it later today, it needs to get out! [ ] +0: do not really care [ ] -1: better do it Monday, Admins have a life, too, you know? Am 09.03.2022 um 17:19 schrieb Stefan Eissing : Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc2 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 *httpd-2.4.53-rc2.tar.gz sha512: 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 *httpd-2.4.53-rc2.tar.gz The SVN candidate source is found at tags/2.4.53-rc2-candidate. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On 3/11/22 1:14 PM, Stefan Eissing wrote: > While the 72 hours have not all passed yet, the votes so far are positive. > > Given that no -1 vote will come, I call for a vote on the release time: > > [ ] +1: release it later today, it needs to get out! > [ ] +0: do not really care > [ ] -1: better do it Monday, Admins have a life, too, you know? I would be in favor of doing it on Monday, but if others see a need for today I would be fine with this as well. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
While the 72 hours have not all passed yet, the votes so far are positive. Given that no -1 vote will come, I call for a vote on the release time: [ ] +1: release it later today, it needs to get out! [ ] +0: do not really care [ ] -1: better do it Monday, Admins have a life, too, you know? > Am 09.03.2022 um 17:19 schrieb Stefan Eissing : > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 > *httpd-2.4.53-rc2.tar.gz > sha512: > 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 > *httpd-2.4.53-rc2.tar.gz > > The SVN candidate source is found at tags/2.4.53-rc2-candidate. > > Kind Regards, > Stefan
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
+1 Windows On Wednesday 09/03/2022 at 17:19, Stefan Eissing wrote: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc2 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 *httpd-2.4.53-rc2.tar.gz sha512: 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 *httpd-2.4.53-rc2.tar.gz The SVN candidate source is found at tags/2.4.53-rc2-candidate. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On Wed, Mar 09, 2022 at 05:19:22PM +0100, Stefan Eissing wrote: > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 > *httpd-2.4.53-rc2.tar.gz > sha512: > 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 > *httpd-2.4.53-rc2.tar.gz > > The SVN candidate source is found at tags/2.4.53-rc2-candidate. > +1 from me, works on OpenBSD 7.0, 7.1-beta and Fedora 35. Thanks Giovanni signature.asc Description: PGP signature
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
> On Mar 9, 2022, at 11:19 AM, Stefan Eissing wrote: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [X] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > macOS 12.2.1 / Xcode 13.2.1 Ubuntu 20.04LTS
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On Wed, Mar 9, 2022 at 5:20 PM Stefan Eissing wrote: > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: [X] +1: It's not just good, it's good enough! All good on Debian 10, 11 & 12. Thanks Stefan for RMing, now we know that rc++ mechanism works too ;)
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
> Am 09.03.2022 um 17:19 schrieb Stefan Eissing : > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 > *httpd-2.4.53-rc2.tar.gz > sha512: > 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 > *httpd-2.4.53-rc2.tar.gz > > The SVN candidate source is found at tags/2.4.53-rc2-candidate. +1 on 21.3.0 Darwin Kernel, macOS 12.2.1 (Intel)
Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
On Wed, Mar 09, 2022 at 05:19:22PM +0100, Stefan Eissing wrote: > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc2 as 2.4.53: > [X] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 > *httpd-2.4.53-rc2.tar.gz > sha512: > 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 > *httpd-2.4.53-rc2.tar.gz > > The SVN candidate source is found at tags/2.4.53-rc2-candidate. +1 from me, test suite passes on Fedora 35, RHEL8+"9ish". Thanks again. Regards, Joe
[VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53
Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc2 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7a045e8e653aaf931f9667f3a7e1943bd81306bf908f316465f737a854d10c16 *httpd-2.4.53-rc2.tar.gz sha512: 2fa1918aa44eb9984c0a294f416102088ed6874213391acd8c434b062603eb2a9ec64f7b1a218d4fe283d74fc9956650297d0b4dda57dcd8533b075a7321ec78 *httpd-2.4.53-rc2.tar.gz The SVN candidate source is found at tags/2.4.53-rc2-candidate. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On Wed, Mar 9, 2022 at 2:45 PM Stefan Eissing wrote: > > > Am 09.03.2022 um 14:25 schrieb Yann Ylavic : > > > > On Tue, Mar 8, 2022 at 6:22 PM Rainer Jung wrote: > >> > >> - configure for APR in the dependency tarball still fails for me due to > >> a bug in autoconf 2.71 used to create the configure script. That problem > >> was already reported by me during another release vote. I replaced the > >> changed three files in the bundled apr and apr-util with the earlier ones. > > > > Does this depend on the RM's autoconf version? > > If so, Stefan could you downgrade to autoconf 2.69 on your system? I > > just did that on mine with: > > $ apt install autoconf=2.69-1 > > > > Sorry, I don't have a better idea.. > > I downgraded my autoconf from 2.71 to 2.69. Can I make some check before > or will we just see the outcome of the rc2? (which is easy to make) Looks like it did it: $ tar xf httpd-2.4.53-rc2-deps.tar.bz2 $ head httpd-2.4.53/srclib/apr/configure #! /bin/sh # Guess values for system-dependent variables and create Makefiles. # Generated by GNU Autoconf 2.69. ... $ head httpd-2.4.53/srclib/apr-util/configure #! /bin/sh # Guess values for system-dependent variables and create Makefiles. # Generated by GNU Autoconf 2.69. Thanks!
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On Wed, Mar 9, 2022 at 3:21 PM Jim Jagielski wrote: > > I've found make extraclean works a bit better Ah yes great hint, it avoids removing the configure files manually. Thanks!
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
> On Mar 9, 2022, at 8:58 AM, Yann Ylavic wrote: > > On Wed, Mar 9, 2022 at 2:45 PM Stefan Eissing <mailto:ste...@eissing.org>> wrote: >> >>> Am 09.03.2022 um 14:25 schrieb Yann Ylavic : >>> >>> On Tue, Mar 8, 2022 at 6:22 PM Rainer Jung wrote: >>>> >>>> - configure for APR in the dependency tarball still fails for me due to >>>> a bug in autoconf 2.71 used to create the configure script. That problem >>>> was already reported by me during another release vote. I replaced the >>>> changed three files in the bundled apr and apr-util with the earlier ones. >>> >>> Does this depend on the RM's autoconf version? >>> If so, Stefan could you downgrade to autoconf 2.69 on your system? I >>> just did that on mine with: >>> $ apt install autoconf=2.69-1 >>> >>> Sorry, I don't have a better idea.. >> >> I downgraded my autoconf from 2.71 to 2.69. Can I make some check before >> or will we just see the outcome of the rc2? (which is easy to make) > > Thanks, I think a clean build on your local 2.4.x should do it: > $ cd 2.4.x > $ make distclean > $ rm `find . -name configure` > $ ./builconf > $ ./config.nice > $ make depend && make > I've found make extraclean works a bit better
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
> Am 09.03.2022 um 15:07 schrieb Stefan Eissing : > > > >> Am 09.03.2022 um 15:05 schrieb Ruediger Pluem : >> >> >> >> On 3/9/22 2:46 PM, Stefan Eissing wrote: >>> Are we ready for an rc2 for 2.4.53? >> >> With r1898786 I would say yes. > > Thanks everyone, will do. Everything prepped. Waiting for the green traffic light and then will mail the new vote call. - Stefan
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
> Am 09.03.2022 um 15:05 schrieb Ruediger Pluem : > > > > On 3/9/22 2:46 PM, Stefan Eissing wrote: >> Are we ready for an rc2 for 2.4.53? > > With r1898786 I would say yes. Thanks everyone, will do. > > Regards > > Rüdiger >
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On 3/9/22 2:46 PM, Stefan Eissing wrote: > Are we ready for an rc2 for 2.4.53? With r1898786 I would say yes. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On Wed, Mar 9, 2022 at 2:45 PM Stefan Eissing wrote: > > > Am 09.03.2022 um 14:25 schrieb Yann Ylavic : > > > > On Tue, Mar 8, 2022 at 6:22 PM Rainer Jung wrote: > >> > >> - configure for APR in the dependency tarball still fails for me due to > >> a bug in autoconf 2.71 used to create the configure script. That problem > >> was already reported by me during another release vote. I replaced the > >> changed three files in the bundled apr and apr-util with the earlier ones. > > > > Does this depend on the RM's autoconf version? > > If so, Stefan could you downgrade to autoconf 2.69 on your system? I > > just did that on mine with: > > $ apt install autoconf=2.69-1 > > > > Sorry, I don't have a better idea.. > > I downgraded my autoconf from 2.71 to 2.69. Can I make some check before > or will we just see the outcome of the rc2? (which is easy to make) Thanks, I think a clean build on your local 2.4.x should do it: $ cd 2.4.x $ make distclean $ rm `find . -name configure` $ ./builconf $ ./config.nice $ make depend && make or something like that.
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Are we ready for an rc2 for 2.4.53? > Am 09.03.2022 um 14:44 schrieb Stefan Eissing : > > > >> Am 09.03.2022 um 14:25 schrieb Yann Ylavic : >> >> On Tue, Mar 8, 2022 at 6:22 PM Rainer Jung wrote: >>> >>> - configure for APR in the dependency tarball still fails for me due to >>> a bug in autoconf 2.71 used to create the configure script. That problem >>> was already reported by me during another release vote. I replaced the >>> changed three files in the bundled apr and apr-util with the earlier ones. >> >> Does this depend on the RM's autoconf version? >> If so, Stefan could you downgrade to autoconf 2.69 on your system? I >> just did that on mine with: >> $ apt install autoconf=2.69-1 >> >> Sorry, I don't have a better idea.. > > I downgraded my autoconf from 2.71 to 2.69. Can I make some check before > or will we just see the outcome of the rc2? (which is easy to make) > > - Stefan
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
> Am 09.03.2022 um 14:25 schrieb Yann Ylavic : > > On Tue, Mar 8, 2022 at 6:22 PM Rainer Jung wrote: >> >> - configure for APR in the dependency tarball still fails for me due to >> a bug in autoconf 2.71 used to create the configure script. That problem >> was already reported by me during another release vote. I replaced the >> changed three files in the bundled apr and apr-util with the earlier ones. > > Does this depend on the RM's autoconf version? > If so, Stefan could you downgrade to autoconf 2.69 on your system? I > just did that on mine with: > $ apt install autoconf=2.69-1 > > Sorry, I don't have a better idea.. I downgraded my autoconf from 2.71 to 2.69. Can I make some check before or will we just see the outcome of the rc2? (which is easy to make) - Stefan
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On Tue, Mar 8, 2022 at 6:22 PM Rainer Jung wrote: > > - configure for APR in the dependency tarball still fails for me due to > a bug in autoconf 2.71 used to create the configure script. That problem > was already reported by me during another release vote. I replaced the > changed three files in the bundled apr and apr-util with the earlier ones. Does this depend on the RM's autoconf version? If so, Stefan could you downgrade to autoconf 2.69 on your system? I just did that on mine with: $ apt install autoconf=2.69-1 Sorry, I don't have a better idea..
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Am 09.03.2022 um 13:58 schrieb Ruediger Pluem: On 3/9/22 11:34 AM, Rainer Jung wrote: Am 09.03.2022 um 08:37 schrieb Ruediger Pluem: On 3/8/22 10:09 PM, Rainer Jung wrote: You gcc 4.8 workaround for _Thread_local still looks good. Solaris builds and all unit tests not yet done but compiles fine for all my Linuxes. Thanks! Thanks for testing. I committed to trunk as r1898771 to throw it into our CI. If we need to tweak it further we can do later. BTW: Once we have a final patch the same needs to be done for APR trunk and APR 1.8.x. Interesting: I did also compile APR trunk in my httpd release preparations but didn't observe the failure. This probably was due to the fact, that our APR trunk configure does not decide to add -std=gnu11, so the test in the header file doesn't result in _Thread_local being used. Of course it still makes sense to apply the same patch (and also to other APR branches containing the thread local code). Just wondering, whether the different handling of the"std" compiler flag for httpd and apr trunk is intentional. Weird. I don't see -std=gnu11 added at all to my httpd build on RedHat 8. gcc --version gcc (GCC) 8.5.0 20210514 (Red Hat 8.5.0-4) autoconf --version autoconf (GNU Autoconf) 2.69 But I have tested the patch and get AP_THREAD_LOCAL set to _Thread_local as it should. Good. Concerning RHEL 8: I see the flag there neither due to: RHEl7 : checking for gcc -specs=/shared/build/autobuild/specs/specs.rhel7 option to enable C11 features... -std=gnu11 RHEL 8: checking for gcc -specs=/shared/build/autobuild/specs/specs.rhel8 option to enable C11 features... none needed The check for C11 was introduced in autoconf 2.70 as a new feature of "AC_PROG_CC", which we have in configure.in for httpd and for APR. The observed behavioral difference between httpd configure and (my) APR trunk configure is due to the fact, that I generated my APR trunk configure with autoconf 2.69, so the check does not run there. But it would, once configure would be regenerated with modern autoconf. So indeed the thread local detection fix should go in APR as well. Thanks and regards, Rainer
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On 3/9/22 11:34 AM, Rainer Jung wrote: > Am 09.03.2022 um 08:37 schrieb Ruediger Pluem: >> >> >> On 3/8/22 10:09 PM, Rainer Jung wrote: >>> >> >>> >>> You gcc 4.8 workaround for _Thread_local still looks good. >>> >>> Solaris builds and all unit tests not yet done but compiles fine for all my >>> Linuxes. >>> >>> Thanks! >> >> Thanks for testing. I committed to trunk as r1898771 to throw it into our >> CI. If we need to tweak it further we can do later. >> >> BTW: Once we have a final patch the same needs to be done for APR trunk and >> APR 1.8.x. > > Interesting: I did also compile APR trunk in my httpd release preparations > but didn't observe the failure. This probably was due > to the fact, that our APR trunk configure does not decide to add -std=gnu11, > so the test in the header file doesn't result in > _Thread_local being used. > > Of course it still makes sense to apply the same patch (and also to other APR > branches containing the thread local code). Just > wondering, whether the different handling of the"std" compiler flag for httpd > and apr trunk is intentional. > Weird. I don't see -std=gnu11 added at all to my httpd build on RedHat 8. gcc --version gcc (GCC) 8.5.0 20210514 (Red Hat 8.5.0-4) autoconf --version autoconf (GNU Autoconf) 2.69 But I have tested the patch and get AP_THREAD_LOCAL set to _Thread_local as it should. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Am 09.03.2022 um 08:37 schrieb Ruediger Pluem: On 3/8/22 10:09 PM, Rainer Jung wrote: You gcc 4.8 workaround for _Thread_local still looks good. Solaris builds and all unit tests not yet done but compiles fine for all my Linuxes. Thanks! Thanks for testing. I committed to trunk as r1898771 to throw it into our CI. If we need to tweak it further we can do later. BTW: Once we have a final patch the same needs to be done for APR trunk and APR 1.8.x. Interesting: I did also compile APR trunk in my httpd release preparations but didn't observe the failure. This probably was due to the fact, that our APR trunk configure does not decide to add -std=gnu11, so the test in the header file doesn't result in _Thread_local being used. Of course it still makes sense to apply the same patch (and also to other APR branches containing the thread local code). Just wondering, whether the different handling of the"std" compiler flag for httpd and apr trunk is intentional. Best regards, Rainer
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
CANCELLED. Due to errors/warnings found during your tests, I cancel the vote on rc1. Thanks for giving us these feedbacks! I'll put up the rc2 vote as soon as we're ready. Thanks, Stefan > Am 09.03.2022 um 08:50 schrieb Ruediger Pluem : > > > > On 3/8/22 10:09 PM, Rainer Jung wrote: >> > >>> >>> Two additional things I already saw, but which are non.critical: >>> >>> - configure flag --with-pcre no longer accepts an external pcre 8 >>> installation directory. It seems in that case the flag must >>> now point to the path of the pcre-config script instead. > > Hmm. This could break existing configure calls. Probably not good for a patch > release. Thanks for pointing out. > > Regards > > Rüdiger >
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On 3/8/22 10:09 PM, Rainer Jung wrote: > >> >> Two additional things I already saw, but which are non.critical: >> >> - configure flag --with-pcre no longer accepts an external pcre 8 >> installation directory. It seems in that case the flag must >> now point to the path of the pcre-config script instead. Hmm. This could break existing configure calls. Probably not good for a patch release. Thanks for pointing out. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On 3/8/22 10:09 PM, Rainer Jung wrote: > > > You gcc 4.8 workaround for _Thread_local still looks good. > > Solaris builds and all unit tests not yet done but compiles fine for all my > Linuxes. > > Thanks! Thanks for testing. I committed to trunk as r1898771 to throw it into our CI. If we need to tweak it further we can do later. BTW: Once we have a final patch the same needs to be done for APR trunk and APR 1.8.x. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Am 08.03.2022 um 18:22 schrieb Rainer Jung: Am 08.03.2022 um 17:06 schrieb Ruediger Pluem: On 3/8/22 4:38 PM, Rainer Jung wrote: Am 08.03.2022 um 16:33 schrieb Rainer Jung: Am 07.03.2022 um 16:55 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc1 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 *httpd-2.4.53-rc1.tar.gz sha512: a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 *httpd-2.4.53-rc1.tar.gz The SVN candidate source is found at tags/2.4.53-rc1-candidate. Kind Regards, Stefan Not a vote yet, just an observation: on SLES12 (gcc 4.8.3, glibc 2.19) and RHEL7 (gcc 4.8.2, glibc 2.19) with platform compilers, configure detects it wants to set -std=gnu11. During make I get a compilation error: server/util.c:3183:1: error: unknown type name ‘_Thread_local’ The type "_Thread_local" comes from include/httpd.h: 2438 #if defined(__cplusplus) && __cplusplus >= 201103L 2439 #define AP_THREAD_LOCAL thread_local 2440 #elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 2441 #define AP_THREAD_LOCAL _Thread_local 2442 #elif defined(__GNUC__) /* works for clang too */ 2443 #define AP_THREAD_LOCAL __thread 2444 #elif defined(WIN32) && defined(_MSC_VER) 2445 #define AP_THREAD_LOCAL __declspec(thread) 2446 #endif 2447 #endif /* ndef AP_NO_THREAD_LOCAL */ It looks like the detection is broken? See also: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203066 Thanks for the pointer. Does the below fix it? Index: include/httpd.h === --- include/httpd.h (revision 1898730) +++ include/httpd.h (working copy) @@ -2587,7 +2587,9 @@ */ #if defined(__cplusplus) && __cplusplus >= 201103L #define AP_THREAD_LOCAL thread_local -#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 +#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 && \ + (!defined(__GNUC__) || \ + __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 9)) #define AP_THREAD_LOCAL _Thread_local #elif defined(__GNUC__) /* works for clang too */ #define AP_THREAD_LOCAL __thread Regards Rüdiger Looks good to me from inspection. I already tested a similar but not as good patch. The next builds will pick up your one. Will report back in an hour or so, whether it works for me. Two additional things I already saw, but which are non.critical: - configure flag --with-pcre no longer accepts an external pcre 8 installation directory. It seems in that case the flag must now point to the path of the pcre-config script instead. - configure for APR in the dependency tarball still fails for me due to a bug in autoconf 2.71 used to create the configure script. That problem was already reported by me during another release vote. I replaced the changed three files in the bundled apr and apr-util with the earlier ones. Thanks and regards, Rainer You gcc 4.8 workaround for _Thread_local still looks good. Solaris builds and all unit tests not yet done but compiles fine for all my Linuxes. Thanks! Rainer
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Am 08.03.2022 um 17:06 schrieb Ruediger Pluem: On 3/8/22 4:38 PM, Rainer Jung wrote: Am 08.03.2022 um 16:33 schrieb Rainer Jung: Am 07.03.2022 um 16:55 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc1 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 *httpd-2.4.53-rc1.tar.gz sha512: a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 *httpd-2.4.53-rc1.tar.gz The SVN candidate source is found at tags/2.4.53-rc1-candidate. Kind Regards, Stefan Not a vote yet, just an observation: on SLES12 (gcc 4.8.3, glibc 2.19) and RHEL7 (gcc 4.8.2, glibc 2.19) with platform compilers, configure detects it wants to set -std=gnu11. During make I get a compilation error: server/util.c:3183:1: error: unknown type name ‘_Thread_local’ The type "_Thread_local" comes from include/httpd.h: 2438 #if defined(__cplusplus) && __cplusplus >= 201103L 2439 #define AP_THREAD_LOCAL thread_local 2440 #elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 2441 #define AP_THREAD_LOCAL _Thread_local 2442 #elif defined(__GNUC__) /* works for clang too */ 2443 #define AP_THREAD_LOCAL __thread 2444 #elif defined(WIN32) && defined(_MSC_VER) 2445 #define AP_THREAD_LOCAL __declspec(thread) 2446 #endif 2447 #endif /* ndef AP_NO_THREAD_LOCAL */ It looks like the detection is broken? See also: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203066 Thanks for the pointer. Does the below fix it? Index: include/httpd.h === --- include/httpd.h (revision 1898730) +++ include/httpd.h (working copy) @@ -2587,7 +2587,9 @@ */ #if defined(__cplusplus) && __cplusplus >= 201103L #define AP_THREAD_LOCAL thread_local -#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 +#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 && \ + (!defined(__GNUC__) || \ + __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 9)) #define AP_THREAD_LOCAL _Thread_local #elif defined(__GNUC__) /* works for clang too */ #define AP_THREAD_LOCAL __thread Regards Rüdiger Looks good to me from inspection. I already tested a similar but not as good patch. The next builds will pick up your one. Will report back in an hour or so, whether it works for me. Two additional things I already saw, but which are non.critical: - configure flag --with-pcre no longer accepts an external pcre 8 installation directory. It seems in that case the flag must now point to the path of the pcre-config script instead. - configure for APR in the dependency tarball still fails for me due to a bug in autoconf 2.71 used to create the configure script. That problem was already reported by me during another release vote. I replaced the changed three files in the bundled apr and apr-util with the earlier ones. Thanks and regards, Rainer
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On 3/8/22 4:38 PM, Rainer Jung wrote: > Am 08.03.2022 um 16:33 schrieb Rainer Jung: >> >> Am 07.03.2022 um 16:55 schrieb Stefan Eissing: >>> Hi all, >>> >>> Please find below the proposed release tarball and signatures: >>> >>> https://dist.apache.org/repos/dist/dev/httpd/ >>> >>> I would like to call a VOTE over the next few days to release >>> this candidate tarball httpd-2.4.53-rc1 as 2.4.53: >>> [ ] +1: It's not just good, it's good enough! >>> [ ] +0: Let's have a talk. >>> [ ] -1: There's trouble in paradise. Here's what's wrong. >>> >>> The computed digests of the tarball up for vote are: >>> sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 >>> *httpd-2.4.53-rc1.tar.gz >>> sha512: >>> a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 >>> *httpd-2.4.53-rc1.tar.gz >>> >>> >>> The SVN candidate source is found at tags/2.4.53-rc1-candidate. >>> >>> Kind Regards, >>> Stefan >> >> Not a vote yet, just an observation: on SLES12 (gcc 4.8.3, glibc 2.19) and >> RHEL7 (gcc 4.8.2, glibc 2.19) with platform >> compilers, configure detects it wants to set -std=gnu11. During make I get a >> compilation error: >> >> server/util.c:3183:1: error: unknown type name ‘_Thread_local’ >> >> The type "_Thread_local" comes from include/httpd.h: >> >> 2438 #if defined(__cplusplus) && __cplusplus >= 201103L >> 2439 #define AP_THREAD_LOCAL thread_local >> 2440 #elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 >> 2441 #define AP_THREAD_LOCAL _Thread_local >> >> 2442 #elif defined(__GNUC__) /* works for clang too */ >> 2443 #define AP_THREAD_LOCAL __thread >> 2444 #elif defined(WIN32) && defined(_MSC_VER) >> 2445 #define AP_THREAD_LOCAL __declspec(thread) >> 2446 #endif >> 2447 #endif /* ndef AP_NO_THREAD_LOCAL */ >> >> It looks like the detection is broken? > > See also: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203066 Thanks for the pointer. Does the below fix it? Index: include/httpd.h === --- include/httpd.h (revision 1898730) +++ include/httpd.h (working copy) @@ -2587,7 +2587,9 @@ */ #if defined(__cplusplus) && __cplusplus >= 201103L #define AP_THREAD_LOCAL thread_local -#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 +#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 && \ + (!defined(__GNUC__) || \ + __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 9)) #define AP_THREAD_LOCAL _Thread_local #elif defined(__GNUC__) /* works for clang too */ #define AP_THREAD_LOCAL __thread Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Am 08.03.2022 um 16:33 schrieb Rainer Jung: Am 07.03.2022 um 16:55 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc1 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 *httpd-2.4.53-rc1.tar.gz sha512: a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 *httpd-2.4.53-rc1.tar.gz The SVN candidate source is found at tags/2.4.53-rc1-candidate. Kind Regards, Stefan Not a vote yet, just an observation: on SLES12 (gcc 4.8.3, glibc 2.19) and RHEL7 (gcc 4.8.2, glibc 2.19) with platform compilers, configure detects it wants to set -std=gnu11. During make I get a compilation error: server/util.c:3183:1: error: unknown type name ‘_Thread_local’ The type "_Thread_local" comes from include/httpd.h: 2438 #if defined(__cplusplus) && __cplusplus >= 201103L 2439 #define AP_THREAD_LOCAL thread_local 2440 #elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 2441 #define AP_THREAD_LOCAL _Thread_local 2442 #elif defined(__GNUC__) /* works for clang too */ 2443 #define AP_THREAD_LOCAL __thread 2444 #elif defined(WIN32) && defined(_MSC_VER) 2445 #define AP_THREAD_LOCAL __declspec(thread) 2446 #endif 2447 #endif /* ndef AP_NO_THREAD_LOCAL */ It looks like the detection is broken? See also: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203066
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
For anyone thinking about testing rc1, there is a high chance of an rc2 coming soon. Will announce here, Stefan > Am 08.03.2022 um 16:33 schrieb Rainer Jung : > > > Am 07.03.2022 um 16:55 schrieb Stefan Eissing: >> Hi all, >> Please find below the proposed release tarball and signatures: >> https://dist.apache.org/repos/dist/dev/httpd/ >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.53-rc1 as 2.4.53: >> [ ] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> The computed digests of the tarball up for vote are: >> sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 >> *httpd-2.4.53-rc1.tar.gz >> sha512: >> a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 >> *httpd-2.4.53-rc1.tar.gz >> The SVN candidate source is found at tags/2.4.53-rc1-candidate. >> Kind Regards, >> Stefan > > Not a vote yet, just an observation: on SLES12 (gcc 4.8.3, glibc 2.19) and > RHEL7 (gcc 4.8.2, glibc 2.19) with platform compilers, configure detects it > wants to set -std=gnu11. During make I get a compilation error: > > server/util.c:3183:1: error: unknown type name ‘_Thread_local’ > > The type "_Thread_local" comes from include/httpd.h: > > 2438 #if defined(__cplusplus) && __cplusplus >= 201103L > 2439 #define AP_THREAD_LOCAL thread_local > 2440 #elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 > 2441 #define AP_THREAD_LOCAL _Thread_local > > 2442 #elif defined(__GNUC__) /* works for clang too */ > 2443 #define AP_THREAD_LOCAL __thread > 2444 #elif defined(WIN32) && defined(_MSC_VER) > 2445 #define AP_THREAD_LOCAL __declspec(thread) > 2446 #endif > 2447 #endif /* ndef AP_NO_THREAD_LOCAL */ > > It looks like the detection is broken? > > Best regards, > > Rainer
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Am 07.03.2022 um 16:55 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc1 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 *httpd-2.4.53-rc1.tar.gz sha512: a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 *httpd-2.4.53-rc1.tar.gz The SVN candidate source is found at tags/2.4.53-rc1-candidate. Kind Regards, Stefan Not a vote yet, just an observation: on SLES12 (gcc 4.8.3, glibc 2.19) and RHEL7 (gcc 4.8.2, glibc 2.19) with platform compilers, configure detects it wants to set -std=gnu11. During make I get a compilation error: server/util.c:3183:1: error: unknown type name ‘_Thread_local’ The type "_Thread_local" comes from include/httpd.h: 2438 #if defined(__cplusplus) && __cplusplus >= 201103L 2439 #define AP_THREAD_LOCAL thread_local 2440 #elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112 2441 #define AP_THREAD_LOCAL _Thread_local 2442 #elif defined(__GNUC__) /* works for clang too */ 2443 #define AP_THREAD_LOCAL __thread 2444 #elif defined(WIN32) && defined(_MSC_VER) 2445 #define AP_THREAD_LOCAL __declspec(thread) 2446 #endif 2447 #endif /* ndef AP_NO_THREAD_LOCAL */ It looks like the detection is broken? Best regards, Rainer
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On Tue, Mar 08, 2022 at 02:01:42PM +0100, Ruediger Pluem wrote: > > I got a new "may be uninitialized" warning with with the GCC 12 shapshot > > used in Fedora 36 (which is still under development and can be > > unreliable). I think it's unreachable, if we enter here: > > > > https://github.com/apache/httpd/blob/trunk/modules/lua/lua_request.c#L244 > > > > r->remaining must be > 0 and hence length > rpos is guaranteed and the > > loop will iterate at least once. > > I agree, but I am also fine to init len_read to -1 to avoid this. But I think > this is not a blocker. > Thanks for bringing it to attention. r1898731. Nice, thank you. +1 to that for 2.4.x.
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
> On Mar 7, 2022, at 10:55 AM, Stefan Eissing wrote: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.53-rc1 as 2.4.53: > [X] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > Tested: o macOS 12.2.1 w/ Xcode 13.2.1 / OpenSSL 1.1.1m o Ubuntu 20.04LTS / OpenSSL 1.1.1m
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On 3/8/22 12:57 PM, Joe Orton wrote: > On Mon, Mar 07, 2022 at 04:55:54PM +0100, Stefan Eissing wrote: >> Hi all, >> >> Please find below the proposed release tarball and signatures: >> >> https://dist.apache.org/repos/dist/dev/httpd/ >> >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.53-rc1 as 2.4.53: >> [X] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> >> The computed digests of the tarball up for vote are: >> sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 >> *httpd-2.4.53-rc1.tar.gz >> sha512: >> a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 >> *httpd-2.4.53-rc1.tar.gz >> >> The SVN candidate source is found at tags/2.4.53-rc1-candidate. > > +1 for release and thanks for RMing. Passes test suite on Fedora 35, > RHEL 8, and 9 Beta(ish). > > I got a new "may be uninitialized" warning with with the GCC 12 shapshot > used in Fedora 36 (which is still under development and can be > unreliable). I think it's unreachable, if we enter here: > > https://github.com/apache/httpd/blob/trunk/modules/lua/lua_request.c#L244 > > r->remaining must be > 0 and hence length > rpos is guaranteed and the > loop will iterate at least once. I agree, but I am also fine to init len_read to -1 to avoid this. But I think this is not a blocker. Thanks for bringing it to attention. r1898731. Regards Rüdiger
Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
On Mon, Mar 07, 2022 at 04:55:54PM +0100, Stefan Eissing wrote:
> Hi all,
>
> Please find below the proposed release tarball and signatures:
>
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release
> this candidate tarball httpd-2.4.53-rc1 as 2.4.53:
> [X] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3
> *httpd-2.4.53-rc1.tar.gz
> sha512:
> a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961
> *httpd-2.4.53-rc1.tar.gz
>
> The SVN candidate source is found at tags/2.4.53-rc1-candidate.
+1 for release and thanks for RMing. Passes test suite on Fedora 35,
RHEL 8, and 9 Beta(ish).
I got a new "may be uninitialized" warning with with the GCC 12 shapshot
used in Fedora 36 (which is still under development and can be
unreliable). I think it's unreachable, if we enter here:
https://github.com/apache/httpd/blob/trunk/modules/lua/lua_request.c#L244
r->remaining must be > 0 and hence length > rpos is guaranteed and the
loop will iterate at least once.
lua_request.c: In function ‘lua_read_body’:
lua_request.c:260:12: error: ‘len_read’ may be used uninitialized
[-Werror=maybe-uninitialized]
260 | if (len_read < 0) {
|^
lua_request.c:247:22: note: ‘len_read’ was declared here
247 | apr_off_tlen_read, rpos = 0;
| ^~~~
[VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53
Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.53-rc1 as 2.4.53: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 7559255a37adc5cb6f568ba224e435420f0a138cd9564162c9528b8ac08737b3 *httpd-2.4.53-rc1.tar.gz sha512: a7734e2fa35389678be74bbc18136eef482ff9daecc2c1ed9c2c5eb410182735a94ff6ad248d0d4b6266e90161f2f8052d4871f381723c996ace0412b0219961 *httpd-2.4.53-rc1.tar.gz The SVN candidate source is found at tags/2.4.53-rc1-candidate. Kind Regards, Stefan
Re: intent to make a release candidate on Monday
> Am 03.03.2022 um 14:32 schrieb Jim Jagielski : > > All three promoted. I went ahead and merged the 'dbm' patch Thanks, Jim! > >> On Mar 3, 2022, at 4:37 AM, Stefan Eissing wrote: >> >> There are some important fixes pending release. Work does not appear to >> slow down in the foreseeable future, so I'd like us to make them available. >> >> Looking at 2.4.x STATUS, there are 3 backport proposals lacking 1 vote: >> - dbm: Split the loading of a dbm driver >> - mod_proxy: Bump shared worker name to 384 chars. PR 53218 >> - mod_http2: preserve the port number given in a HTTP/1.1 >> >> Maybe someone finds the time to look at those. >> >> If you see something that definitely should be in the next >> release, but lack the time to make it ready for Monday, please >> let us know and we can discuss how we can help or adjust the >> schedule. >> >> Kind Regards, >> >> Stefan >> >> >
Re: intent to make a release candidate on Monday
All three promoted. I went ahead and merged the 'dbm' patch > On Mar 3, 2022, at 4:37 AM, Stefan Eissing wrote: > > There are some important fixes pending release. Work does not appear to > slow down in the foreseeable future, so I'd like us to make them available. > > Looking at 2.4.x STATUS, there are 3 backport proposals lacking 1 vote: > - dbm: Split the loading of a dbm driver > - mod_proxy: Bump shared worker name to 384 chars. PR 53218 > - mod_http2: preserve the port number given in a HTTP/1.1 > > Maybe someone finds the time to look at those. > > If you see something that definitely should be in the next > release, but lack the time to make it ready for Monday, please > let us know and we can discuss how we can help or adjust the > schedule. > > Kind Regards, > > Stefan > >
intent to make a release candidate on Monday
There are some important fixes pending release. Work does not appear to slow down in the foreseeable future, so I'd like us to make them available. Looking at 2.4.x STATUS, there are 3 backport proposals lacking 1 vote: - dbm: Split the loading of a dbm driver - mod_proxy: Bump shared worker name to 384 chars. PR 53218 - mod_http2: preserve the port number given in a HTTP/1.1 Maybe someone finds the time to look at those. If you see something that definitely should be in the next release, but lack the time to make it ready for Monday, please let us know and we can discuss how we can help or adjust the schedule. Kind Regards, Stefan
Re: release vibes?
On 2/8/22 12:20 PM, Eric Covener wrote: > On Tue, Feb 8, 2022 at 4:43 AM Stefan Eissing wrote: >> >> Is there any consensus in doing a release this month? > +1 > +1. There is one backport for mod_dav that misses 1 vote. Who is brave enough to backport the PCRE stuff that is accepted for backport? Regards Rüdiger
Re: release vibes?
On Tue, Feb 8, 2022 at 4:43 AM Stefan Eissing wrote: > > Is there any consensus in doing a release this month? +1
release vibes?
Is there any consensus in doing a release this month?
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
With 7 +1 votes and no objections, the vote has PASSED. Thank you all who took the time to test this! I will start the release work. Kind Regards, Stefan > Am 19.12.2021 um 17:56 schrieb Steffen : > > +1 for Windows release. > > Cheers, Steffen > >> Op 16 dec. 2021 om 15:03 heeft Stefan Eissing het >> volgende geschreven: >> >> Hi all, >> >> Please find below the proposed release tarball and signatures: >> >> https://dist.apache.org/repos/dist/dev/httpd/ >> >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: >> [ ] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> >> The computed digests of the tarball up for vote are: >> sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f >> *httpd-2.4.52-rc1.tar.gz >> sha512: >> b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 >> *httpd-2.4.52-rc1.tar.gz >> >> The SVN candidate source is found at tags/candidate-2.4.52-rc1. >> >> Kind Regards, >> Stefan >
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
+1 for Windows release. Cheers, Steffen > Op 16 dec. 2021 om 15:03 heeft Stefan Eissing het > volgende geschreven: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.52-rc1. > > Kind Regards, > Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On Thu, Dec 16, 2021 at 3:03 PM Stefan Eissing wrote: > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [X] +1: It's not just good, it's good enough! All good on Debian 10, 11 & 12. buildconf and configure.in will probably need an update to please latest autotools from Debian 12, not for this release though. Also gcc-11 warns about the usage of APR_RINGs in apr-util-1.7.x brigades, possibly something to look at for the next APR(s) releases. Thanks Stefan and all the team for this release!
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [X] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. +1 to release and thanks a bunch for RM! I didn't have time to do the full range of my usual builds and tests. Nevertheless: ! KEYS maybe missing (see other mail) - Sigs and hashes OK - contents of tarballs identical - contents of tag and tarballs identical except for expected deltas Built on - Solaris 10 Sparc as 32 Bit Binaries - SLES 11+12+15 (64 Bits) - RHEL 6+7+8 (64 Bits) For all platforms built - with module set all plus proxy_fdpass plus proxy_http2 - using APR/APU from the 2.4.51 deps tarball (see separate message, why for me the 2.4.52 tarball didn't work) - OpenSSL linked statically - using external libraries - expat 2.4.1 - pcre 8.45 - lua 5.4.3 (compiled with LUA_COMPAT_MODULE) - libxml2 2.9.12 - libnghttp2 1.46.0 - brotli 1.0.9 - curl 7.80.0 - jansson 2.14 - libldap 2.6.0 - openssl 1.1.1m - Tool chain: - platform gcc except on Solaris (gcc 9.3.0 Solaris 10) - CFLAGS: -O2 -g -Wall -fno-strict-aliasing - on Solaris additionally -mpcu=v9, -D_XOPEN_SOURCE, -D_XOPEN_SOURCE_EXTENDED=1, -D__EXTENSIONS__ and -D_XPG6 Tested for - SLES 11+12+15 - RHEL 6+7+8 - Solaris 10 Sparc - MPMs prefork, worker, event - log level trace8 - Perl client bundle build against OpenSSL 1.1.1g plus patches, ´3.0.0, 1.1.0l, 1.0.2u and 0.9.8zh All of these tests passed. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Le 16/12/2021 à 15:03, Stefan Eissing a écrit : Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [X] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan +1 ; Tested only with event. Tested with: Linux pop-os 5.15.5 gcc (Ubuntu 10.3.0-1ubuntu1) 10.3.0 OpenSSL 1.1.1j 16 Feb 2021 libssl-dev 1.1.1j libbrotli-dev 1.0.9 libjansson-dev 2.13.1 libnghttp2-dev 1.43.0 libpcre2-dev 10.36 liblua5.3-dev 5.3.3 libsystemd-dev 247.3 libldap2-dev 2.4.57+dfsg libxml2-dev 2.9.10+dfsg libcurl4-openssl-dev 7.74.0 Thx a lot Stefan for RM. CJ
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
+1 CentOS 6 CentOS 7 AlmaLinux 8 Ubuntu 20.04 Regards, Cory McIntire PO – cPanel Security Team Release Manager – EasyApache cPanel / WebPros From: Stefan Eissing Date: Thursday, December 16, 2021 at 8:03 AM To: dev@httpd.apache.org Subject: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52 Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Am 17.12.2021 um 16:45 schrieb Stefan Eissing: Am 17.12.2021 um 16:22 schrieb Rainer Jung : At least on Linux (SLES 11/12/15, RHEL 6/7/8) I run into a configure error for APR from the deps tarball due to that configure being created with autoconf 2.70 instead of 2.69 used for 2.4.51: configure: error: could not determine the string function for int64_t It comes from defining some things once in conftest.c and again in the included confdefs.h. The problem seems to be known and at least some changes were added to the 1.7.x APR branch, but we didn't have a release there for a long time ... :( Some pointers: https://www.mail-archive.com/bug-autoconf@gnu.org/msg04695.html https://github.com/apache/apr/pull/25 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97998 I will check, whether combining 2.4.52 with the deps tarball from 2.4.52 fixes this, or whether the httpd part of configure runs into the same problem. Thanks Rainer. There are problems with the APR build on macOS as well. A new release would be welcome. Since we do not release the -dep tarballs as part of Apache httpd, this should not be a stopper. There were historically added for convenience on the voting. I think we should change our release scripts to no longer include them, unless we are sure they run correctly everywhere. Kind Regards, Stefan Agreed. After replacing APR/APU with the ones from the 51 deps tarball, configure goes through. So for me there's no configure problem in the main tarball, at least not on Linux. Regards, Rainer Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
> Am 17.12.2021 um 16:22 schrieb Rainer Jung : > > At least on Linux (SLES 11/12/15, RHEL 6/7/8) I run into a configure error > for APR from the deps tarball due to that configure being created with > autoconf 2.70 instead of 2.69 used for 2.4.51: > > configure: error: could not determine the string function for int64_t > > It comes from defining some things once in conftest.c and again in the > included confdefs.h. > > The problem seems to be known and at least some changes were added to the > 1.7.x APR branch, but we didn't have a release there for a long time ... :( > > Some pointers: > > https://www.mail-archive.com/bug-autoconf@gnu.org/msg04695.html > > https://github.com/apache/apr/pull/25 > > https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97998 > > I will check, whether combining 2.4.52 with the deps tarball from 2.4.52 > fixes this, or whether the httpd part of configure runs into the same problem. Thanks Rainer. There are problems with the APR build on macOS as well. A new release would be welcome. Since we do not release the -dep tarballs as part of Apache httpd, this should not be a stopper. There were historically added for convenience on the voting. I think we should change our release scripts to no longer include them, unless we are sure they run correctly everywhere. Kind Regards, Stefan > > Regards, > > Rainer > > Am 16.12.2021 um 15:03 schrieb Stefan Eissing: >> Hi all, >> Please find below the proposed release tarball and signatures: >> https://dist.apache.org/repos/dist/dev/httpd/ >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: >> [ ] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> The computed digests of the tarball up for vote are: >> sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f >> *httpd-2.4.52-rc1.tar.gz >> sha512: >> b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 >> *httpd-2.4.52-rc1.tar.gz >> The SVN candidate source is found at tags/candidate-2.4.52-rc1. >> Kind Regards, >> Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
At least on Linux (SLES 11/12/15, RHEL 6/7/8) I run into a configure error for APR from the deps tarball due to that configure being created with autoconf 2.70 instead of 2.69 used for 2.4.51: configure: error: could not determine the string function for int64_t It comes from defining some things once in conftest.c and again in the included confdefs.h. The problem seems to be known and at least some changes were added to the 1.7.x APR branch, but we didn't have a release there for a long time ... :( Some pointers: https://www.mail-archive.com/bug-autoconf@gnu.org/msg04695.html https://github.com/apache/apr/pull/25 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97998 I will check, whether combining 2.4.52 with the deps tarball from 2.4.52 fixes this, or whether the httpd part of configure runs into the same problem. Regards, Rainer Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On 12/16/21 15:03, Stefan Eissing wrote: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.52-rc1. > > Kind Regards, > Stefan > +1 for release, works fine on Fedora 35, OpenBSD 7.0 and Debian 11. Regards Giovanni OpenPGP_signature Description: OpenPGP digital signature
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On Fri, 17 Dec 2021, 10:56 Ruediger Pluem, wrote: > > > On 12/17/21 10:54 AM, Joe Orton wrote: > > On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: > >> I would like to call a VOTE over the next few days to release > >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > >> [X] +1: It's not just good, it's good enough! > >> [ ] +0: Let's have a talk. > >> [ ] -1: There's trouble in paradise. Here's what's wrong. > >> > >> The computed digests of the tarball up for vote are: > >> sha256: > 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > >> sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz > > > > Thanks for RMing, Stefan. > > > > +1 for release, passes test suite on Fedora 35, RHEL 8 and 9 Beta. > > Out of curiosity: On RHEL 9 Beta it works and passes tests against the OS > provided OpenSSL 3? > To be pedantic I am testing against a RHEL9 development snapshot rather than "Beta" though they are quite close, but, yup the tests passed. Regards, Joe >
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Thanks for the cool team effort and your work as RM! I lost track about the correct expectation but wanted to note, that https://dist.apache.org/repos/dist/dev/httpd/ does not contain a KEYS file. IMHO it did for the previous two releases, but maybe the requirements changed. Thanks! Rainer Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On 12/17/21 10:54 AM, Joe Orton wrote: > On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: >> [X] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> >> The computed digests of the tarball up for vote are: >> sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f >> *httpd-2.4.52-rc1.tar.gz >> sha512: >> b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 >> *httpd-2.4.52-rc1.tar.gz > > Thanks for RMing, Stefan. > > +1 for release, passes test suite on Fedora 35, RHEL 8 and 9 Beta. Out of curiosity: On RHEL 9 Beta it works and passes tests against the OS provided OpenSSL 3? Regards Rüdiger
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [X] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz Thanks for RMing, Stefan. +1 for release, passes test suite on Fedora 35, RHEL 8 and 9 Beta. Regards, Joe
[VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: release vibes?
Release often? let me tell you of a story from a System Administrators perspective as to why thats bad and should be avoided and you should learn from other people's mistakes There is a reason sysads dislike developers, they have this "oh new code gotta push it out right away" mentality, but we push back saying nope we just did your upgrade it can wait will another one, and the golden rule is nobody updates anything during the christmas "embargo" period which I believe Noel was referring to, this generally is from two weeks before Christmas, til two weeks after the start of the New Year. There was once this young guy who developed this shiny new yet highly popular internet daemon, in its infancy it was a wizzbang and everybody loved it and was moving to it, the problem soon arose that every new feature was pushed out, and as murphy dictates, problem be found, sometimes sysads were having to update this highly popular software every few weeks, sometimes more, there was even a few times we recall having to update it three times in just ONE week because of this push push push mentality, this results in a large percentage of sysads pushing back and refusing to test let alone update, over time this continued, new releases every few weeks, tiresome - like we have nothing better to do but upgrade the same software over and over and over, wasn't going to happen, and didn't happen, some of these were to fix nasty exploitable problems, but almost nobody bothered because "jesus christ another bloody update"... a lot of people were burned. That same project did get a lot better with a rewrite of its code and a move to a new "major release" the updates still came, but not thick and fast, this made sysads much happier, the developer had learned push often is not what system and network operators want, now days sysads love that project, it releases every few months on average which we can accept and has much fewer bugs, and rarely anything severe. That project, is called dovecot On Wed, Dec 8, 2021 at 1:17 AM Mladen Turk wrote: > > > On 06/12/2021 11:36, Stefan Eissing wrote: > > Friends of httpd, how do you feel about a release in the next two weeks? > > > > +1 > Release early, release often > > Regards > -- > ^TM >
Re: release vibes?
On 12/8/21 13:56, Joe Orton wrote: > On Mon, Dec 06, 2021 at 11:36:51AM +0100, Stefan Eissing wrote: >> Friends of httpd, how do you feel about a release in the next two weeks? > > Sounds good to me. We may have fewer people around to test it, but at > least trying to get a release out is better than definitely having no > release IMO. > +1 let's try to cook a release. Giovanni OpenPGP_signature Description: OpenPGP digital signature
Re: release vibes?
> Am 08.12.2021 um 13:56 schrieb Joe Orton : > > On Mon, Dec 06, 2021 at 11:36:51AM +0100, Stefan Eissing wrote: >> Friends of httpd, how do you feel about a release in the next two weeks? > > Sounds good to me. We may have fewer people around to test it, but at > least trying to get a release out is better than definitely having no > release IMO. Excellent. I propose targeting Tuesday 14th for a candidate. If we go later, it becomes very close to the holidays. But if the time is needed, we can do that as well. I will hold back the current http2 backport, as I need some more people to dare test that from the github on their sites. The mod_tls acceptance I understood as we would like to include that as experimental in the next 2.4.x release. If there are no objections, I will prepare that. Kind Regards, Stefan > > Regards, Joe >
Re: release vibes?
On Mon, Dec 06, 2021 at 11:36:51AM +0100, Stefan Eissing wrote: > Friends of httpd, how do you feel about a release in the next two weeks? Sounds good to me. We may have fewer people around to test it, but at least trying to get a release out is better than definitely having no release IMO. Regards, Joe
Re: release vibes?
On 08/12/2021 01:14, Mladen Turk wrote: On 06/12/2021 12:27, Noel Butler wrote: On 06/12/2021 20:36, Stefan Eissing wrote: Friends of httpd, how do you feel about a release in the next two weeks? Kind Regards, Stefan -1 Thats days before christmas, most testers and i'm sure devs will be in holiday mode, even if not, that close to christmas means server updates are in embargo status in most organisations. Probably the worst -1 reason ever. Regards really? so, who is going to test for bugs, just the handful of code submitters? so us non PMC testers are not needed, cool, cya :) -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.
Re: release vibes?
On 07/12/2021 16:16, Mladen Turk wrote: On 06/12/2021 11:36, Stefan Eissing wrote: Friends of httpd, how do you feel about a release in the next two weeks? +1 Release early, release often Anyhow, who I'm I to say, not even metinioned on https://httpd.apache.org/contributors/ Regards -- ^TM
Re: release vibes?
On 06/12/2021 11:36, Stefan Eissing wrote: Friends of httpd, how do you feel about a release in the next two weeks? +1 Release early, release often Regards -- ^TM
Re: release vibes?
On 06/12/2021 12:27, Noel Butler wrote: On 06/12/2021 20:36, Stefan Eissing wrote: Friends of httpd, how do you feel about a release in the next two weeks? Kind Regards, Stefan -1 Thats days before christmas, most testers and i'm sure devs will be in holiday mode, even if not, that close to christmas means server updates are in embargo status in most organisations. Probably the worst -1 reason ever. Regards -- ^TM
Re: release vibes?
On 06/12/2021 20:36, Stefan Eissing wrote: Friends of httpd, how do you feel about a release in the next two weeks? Kind Regards, Stefan -1 Thats days before christmas, most testers and i'm sure devs will be in holiday mode, even if not, that close to christmas means server updates are in embargo status in most organisations. -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.
release vibes?
Friends of httpd, how do you feel about a release in the next two weeks? Kind Regards, Stefan
[RELEASE CANDIDATE] Apache-Test-1.43 RC1
As a preliminary to making a new mod_perl release, I am updating Apache-Test. Please download, test, and report back on this Apache-Test 1.43 release candidate. https://dist.apache.org/repos/dist/dev/perl/Apache-Test-1.43-rc1.tar.gz MD5 = 44d976ae19d5ab2879e43a26a360366b SHA1 = 151f61214d6e04e671304f34312f3b3ab30b40f2 Major changes in this release are as follows: Our implementation of "which" should not search for a program in the elements of PATH when program already contains a path. [rjung] Fix hash generation when the openssl command was overwritten with the environment variable "APACHE_TEST_OPENSSL_CMD". [rjung] Add new config option limitrequestline needed when the local directory paths are long. [rjung]
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
On 10/7/21 11:17, ste...@eissing.org wrote: > Then I close the vote and start pushing the release. > > Thanks for everyone to participate here on such a short notice! > Well gee ... that was far too fast for me to catch! I guess I will just go get the production release. -- Dennis Clarke RISC-V/SPARC/PPC/ARM/CISC UNIX and Linux spoken GreyBeard and suspenders optional
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
+1 on Slackware64 -current Alex > On Oct 7, 2021, at 09:17, ste...@eissing.org wrote: > > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [ ] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz > sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 > *httpd-2.4.51-rc1.tar.gz > sha512: > 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 > *httpd-2.4.51-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.51-rc1. > > Kind Regards, > Stefan
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
Then I close the vote and start pushing the release. Thanks for everyone to participate here on such a short notice! Kind Regards, Stefan > Am 07.10.2021 um 17:06 schrieb Joe Orton : > > ASF release policy [1] suggests that we have a >=72 hour voting period > for releases, but this is a "SHOULD" not a hard rule. Due to: > > a) the severity of the issue being fixed, and > > b) the extensive review and testing which the patch has received both > here and off-list, and > > c) the fact we already have sufficient binding votes on the release, > with no negative feedback either from PMC members or the community > > my recommendation as PMC Chair is that we close the vote now and ship > the update. Normal 72+ hour release votes must be resumed after this. > > Regards, Joe > > [1] https://www.apache.org/legal/release-policy.html >
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
+1 Cent6/7/8 Ubuntu 20.04 Thanks, Cory McIntire PO – cPanel Security Team Release Manager – EasyApache cPanel / WebPros From: ste...@eissing.org Date: Thursday, October 7, 2021 at 8:17 AM To: dev@httpd.apache.org Subject: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51 Hi all, due to found security weaknesses in our 2.4.50 release, the security team feels it is necessary to do a new release on very short notice. We will skip the usual 3 day voting period and close the vote once we feel comfortable with our testing. Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days^h^h^h^hhours to release this candidate tarball httpd-2.4.51-rc1 as 2.4.51: [ ] +1: It's not just good, it's hopefully good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 *httpd-2.4.51-rc1.tar.gz sha512: 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 *httpd-2.4.51-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.51-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
ASF release policy [1] suggests that we have a >=72 hour voting period for releases, but this is a "SHOULD" not a hard rule. Due to: a) the severity of the issue being fixed, and b) the extensive review and testing which the patch has received both here and off-list, and c) the fact we already have sufficient binding votes on the release, with no negative feedback either from PMC members or the community my recommendation as PMC Chair is that we close the vote now and ship the update. Normal 72+ hour release votes must be resumed after this. Regards, Joe [1] https://www.apache.org/legal/release-policy.html
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
On Thu, Oct 7, 2021 at 3:17 PM ste...@eissing.org wrote: > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: +1 on Debian 10 and 11. Thanks Stefan!
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
+1 looks ok on Windows On Thursday 07/10/2021 at 15:17, ste...@eissing.org wrote: Hi all, due to found security weaknesses in our 2.4.50 release, the security team feels it is necessary to do a new release on very short notice. We will skip the usual 3 day voting period and close the vote once we feel comfortable with our testing. Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days^h^h^h^hhours to release this candidate tarball httpd-2.4.51-rc1 as 2.4.51: [ ] +1: It's not just good, it's hopefully good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 *httpd-2.4.51-rc1.tar.gz sha512: 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 *httpd-2.4.51-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.51-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
On Thu, Oct 7, 2021 at 9:17 AM ste...@eissing.org wrote: > > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [ ] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. +1 AIX/xlc/ppc64
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
On Thu, Oct 07, 2021 at 03:17:36PM +0200, ste...@eissing.org wrote: > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [X] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz > sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 > *httpd-2.4.51-rc1.tar.gz > sha512: > 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 > *httpd-2.4.51-rc1.tar.gz +1 for release, tested on Fedora 34 and RHEL8. Regards, Joe
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
On 10/7/21 3:17 PM, ste...@eissing.org wrote: > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [ ] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz > sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 > *httpd-2.4.51-rc1.tar.gz > sha512: > 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 > *httpd-2.4.51-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.51-rc1. > +1 on RedHat 8 Regards Rüdiger
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
> Am 07.10.2021 um 15:17 schrieb ste...@eissing.org: > > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [ ] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz > sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 > *httpd-2.4.51-rc1.tar.gz > sha512: > 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 > *httpd-2.4.51-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.51-rc1. > > Kind Regards, > Stefan +1 on macOS.
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
+1 on Fedora 34 On 2021/10/07 13:17:36, "ste...@eissing.org" wrote: > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [ ] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz > sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 > *httpd-2.4.51-rc1.tar.gz > sha512: > 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 > *httpd-2.4.51-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.51-rc1. > > Kind Regards, > Stefan
Re: [VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
+1 on Debian 11 ste...@eissing.org schrieb am Do., 7. Okt. 2021, 15:17: > Hi all, > > due to found security weaknesses in our 2.4.50 release, the security team > feels it is necessary to do a new release on very short notice. We will > skip > the usual 3 day voting period and close the vote once we feel comfortable > with our testing. > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days^h^h^h^hhours to release > this candidate tarball httpd-2.4.51-rc1 as 2.4.51: > [ ] +1: It's not just good, it's hopefully good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz > sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 > *httpd-2.4.51-rc1.tar.gz > sha512: > 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 > *httpd-2.4.51-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.51-rc1. > > Kind Regards, > Stefan
[VOTE] Release httpd-2.4.51-rc1 as httpd-2.4.51
Hi all, due to found security weaknesses in our 2.4.50 release, the security team feels it is necessary to do a new release on very short notice. We will skip the usual 3 day voting period and close the vote once we feel comfortable with our testing. Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days^h^h^h^hhours to release this candidate tarball httpd-2.4.51-rc1 as 2.4.51: [ ] +1: It's not just good, it's hopefully good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha1: 516128e5acb7311e6e4d32d600664deb0d12e61f *httpd-2.4.51-rc1.tar.gz sha256: c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4 *httpd-2.4.51-rc1.tar.gz sha512: 507fd2bbc420e8a1f0a90737d253f1aa31000a948f7a840fdd4797a78f7a4f1bd39250b33087485213a3bed4d11221e98eabfaf4ff17c7d0380236f8a52ee157 *httpd-2.4.51-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.51-rc1. Kind Regards, Stefan
release 2.4.50 is out
Happy to announce that the httpd-2.4.50 release is out. The website is updated, the vulnerabilities listed. The mails to announce's sent, hopefully sitting in the moderators queues now. Thanks all for participating! Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.50-rc1 as httpd-2.4.50
> Am 04.10.2021 um 21:59 schrieb Dennis Clarke : > > On 10/4/21 04:01, ste...@eissing.org wrote: >> I count 10 +1 votes for release and none against. I will go ahead and start >> preparing it. >> >> Thanks to everyone for putting in the time on such a short notice! >> > > Looks good : > >https://downloads.apache.org/httpd/Announcement2.4.html > > However https://httpd.apache.org/ seems to still say 2.4.49 there. Yes, we are giving mirrors always a day to sync the new tarballs before we send the announce and website update out. Thanks for checking! Kind Regards, Stefan > > > -- > Dennis Clarke > RISC-V/SPARC/PPC/ARM/CISC > UNIX and Linux spoken > GreyBeard and suspenders optional
