Stefan Sperling wrote on Fri, 30 Jun 2017 16:10 +0200: > We need an additional vote now in order to roll a 1.8 tarball today. > > Can anyone help? > > * r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, > r1786515, r1794611, r1800387 > Make FSFS consistency no longer depend on hash algorithms. > Justification: > This eliminates any existing or future FSFS vulnerability due to > attacks on MD5 or SHA1. > Branch: > ^/subversion/branches/1.8.x-strict-rep-sharing > Notes: > Depends on r1759116 for correctness with older APR. > While the backport code is very close to the /trunk changes, it is > easier to review them as r1787637, r1787638 and r1787652 on the branch. > [Will create a text conflict with the r1785053 backport. Depending on > which change gets merged first, the respective other must be updated.] > r1800387 did the above merge and resolved the text conflicts. > Votes: > +1: stefan2, stsp > -1: rhuijben (Until some additional fix like on 1.9 is applied. After > that +1 > on the current changes)
Note that stefan2's and rhuijben's votes should be marked "(without r1800387)".