[mapserver-dev] Vote for MapServer 5.4.2 release (and also 5.2.3and4.10.5?)

[Steve Lime]

Argh, sorry about that... Yes, +1 once Tamas' patch is added.

Steve

>>> On 7/17/2009 at 4:26 PM, in message <4A60EC74.9060506 at mapgears.com>, Daniel
Morissette <dmorissette at mapgears.com> wrote:
> I think you forgot to CC the list. Note that Tamas found a problem on 
> Windows that I'll need to backport before we can go ahead.
> 
> 
> Steve Lime wrote:
>> +1 on both. I'd advocate a single release message focused on 5.4.2 but also 
> noting the 
>> availability of the other releases.
>> 
>>>>> On 7/15/2009 at 4:20 PM, in message <4A5E4822.7050705 at mapgears.com>, Daniel
>> Morissette <dmorissette at mapgears.com> wrote:
>>> Hi PSC,
>>>
>>> A member of the Debian security team has informed us that the fix for 
>>> CVE-2009-0840 in ticket #2943 was incomplete. He helped us see the light 
>>> and now we have a proper fix in SVN trunk and in all branches going back 
>>> to 4.10.x. See: http://trac.osgeo.org/mapserver/ticket/2943#comment:9 
>>>
>>> Because of this, we need to decide on producing new releases:
>>>
>>> *** Vote #1 ***
>>> I propose that we release MapServer 5.4.2 now with the fixes currently 
>>> in SVN branch-5-4.
>>>
>>> I open the vote with my +1 to release 5.4.2 now.
>>>
>>>
>>> *** Vote # 2 ***
>>> Then we also need to decide whether we also issue new releases for the 
>>> other branches which were released with the incomplete fix back in 
>>> April. That would mean releasing 5.2.3 and 4.10.5.
>>>
>>> I'll vote +1 to also release 5.2.3 and 4.10.5.
>>>
>>>
>>> Daniel
>> 
>