tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <craig...@apache.org>
Subject Re: [4.0.3] [VOTES] Upcoming release and security fix
Date Thu, 28 Feb 2002 19:35:22 GMT
+1 for option A and B together (they don't have to be mutually exclusive,
and we can examine user behavior to see if binary patches are an idea
worth pursuing.

+1 for 4.0.3-b1.

Craig


On Thu, 28 Feb 2002, Remy Maucherat wrote:

> Date: Thu, 28 Feb 2002 11:09:08 -0800
> From: Remy Maucherat <remm@apache.org>
> Reply-To: Tomcat Developers List <tomcat-dev@jakarta.apache.org>
> To: tomcat-dev@jakarta.apache.org
> Subject: [4.0.3] [VOTES] Upcoming release and security fix
>
> Since there are apparently diverging opinions on the subject (and also since
> I didn't get any +1s for a possible 4.0.3 b1, or a 4.0.2a release), here's a
> formal request for vote.
>
> On the security problem reported yesterday, affecting the security manager
> sandboxing. We should:
> <ballot>
> A [ ] Make a full 4.0.3 (or 4.0.2a) release which would only include the
> security fix
> B [ ] Make the security fix available as a binary patch for 4.0.2 (it would
> take the form of an archive to extract in $CATALINA_HOME, and would be
> *small*)
> C [ ] Accelerate the release schedule of 4.0.3, which would include the
> security fix, as well as fixes for other issues with 4.0.2 (with Beta 1 on
> 03/01 and Final on 03/08)
> </ballot>
>
> Multiple votes are acceptable. If there are other interesting possibilities,
> let me know.
>
> My vote is 'B'.
>
> In parallel, I'd like to release a first beta of 4.0.3 on 03/01 (depending
> on the vote on item 'C' above, the release cycle may be shorter or longer):
> <ballot>
> +1 [ ] I support the release, and I will help
> +0 [ ] I support the release
> -0 [ ] I don't support the release
> -1 [ ] I'm against the release because:
>
>
> </ballot>
>
> My vote is +1.
>
> Note: Non-committers are welcome to vote if they feel like it, but the vote
> in that case is non binding.
>
> Remy
>
>
> --
> To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>
>
>


--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>


Mime
View raw message