[ANNOUNCE] Gerrit 3.4.1 w/ Security Fixes

106 views
Skip to first unread message

Luca Milanesio

unread,
Aug 20, 2021, 6:46:31 PM8/20/21
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.4.1 is now available.

This release includes important fix for the security Issue #14732 and #7282
Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.4.html#341

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.4.1/index.html

Log of changes since 3.4.0:
https://gerrit.googlesource.com/gerrit/+log/v3.4.0..v3.4.1?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.4.1.war

SHA1:
eca5382e9604f2c6b6d9032022bed949c3bbf1e6

SHA256:
a47a2660a62957ad1220a2e8493e72f62dc5a6b315d551b2fb91a3869461054a

MD5:
195a360d0b8988cb17eb0f29bb48f67e

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEmCU49QQ43XtIE8giC0731aK2mH4FAmEgMI4ACgkQC0731aK2
mH4OrQ//aUlJfB9hSOqBElhRJhoVZnhGLE3sTbWjNRSy10LotIWJDaXhpRD8w5EI
gxfReG+HXapNBtTW1EGU7IHmns6ImnBw5NuPg8Lm7Bv6krdzLeiDa9hTP9lF5wVe
ePTO7kguQCW4ZnPw2t7+N0USLjPVONKrJtdzsIm9d1fM0oX07wWyB1TkLQ0WQbcQ
dQPJ+aLERyRID2nSKtwudPLWNDjLQZP3c/sStuR02T1cZSun0rPcINU6+iCcIJ0o
uHa6fJp8SNsmT+KYlRlOPTmAXXcZLw5FRGkVpuYMvQ7JOPd01HP7wcXRbu/6fl6j
c6n+tO41XJgWaeN5RkpERZ35gVi4EU5IuV64qrKviAePiepdfGuq48w4efe3wPsf
hbTprvxsHgHMlJbvVibGwnIfrOiQngLj08ddwkFSsDvK+EGJYmPbQ1wK9WYfifG9
XmFyftlJjg2FGBMgrW5+qwg1N7vJbL9ZwLlX5B9z/gvpZFaOAdw5UKIYbEOAesGS
cuf6NK0rabsHoKD4dkcD0hfoS6avYI9uuMV1c/L+Qd8bmuEcr1OolYJ9IrGPncdd
FEeuKbMjA5cqJEZ4ZH+R3g/5YEJvUCepP/7iyEm5HB+FBMkT5/qxvO1ls/ijUwc2
3DAKaOAp8j2XKpN1yWr3/IhGZoAa+8A5r4FwvmP5KDwDwkFvRww=
=v4NO
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Sep 2, 2021, 10:53:23 PM9/2/21
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.4.1 are now available
=====================================================================

How to install/upgrade: 3.4.1
*****************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update & apt-get install gerrit=3.4.1-1

(on CentOS / RedHat)
yum clean all && yum install gerrit-3.4.1-1

(on Fedora)
dnf clean all && dnf install gerrit-3.4.1-1

NOTE: If you have installed the RCs via native packages, you would need
to remove the pre-released package and then install the official released
package above.

If it is a new installation and you don't have the GerritForge/BinTray repositories
configured, please follow the instructions at:
http://gitenterprise.me/2015/02/27/gerrit-2-10-rpm-and-debian-packages-available/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published
latest => 3.4.1
3.4.1 => 3.4.1-centos8
3.4.1-centos8
3.4.1-ubuntu20

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.4.1.pkg

SHA1:
58586a51f708a4529d6e6aa0622bc10a1de2ab2e

SHA256:
6489b71408c6a2af2f1fd63a707cf1d8078ffe5d333166781198bb29a5715e37

-----BEGIN PGP SIGNATURE-----
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=Lp7s
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages