[ANNOUNCE] Gerrit 3.9.4 w/ Security Fixes

124 views
Skip to first unread message

Luca Milanesio

unread,
Apr 13, 2024, 7:34:42 PM4/13/24
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.9.4 is now available.

Includes security fixes;
please see the release notes for details.

*NOTE*: Gerrit 3.9.3 has been withdrawn and therefore was not announced.

Release Notes:
https://www.gerritcodereview.com/3.9.html#394

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.9.4/index.html

Log of changes since 3.9.2:
https://gerrit.googlesource.com/gerrit/+log/v3.9.2..v3.9.4?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.9.4.war

SHA1:
756e09e1d7693f00d269997919c9f3f0872b1dfb

SHA256:
a63ad65df69ed66a262514df7483da96c2f29c01b0aa9d55b57f4cf6eab32703

MD5:
393de27cb4648a8cc3a1964d1462e72d

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=HlyC
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Apr 13, 2024, 7:55:20 PM4/13/24
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.9.4 have been released
=========================================================================

How to install/upgrade: 3.9.4
*****************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update && apt-get install gerrit=3.9.4-1

(on AlmaLinux / RedHat)
yum clean all && yum install gerrit-3.9.4-1

(on Fedora)
dnf clean all && dnf install gerrit-3.9.4-1

If it is a new installation and you don't have the GerritForge repositories
configured, or if you are upgrading to ARM-64, please follow the instructions at:
https://gitenterprise.me/2022/11/23/arm-64-welcomes-gerrit-code-review/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published for amd64 and arm64:
latest => 3.9.4
3.9.4 => 3.9.4-almalinux9
3.9.4-almalinux9
3.9.4-ubuntu22

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.9.4.pkg

SHA1:
c52b0801019bc42feeade03216126468d5c6ebe3

SHA256:
2af0dd632720a26d9b1d78db865dd367b556a0cb45565de33afb86c6078ab144

-----BEGIN PGP SIGNATURE-----
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=inbc
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages