subversion-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel Shahaf <...@daniel.shahaf.name>
Subject Re: 1.8.x vote urgently needed!
Date Fri, 30 Jun 2017 14:38:20 GMT
Stefan Sperling wrote on Fri, 30 Jun 2017 16:10 +0200:
> We need an additional vote now in order to roll a 1.8 tarball today.
> 
> Can anyone help?
> 
>  * r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, r1786515, r1794611,
r1800387
>    Make FSFS consistency no longer depend on hash algorithms.
>    Justification:
>      This eliminates any existing or future FSFS vulnerability due to
>      attacks on MD5 or SHA1.
>    Branch:
>      ^/subversion/branches/1.8.x-strict-rep-sharing
>    Notes:
>      Depends on r1759116 for correctness with older APR.
>      While the backport code is very close to the /trunk changes, it is
>      easier to review them as r1787637, r1787638 and r1787652 on the branch.
>      [Will create a text conflict with the r1785053 backport.  Depending on
>      which change gets merged first, the respective other must be updated.]
>      r1800387 did the above merge and resolved the text conflicts.
>    Votes:
>      +1: stefan2, stsp
>      -1: rhuijben (Until some additional fix like on 1.9 is applied. After that +1
>                    on the current changes)

Note that stefan2's and rhuijben's votes should be marked "(without r1800387)".

Mime
View raw message