On 30.06.2017 16:38, Daniel Shahaf wrote:
> Stefan Sperling wrote on Fri, 30 Jun 2017 16:10 +0200:
>> We need an additional vote now in order to roll a 1.8 tarball today.
>>
>> Can anyone help?
>>
>> * r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, r1786515, r1794611, r1800387
>> Make FSFS consistency no longer depend on hash algorithms.
>> Justification:
>> This eliminates any existing or future FSFS vulnerability due to
>> attacks on MD5 or SHA1.
>> Branch:
>> ^/subversion/branches/1.8.x-strict-rep-sharing
>> Notes:
>> Depends on r1759116 for correctness with older APR.
>> While the backport code is very close to the /trunk changes, it is
>> easier to review them as r1787637, r1787638 and r1787652 on the branch.
>> [Will create a text conflict with the r1785053 backport. Depending on
>> which change gets merged first, the respective other must be updated.]
>> r1800387 did the above merge and resolved the text conflicts.
>> Votes:
>> +1: stefan2, stsp
>> -1: rhuijben (Until some additional fix like on 1.9 is applied. After that +1
>> on the current changes)
>
> Note that stefan2's and rhuijben's votes should be marked "(without r1800387)".
I updated my vote.
-- Stefan^2.
Received on 2017-07-01 10:04:56 CEST