[ANNOUNCE] Gerrit 3.8.8 w/ Security Fixes

56 views
Skip to first unread message

Luca Milanesio

unread,
Aug 8, 2024, 11:24:02 AM8/8/24
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Gerrit version 3.8.8 is now available.

Includes security fixes;
please see the release notes for details.

*NOTE*: Gerrit 3.8.7 has been withdrawn and therefore was not announced.

Release Notes:
https://www.gerritcodereview.com/3.8.html#388

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.8.8/index.html

Log of changes since 3.8.6:
https://gerrit.googlesource.com/gerrit/+log/v3.8.6..v3.8.8?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.8.8.war

SHA1:
0a8b867ea59b8a9cb973472a7bb05b55d69aa500

SHA256:
4a00db90e76c40fdd911cb608f589c7d896f76605639c86ca584a02433947529

MD5:
cfaca14bb256af5d0d0c768ad096f6fb

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=noF3
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Aug 8, 2024, 11:56:39 AM8/8/24
to Repo and Gerrit Discussion, Luca Milanesio
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.8.8 have been released
=========================================================================

How to install/upgrade: 3.8.8
*****************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update && apt-get install gerrit=3.8.8-1

(on AlmaLinux / RedHat)
yum clean all && yum install gerrit-3.8.8-1

(on Fedora)
dnf clean all && dnf install gerrit-3.8.8-1

If it is a new installation and you don't have the GerritForge repositories
configured, or if you are upgrading to ARM-64, please follow the instructions at:
https://gitenterprise.me/2022/11/23/arm-64-welcomes-gerrit-code-review/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published for amd64 and arm64:
3.8.8 => 3.8.8-almalinux9
3.8.8-almalinux9
3.8.8-ubuntu22

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.8.8.pkg

SHA1:
ad88bb8eb372932db4326c6f19f4b8a6910d3244

SHA256:
c03ad3ea8ac8a87fdb70fd037bccc412e2699694e71c357cc734446ae0cafabf

-----BEGIN PGP SIGNATURE-----
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=odeq
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages