[VOTE]: Release Apache dubbo-go v1.3.0 RC2

2020-02-10 Thread 方银城
Hello Dubbo/Dubbogo Community, This is a call for vote to release Apache dubbo-go version v1.3.0 RC2. The release candidates: https://dist.apache.org/repos/dist/dev/dubbo/dubbo-go/v1.3.0-rc2/ Git tag for the release: https://github.com/apache/dubbo-go/tree/v1.3.0 Hash for the release ta

Re: [VOTE]: Release Apache dubbo-go v1.3.0 RC2

2020-02-10 Thread bro...@chtrak.com
hello how to unsubscribe the maillist? bro...@chtrak.com From: 方银城 Date: 2020-02-11 00:45 To: dev Subject: [VOTE]: Release Apache dubbo-go v1.3.0 RC2 Hello Dubbo/Dubbogo Community, This is a call for vote to release Apache dubbo-go version v1.3.0 RC2. The release candidates: https://d

[CVE-2019-17564] Apache Dubbo deserialization vulnerability

2020-02-10 Thread Jun Liu
Severity: Important Vendor: The Dubbo Project Team Versions Affected: Dubbo 2.7.0 to 2.7.4 Dubbo 2.6.0 to 2.6.7 Dubbo all 2.5.x versions (unsupported any longer) Description: This vulnerability can affect users using Dubbo-Rpc-Http (2.7.3 or lower) and Spring-Web (5.1.9.RELEASE or lower). Un