Stefan Sperling wrote on Fri, 30 Jun 2017 16:10 +0200:
> We need an additional vote now in order to roll a 1.8 tarball today.
>
> Can anyone help?
>
> * r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, r1786515, r1794611, r1800387
> Make FSFS consistency no longer depend on hash algorithms.
> Justification:
> This eliminates any existing or future FSFS vulnerability due to
> attacks on MD5 or SHA1.
> Branch:
> ^/subversion/branches/1.8.x-strict-rep-sharing
> Notes:
> Depends on r1759116 for correctness with older APR.
> While the backport code is very close to the /trunk changes, it is
> easier to review them as r1787637, r1787638 and r1787652 on the branch.
> [Will create a text conflict with the r1785053 backport. Depending on
> which change gets merged first, the respective other must be updated.]
> r1800387 did the above merge and resolved the text conflicts.
> Votes:
> +1: stefan2, stsp
> -1: rhuijben (Until some additional fix like on 1.9 is applied. After that +1
> on the current changes)
Note that stefan2's and rhuijben's votes should be marked "(without r1800387)".
Received on 2017-06-30 16:38:27 CEST