[ANNOUNCE] Gerrit 2.13.12 w/ JGit security fix

[Luca Milanesio]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerrit version 2.13.12 is now available. This release includes security fixes for git-upload-pack. Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/2.13.html#21312

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/2.13.12/index.html

Log of changes since 2.13.11:
https://gerrit.googlesource.com/gerrit/+log/v2.13.11..v2.13.12?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-2.13.12.war

SHA1:
755a949080e1b2a7b0fb8a4742dd3baceb8d1d4a

SHA256:
8b52e15f082ea0dea7f667f3d724db4cdd4edb5032a61a32f14b071c37ba6e9f

MD5:
6049d4992b2194e2ae9c563440b3a396

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJcOJ8AAAoJEB//ql4Ycfd1uloH+gPIFfSi0/B91bFn26+Amz3P
MnAdg3pRnmc7vlxrNobsOoyld7dVrozsUMhwGOWONd0rJpZeU3PQx012PEoTffpV
iDZuth8AenO/f6kK0Eb/PqRwyDpwDtGloZKagTrJqD+XUyKrwd6J4ej2cWvJRO7U
W5b2rkAWDtNrc3sQyijZgTLE8OeSyvP7UYGSo4XLvfd+XLSWGrEWtJbFR0N/8VgQ
TPfiDGcp0VrY851KWsgGbYX/X7vtrqEqxYbeWm7swPqvki7KqT6ZTpGkqrOn+mka
DZEXpHHpYsQ0sSxmogQXvJFkM+VAhNyr5lis98hAVxiIAm2hvp2p6Sd8IR9Cwpo=
=axbu
-----END PGP SIGNATURE-----

[Luca Milanesio]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Binary packages (Deb / Rpm) of Gerrit version 2.13.12 are now available.
=======================================================================

How to install/upgrade: 2.13.12
******************************

If you have a previous version of Gerrit 2.1x installed via native packages:

(on Debian / Ubuntu)
apt-get update & apt-get install gerrit=2.13.12-1

(on CentOS / RedHat)
yum clean all && yum install gerrit-2.13.12-1

(on Fedora)
dnf clean all && dnf install gerrit-2.13.12-1

If it is a new installation and you don't have the GerritForge/BinTray repositories
configured, please follow the instructions at:
http://gitenterprise.me/2015/02/27/gerrit-2-10-rpm-and-debian-packages-available/

Docker images:
**************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published
2.13.12 => 2.13.12-centos7
2.13.12-centos7
2.13.12-ubuntu16

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package:
*********************

MacOS Gerrit native installer is available for download at:

https://dl.bintray.com/gerrit/mac/gerrit-installer-2.13.12.pkg
https://gerritforge.com/gerrit/mac/gerrit-installer-2.13.12.pkg

SHA1:
4c611a4354e00d3468fc7247427ec84f5cc49da4

SHA256:
3a6ea6be1c982adb762720e63280e95a42c554f03e14e6e5f709e91e4c289b6d

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJcOd6rAAoJEB//ql4Ycfd1jtMIAKRcmCHHrFZW61PJN73K1r3W
KsswZ0h3qia1Z1vUijNfElh0q2tWZZbnhvqNFM2wj5c8ZhsxqonLNByjQRBWB6db
pAwrS+H/h8wH6GyDuGLfir1R855ctYxYJBlgWfuHAw448Hq9XV/Z8MDyW3X0ebBs
Fh3mkOL7pOOfpBA+9A5cqZFLlmDmg4XX2JuJ9bArUHg2Mb+TukNWLR+gawPcXzbf
yU84E/4ncVCQNfZwqaDGAo6bPnlujUyP1PQXwtkA5CTbb4hA4Gi5jDmfcTpxHLH3
CT7qvm2Pe6RBQWfFbakWOOhMtZlhcZku9F8dVCk2Ysa9nEP2MBRf0Rx6+QpxTd8=
=jZhd
-----END PGP SIGNATURE-----