of the fixes needed on the Apache SSHD/Mina layer to resolve well-known deadlock issues. HTH Luca. [1] https://groups.google.com/g/repo-discuss/search?q=ssh%20deadlock >

On Friday, December 6, 2024 at 12:58:50 AM UTC-8 Luca Milanesio wrote: Hi Aaron, Thanks for digging into it ! > On 6 Dec 2024, at 01:30, 'Aaron

> Includes security fixes; >> please see the release notes for details. > Hello, > > The 3.10.3 release notes do not mention any security fix while 3.11 has three

> Includes security fixes; >>> please see the release notes for details. >> >> Looking at the release notes there were security fixes included in >>

. Includes security fixes; please see the release notes for details. Release Notes: https://www.gerritcodereview.com/3.8.html#3810 Documentation: http://gerrit-documentation

* of security fixes; > therefore you should also give more reasons to your top management for > upgrading :-) > > > We are upgrading to latest version :), but since our

> Includes security fixes; > please see the release notes for details. > > Release Notes: > https://www.gerritcodereview.com/3.8.html#389 > > Documentation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.10.2 have been released ===============================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.9.7 have been released ================================

found the security issue and fixed it in Gerrit where we were checking if the SHA1 requested was actually valid and reachable or not: before that fix, the problem did not happen also with

On Friday, August 9, 2024 at 4:53:52 AM UTC+1 Luca Milanesio wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of

> > Security issues when running Gerrit on Windows Server (ESC of July 23) > --- > Gerrit Code Review is not actively tested, verified and supported on Microsoft Windows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.9.6 have been released ================================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.8.8 have been released ================================

[1] https://www.gerritcodereview.com/3.3.html#security-fixes [2] http://gerrit-documentation.storage.googleapis.com/Documentation/3.3.1/access-control.html

> Includes security fixes; > please see the release notes for details. > > *NOTE*: Gerrit 3.9.4 has been withdrawn and therefore was not announced. > > 3.9.4 was

. Includes security fixes; please see the release notes for details. *NOTE*: Gerrit 3.10.0-rc1 has been withdrawn and therefore was not announced. You may find the complete 3.10 release

. Includes security fixes; please see the release notes for details. *NOTE*: Gerrit 3.9.3 has been withdrawn and therefore was not announced. Release Notes: https://www.gerritcodereview

. Includes security fixes; please see the release notes for details. Release Notes: https://www.gerritcodereview.com/3.8.html#385 Documentation: http://gerrit-documentation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.9.2 have been released ================================

> Includes security fixes for SSHD (see CVE-2023-48795). > Please see the release notes for details. > > > Many thanks to the Gerrit team for timely releases and a quality

Hi all, the Gerrit v3.7.7 was impacted by an incorrect bump of the JGit module [1], this has now been fixed in stable-3.7 and I will announce tomorrow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.9.1 have been released ================================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.9.0 have been released ================================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.8.3 have been released ================================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.7.6 have been released ================================

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.6.8 have been released ================================

miss available fixes (also some security fixes) and improvements. See https://www.gerritcodereview.com/3.4.html > Could this be the reason for the problem, or is there another

> On 18 Jul 2023, at 00:20, 'Aaron Smith' via Repo and Gerrit Discussion wrote: > > No, I had followed the links from the release

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Binary packages (Deb / Rpm) of Gerrit version 3.5.6 are now available =================================