[ANNOUNCE] Gerrit 3.0.10 w/ accounts security fix on HTTP

21 views
Skip to first unread message

Luca Milanesio

unread,
Jun 8, 2020, 7:57:11 AM6/8/20
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Gerrit version 3.0.10 is now available.
This release includes security fixes for the Issue 12717 (Deny access over HTTP for disabled accounts).
If you are using websession-flatfile, websession-broker or high-availability plugins with Gerrit, you must upgrade them too to the latest version of the stable-3.0 branch.

Please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.0.html#3010

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.0.10/index.html

Log of changes since 3.0.10:
https://gerrit.googlesource.com/gerrit/+log/v3.0.9..v3.0.10?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.0.10.war

SHA1:
e8ab77f1c74fe0da081a938e58abe51c9f13c4e9

SHA256:
0f19f230dcd473f5abe46ea59844cffc48a3dd0969166ab6dff5374c20c77c85

MD5:
e7bce26f5af7fbc280e611b65524afc7

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md
-----BEGIN PGP SIGNATURE-----
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=U7ny
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Jun 9, 2020, 5:49:02 PM6/9/20
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Binary packages (Deb / Rpm) of Gerrit version 3.0.10 are now available
=====================================================================

How to install/upgrade: 3.0.10
*****************************

If you have a previous version of Gerrit 2.1x installed via native packages:

(on Debian / Ubuntu)
apt-get update & apt-get install gerrit=3.0.10-1

(on CentOS / RedHat)
yum clean all && yum install gerrit-3.0.10-1

(on Fedora)
dnf clean all && dnf install gerrit-3.0.10-1

If it is a new installation and you don't have the GerritForge/BinTray repositories
configured, please follow the instructions at:
http://gitenterprise.me/2015/02/27/gerrit-2-10-rpm-and-debian-packages-available/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published
3.0.10 => 3.0.10-centos7
3.0.10-centos7
3.0.10-ubuntu18

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.0.10.pkg

SHA1:
09b9bd3270a2f6d8497e51583c6b7283e2069ef0

SHA256:
36fc27362ad584b40dd7ec9afbc768d0aed384f210a6a8675e741d4be8bb05f8

-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEETYfnMJcTx9Zrd8+/cHkSkHVi6ksFAl7gA4YACgkQcHkSkHVi
6ktqGwwAmu1tnXeCp6qR7F2aFKIz1yhT4WH8Ew+ew90PinmF3LGHOPU3rdXqY829
XpEMQ/rvbx2qMslxOtkHy7+vUbqFSqB6o++Y5+C2xsa5U4rNODWPPKQjH3JQFaWM
smQohOB9f9SQhNLra/ORvQBmPFqYam668y7+EyZxRIs5dk551CYyozXk5we1iwK9
B9Ab4WAg80IN6WIeNfHKEXS0cLiYLHbW09o6cXCP677qZwizjZ8UrHJaz3pS0R38
BMQQ3NE3cqaQZ4hdmAwjKpfslyrbCU/ewizoGIvSu7JoZVaYfQEJEL9nlo/Ptg5+
NOXBXwfbxAx+6jws99XvD1nSxE2p2tVTrwbJeeIjb2Ic/1Zb5sE3T+ofXTGTw+4h
D9pX/ORmNPqlFYh5xesYgvyxEOvjkUwMhg4WFFgYHMsgo1NT9XFRgBHwClkxLZQE
cEPR3tz9RvNDq8LUmWYK/17vCyRFeaXV03eHXBmmuikO1cwah+EaAOplijSByqhE
Z6hN/c6b
=d3pf
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages