[ANNOUNCE] Gerrit 3.9.2 w/ Security Fixes

153 views
Skip to first unread message

Luca Milanesio

unread,
Mar 8, 2024, 10:03:58 PM3/8/24
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.9.2 is now available.

Includes security fixes for SSHD (see CVE-2023-48795).
Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.9.html#392

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.9.2/index.html

Log of changes since 3.9.1:
https://gerrit.googlesource.com/gerrit/+log/v3.9.1..v3.9.2?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.9.2.war

SHA1:
11da5df84dfea80f7d70f3b552a05d6420323556

SHA256:
2acbaec0529da571c3540659d89897efcd6682a0d0cb21082e8e2598d9fef181

MD5:
22d9f357d04846f0501dad9d19ce5340

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=Xt61
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Mar 8, 2024, 10:09:29 PM3/8/24
to Repo and Gerrit Discussion
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.9.2 have been released
=========================================================================

How to install/upgrade: 3.9.2
*****************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update && apt-get install gerrit=3.9.2-1

(on AlmaLinux / RedHat)
yum clean all && yum install gerrit-3.9.2-1

(on Fedora)
dnf clean all && dnf install gerrit-3.9.2-1

If it is a new installation and you don't have the GerritForge repositories
configured, or if you are upgrading to ARM-64, please follow the instructions at:
https://gitenterprise.me/2022/11/23/arm-64-welcomes-gerrit-code-review/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published for amd64 and arm64:
latest => 3.9.2
3.9.2 => 3.9.2-almalinux9
3.9.2-almalinux9
3.9.2-ubuntu22

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.9.2.pkg

SHA1:
2cd11d0c898862ff1d08a41b20c05102686b79e4

SHA256:
86bf8f9d04553e7df5ca3b3ee03c09f229d119902217a5c4119b61547c9d62a1

-----BEGIN PGP SIGNATURE-----
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=wS0H
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages