[ANNOUNCE] Gerrit 3.6.2 w/ Security Fixes

[Luca Milanesio]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.6.2 is now available.

This release includes many bug fixes, improvements since and security fixes since 3.6.1.
Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.6.html#362

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.6.2/index.html

Log of changes since 3.6.1:
https://gerrit.googlesource.com/gerrit/+log/v3.6.1..v3.6.2?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.6.2.war

SHA1:
daa818070a171e05bc29feef2a55ba959d4bcfc1

SHA256:
eb3a93ab343d6e55980921dd2c9403e5762b310f790ee187d6c81d3c0689503d

MD5:
89843811393f895175540da9c67eb04d

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=5fhZ
-----END PGP SIGNATURE-----

[Luca Milanesio]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.6.2 are now available
=======================================================================

How to install/upgrade: 3.6.2
*******************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update && apt-get install gerrit=3.6.2-1

(on AlmaLinux / RedHat)
yum clean all && yum install gerrit-3.6.2-1

(on Fedora)
dnf clean all && dnf install gerrit-3.6.2-1

NOTE: If you have installed the RCs via native packages, you would need
to remove the pre-released package and then install the official released
package above.

If it is a new installation and you don't have the GerritForge repositories
configured, please follow the instructions at:
http://gitenterprise.me/2015/02/27/gerrit-2-10-rpm-and-debian-packages-available/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published
latest => 3.6.2
3.6.2 => 3.6.2-almalinux8
3.6.2-almalinux8
3.6.2-ubuntu20

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.6.2.pkg

SHA1:
20f44bf07d3da765bc4732f6cf2cecabbdc26997

SHA256:
407fb2b7f5cee805b0db99bef35298239c88317a68aa503fd87e7679938e5c98

-----BEGIN PGP SIGNATURE-----
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=v6JW
-----END PGP SIGNATURE-----

[Björn Pedersen]

lucamilanesio schrieb am Samstag, 8. Oktober 2022 um 03:56:40 UTC+2:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.6.2 is now available.

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.6.2.war

The checksums do not match: 

 

SHA1:
daa818070a171e05bc29feef2a55ba959d4bcfc1

 sha1sum gerrit-3.6.2.war

c237f92fa0ecffacfb7f9a80d82f0cdbd3fabff4  gerrit-3.6.2.war

SHA256:
eb3a93ab343d6e55980921dd2c9403e5762b310f790ee187d6c81d3c0689503d

sha256sum gerrit-3.6.2.war

fce724403eabf5648cc7d56de38785a73b1a707e9531ae8d257eac8f61c1412b  gerrit-3.6.2.war

 

MD5:
89843811393f895175540da9c67eb04d

md5sum gerrit-3.6.2.war
4ea6777bb73fa9c77c5db2a607a6e170  gerrit-3.6.2.war

 

[Luca Milanesio]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.6.2 is now available, please discard the previous notification.

This release includes many bug fixes, improvements since and security fixes since 3.6.1.
Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.6.html#362

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.6.2/index.html

Log of changes since 3.6.1:
https://gerrit.googlesource.com/gerrit/+log/v3.6.1..v3.6.2?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.6.2.war

SHA1:

c237f92fa0ecffacfb7f9a80d82f0cdbd3fabff4

SHA256:
fce724403eabf5648cc7d56de38785a73b1a707e9531ae8d257eac8f61c1412b

MD5:
4ea6777bb73fa9c77c5db2a607a6e170

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=jNma
-----END PGP SIGNATURE-----

> --
> --
> To unsubscribe, email repo-discuss...@googlegroups.com
> More info at http://groups.google.com/group/repo-discuss?hl=en
>
> ---
> You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/repo-discuss/6d8130a4-1cc0-453f-b8e2-1e957ef04e27n%40googlegroups.com.

[Luca Milanesio]

On 12 Oct 2022, at 11:11, 'Björn Pedersen' via Repo and Gerrit Discussion <repo-d...@googlegroups.com> wrote:

lucamilanesio schrieb am Samstag, 8. Oktober 2022 um 03:56:40 UTC+2:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.6.2 is now available.

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.6.2.war

The checksums do not match: 

Thanks for the feedback, I’ve re-notified with the correct ones.

Luca.

 

SHA1:
daa818070a171e05bc29feef2a55ba959d4bcfc1

 sha1sum gerrit-3.6.2.war

c237f92fa0ecffacfb7f9a80d82f0cdbd3fabff4  gerrit-3.6.2.war

SHA256:
eb3a93ab343d6e55980921dd2c9403e5762b310f790ee187d6c81d3c0689503d

sha256sum gerrit-3.6.2.war

fce724403eabf5648cc7d56de38785a73b1a707e9531ae8d257eac8f61c1412b  gerrit-3.6.2.war

 

MD5:
89843811393f895175540da9c67eb04d

md5sum gerrit-3.6.2.war
4ea6777bb73fa9c77c5db2a607a6e170  gerrit-3.6.2.war