[Reviewers] Mercurial 4.6 Release *delayed*: Expect release on 2018-06-07

[Gregory Szorc]

On Mon, Apr 30, 2018 at 7:42 AM, Augie Fackler <raf at durin42.com> wrote:

> Typo in the subject, of course: that should read 2018-05-07, that is, May
> 7th is correct.
>
> Sorry!
>
>
> On Apr 30, 2018, at 10:16, Augie Fackler <raf at durin42.com> wrote:
>
> (bcc: security@, reviewers@, mercurial-packaging@, mercurial-devel@)
>
> Howdy folks,
>
> We've got a late development on a security patch for Mercurial and have
> decided to just get the fix in 4.6, which means we're going to delay the
> release to May 7th to give our pre-notification customers time to react.
>
> Getting CVEs has been too hard recently, so I've obtained identifiers from
> http://www.openwall.com/ove/ instead for these issues:
>
> OVE-20180430-0001
> OVE-20180430-0002
>
> mercurial-security-announce@ folks, watch for another email later today
> with patches attached.
>
>
After further review of the problem area, we're not confident that our
planned fixes are comprehensive enough. We've decided to hold off on the
security release until a later date. We will tentatively release the
security fixes at the beginning of June to coincide with the planned 4.6.1
release.

We plan to release 4.6 on time (hopefully in the next ~24 hours), assuming
outstanding release blockers are fixed.

I apologize for any confusion this has caused.

Please email security at mercurial-scm.org (a private list) if you have any
questions or concerns.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mercurial-scm.org/pipermail/mercurial-reviewers/attachments/20180430/123ebcb6/attachment-0002.html>