[ANNOUNCE] Gerrit 2.15.19 w/ accounts security fix on HTTP

25 views
Skip to first unread message

Luca Milanesio

unread,
Jun 8, 2020, 7:49:33 AM6/8/20
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Gerrit version 2.15.19 is now available.
This release includes security fixes for the Issue 12717 (Deny access over HTTP for disabled accounts).
If you are using websession-flatfile or high-availability plugins with Gerrit, you must upgrade them too to the latest version of the stable-2.15 branch.

Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/2.15.html#21519

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/2.15.19/index.html

Log of changes since 2.15.19:
https://gerrit.googlesource.com/gerrit/+log/v2.15.18..v2.15.19?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-2.15.19.war

SHA1:
6fd0ac87bbc31361b7cab73b8e080244ecfc0fd2

SHA256:
9ba266aa3e49ce2bb0757867151f85c688da698a6ef4f806d7b540564c624e58

MD5:
121844fccdf227ae24ab700681c46081

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md
-----BEGIN PGP SIGNATURE-----
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=ngqx
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Jun 9, 2020, 5:44:09 PM6/9/20
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Binary packages (Deb / Rpm) of Gerrit version 2.15.19 are now available.
=======================================================================

How to install/upgrade: 2.15.19
*******************************

If you have a previous version of Gerrit 2.1x installed via native packages:

(on Debian / Ubuntu)
apt-get update & apt-get install gerrit=2.15.19-1

(on CentOS / RedHat)
yum clean all && yum install gerrit-2.15.19-1

(on Fedora)
dnf clean all && dnf install gerrit-2.15.19-1

If it is a new installation and you don't have the GerritForge/BinTray repositories
configured, please follow the instructions at:
http://gitenterprise.me/2015/02/27/gerrit-2-10-rpm-and-debian-packages-available/

Docker images:
**************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published
2.15.19 => 2.15.19-centos7
2.15.19-centos7
2.15.19-ubuntu16

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package:
*********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-2.15.19.pkg

SHA1:
3952c691a7ce6116095e7058112949e04d4a7fb4

SHA256:
4712dc11d07eed8ff6ca40214d1d4182c53ef4c519525dee265cbe28481c1494

-----BEGIN PGP SIGNATURE-----
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=tOod
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages