From mmeffie@sinenomine.net Fri Oct 4 17:42:13 2019 From: mmeffie@sinenomine.net (Michael Meffie) Date: Fri, 4 Oct 2019 12:42:13 -0400 Subject: [OpenAFS-devel] OpenAFS release team weekly meeting Message-ID: <20191004124213.6320d212c85e1cd13a621e08@sinenomine.net> OpenAFS release team weekly meeting Date: Oct 04, 2019 Participants: - Stephan Wiesand, Release Manager - Ben Kaduk - Michael Meffie - Mark Vitale The weekly release team meetings are held on Fridays at 15:00GMT (11:00EDT) in release-team@conference.openafs.org on jabber. Please request login information if you would like to participate. Logs are available at: https://conference.openafs.org/release-team@conference.openafs.org/ 1.8.x series ============ * git tag added: openafs-stable-1_8_4 * Stephan to announce 1.8.4 final * Many patches in gerrit for the next 1.8.x release - Mike to check the buildbot has verified them 1.6.x series ============ * List of changes for 1.6.24 to be prepared by Stephan master/1.9.x ============ * Ben has started rebasing the pthreaded-bosserver stack * Discussion on proposed log formatting helpers and possible alternatives. To be continued. Patches ======= Recently submitted for branch 'master': 13886 opr: Define opr_mutex_t in lockstub.h 13887 RedHat: Update makesrpm.pl to use @PACKAGE_VERSION@ instead of @VERSION@ 13883 RedHat: package rxstat_* programs 13881 LINUX 5.3: Add comments for fallthrough switch cases 13885 volser: Cache rDNS lookups in 'vos listvldb' 13882 volser: consolidate destructors in UV_RemoveSite 13884 opr: Introduce opr_cache Recently merged onto branch 'master': 13887 b03f3e6101 RedHat: Update makesrpm.pl to use @PACKAGE_VERSION@ instead of @VERSION@ 13880 d9fc4890f0 rx: Fix test for end of call queue for LWP 13873 aefc4c4f46 viced: consistently enforce host thread quota for ICBS(3) 13830 a133f1b1e7 Retire the AFS_PTR_FMT macro -- Michael Meffie From kaduk@mit.edu Wed Oct 23 00:35:23 2019 From: kaduk@mit.edu (Benjamin Kaduk) Date: Tue, 22 Oct 2019 16:35:23 -0700 Subject: [OpenAFS-devel] OpenAFS Security Releases 1.8.5, 1.6.24 available Message-ID: <20191022233523.GK69013@kduck.mit.edu> --uZ3hkaAS1mZxFaxD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline The OpenAFS Guardians are happy to announce the availability of Security Releases OpenAFS 1.8.5 and 1.6.24. Source files can be accessed via the web at: https://www.openafs.org/release/openafs-1.8.5.html https://www.openafs.org/release/openafs-1.6.24.html or via AFS at: UNIX: /afs/grand.central.org/software/openafs/1.8.5/ UNC: \\afs\grand.central.org\software\openafs\1.8.5\ UNIX: /afs/grand.central.org/software/openafs/1.6.24/ UNC: \\afs\grand.central.org\software\openafs\1.6.24\ These releases include fixes for three security advisories: http://openafs.org/pages/security/OPENAFS-SA-2019-001.txt http://openafs.org/pages/security/OPENAFS-SA-2019-002.txt http://openafs.org/pages/security/OPENAFS-SA-2019-003.txt OPENAFS-SA-2019-001 and OPENAFS-SA-2019-002 are for information disclosure over the network via uninitialized RPC output variables; they differ in that -001 affects RPCs that failed, whereas -002 can occur even for successful returns. OPENAFS-SA-2019-003 is a denial of service condition whereby anonymous attackers can cause pthreaded database servers to segmentation fault (NULL dereference). Please see the release notes and security advisories for additional details. Bug reports should be filed to openafs-bugs@openafs.org. Benjamin Kaduk for the OpenAFS Guardians --uZ3hkaAS1mZxFaxD Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQG3BAABCgAdFiEE2WGV4E2ARf9BYP0XKNmm82TrdRIFAl2vkjUACgkQKNmm82Tr dRKD7wwgxMveEcGpo+6JWhWHAk8zQFtVgNxO8AM7jhnD9lnrzgNxN9sO7dzUco3Z xAymT4uBgDMG+pw79NwysaVKjhksNeRtqvfigd0D7EfUs+zeGgcuy3KdFS/llYEE RKUMd8+XXpfulwRkNM8ebp+vAsZGJYNyy0IZjbtUDlgZNckDvLBtHEPwo/L0ukyR LcBobpjsN6CneW0xIVVcH1qQhebDwIE/cKOTUbKGawzahCOdmv4x8ZLFhMPYrJ7V 1/8Opn8/YJeEYEvAuQT4tFZo6wot+3XgniL94rJxzXA+EqqY8NRoM6Zv2n5JKAWa 56TL7I7iJY7DOMQQXduQWDF4L+H5ayUA6F/qexnlt5Xx2sTbtTeEES5SvP6VJQRv dbY9laThydVO8jshsfQ5RjE3OS5/QN1RkCooM/e6hHZ+pau3+65GbnVbJT6BVAwK N84v19TsciJ9+P5wybRi5TuQIJXsvtYGl4gbQ0h+b9gEXpzuzZmWHKUUAiMKraOu 0IkPRPXgDlvryg== =OnIu -----END PGP SIGNATURE----- --uZ3hkaAS1mZxFaxD--