Hello Apache Geode Developer Community,

This is a follow-up regarding the vote for Apache Geode version 2.0.1.RC1.

It is disheartening that the voting deadline of 3 PM PST on Friday, March 20, 
2026 has passed without any votes, especially given the community effort 
invested in this release.

In particular, this release includes several high-impact security remediations 
the community recently completed:
-Critical security patches: CVE-2024-12798, CVE-2024-12801, CVE-2025-11226, 
CVE-2026-1225 (GEODE-10555 #7982)
-Man-in-the-middle protection: CVE-2025-68161 (GEODE-10543 #7975)
-Authentication bypass remediation: CVE-2026-23903 (GEODE-10559 #7986)
-Denial of service remediation: Allocation of Resources Without Limits or 
Throttling (GEODE-10565 #7990)
-Security bypass and DoS remediation: CVE-2026-1605 and CVE-2025-11143 
(GEODE-10568 #7992)
-Endpoint Request security fix: CVE-2025-22235 (GEODE-10572 #7993)

I would like to encourage PMC and dev community members to please take a few 
minutes to review the release candidate and participate in this important vote. 
The developer community has worked very hard on this release to remediate 
critical security vulnerabilities and improve overall stability, and your 
review and vote would be sincerely appreciated.

Best regards,
Jinwoo Hwang (he/him/his)
SAS® Research and Development
http://JinwooHwang.com<http://jinwoohwang.com/>

From: Jinwoo Hwang <[email protected]>
Date: Saturday, March 14, 2026 at 5:58 AM
To: [email protected] <[email protected]>
Subject: [VOTE] Apache Geode 2.0.1.RC1

Hello Apache Geode Developer Community,

This is a release candidate for Apache Geode version 2.0.1.RC1.
Thanks to all the community members for their contributions to this release!

Please do a review and give your feedback, including the checks you performed.

Voting deadline:
3PM PST Friday, March 20 2026.

Please note that we are voting upon the source tag:
rel/v2.0.1.RC1

Release notes:
https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-2.0.1

Source and binary distributions:
https://dist.apache.org/repos/dist/dev/geode/2.0.1.RC1/

Maven staging repo:
https://repository.apache.org/content/repositories/orgapachegeode-1150

GitHub:
https://github.com/apache/geode/tree/rel/v2.0.1.RC1
https://github.com/apache/geode-examples/tree/rel/v2.0.1.RC1
https://github.com/apache/geode-native/tree/rel/v2.0.1.RC1
https://github.com/apache/geode-benchmarks/tree/rel/v2.0.1.RC1

Geode's KEYS file containing PGP keys we use to sign the release:
https://github.com/apache/geode/blob/develop/KEYS

Command to run geode-examples:
./gradlew 
-PgeodeReleaseUrl=https://dist.apache.org/repos/dist/dev/geode/2.0.1.RC1 
-PgeodeRepositoryUrl=https://repository.apache.org/content/repositories/orgapachegeode-1150
 build runAll

Best regards,
Jinwoo Hwang (he/him/his)
 SAS® Research and Development
http://JinwooHwang.com<http://jinwoohwang.com/>

Reply via email to